last executing test programs:

4m20.297509545s ago: executing program 1 (id=228):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

4m20.269150065s ago: executing program 1 (id=229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000880), 0x0}, 0x20)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x70}}, 0x0)

4m19.982525134s ago: executing program 1 (id=240):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$cgroup_int(r1, 0x0, 0x0)

4m19.948623194s ago: executing program 1 (id=242):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xffff8001, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002e000000760000000000000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xea, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff6c, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r5 = epoll_create1(0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9)

4m19.801837604s ago: executing program 1 (id=246):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x6c}, 0x1, 0xba01}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000980)='./file1\x00', 0x80989a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f0000000dc0)="$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")
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7, {0x0, <r8=>0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
r9 = getgid()
getresgid(&(0x7f0000000280), &(0x7f0000000400)=<r10=>0x0, &(0x7f0000000440))
fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32, @ANYRES8=r4, @ANYRES32, @ANYRES16, @ANYRES32=r8, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r9, @ANYBLOB="08000500155c5cb7ba8425dada432d7c4d9634c0341abcf3407888f4be69f805456565f718027626d4d0c8f9139100"/62, @ANYRES32, @ANYBLOB="0859ad1da200000000", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000200000000002000000000000000"], 0x6c, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

4m19.630299193s ago: executing program 1 (id=254):
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f00000018c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000004700)=[{0x48, 0xfe, 0x0, 0x20000003}, {0x6, 0x40, 0xfb, 0xbdea}]})
write$ppp(r2, &(0x7f0000000200)="7489", 0x2)
eventfd2(0x0, 0x80001)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

4m19.630155812s ago: executing program 32 (id=254):
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f00000018c0))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000004700)=[{0x48, 0xfe, 0x0, 0x20000003}, {0x6, 0x40, 0xfb, 0xbdea}]})
write$ppp(r2, &(0x7f0000000200)="7489", 0x2)
eventfd2(0x0, 0x80001)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

3.05027592s ago: executing program 5 (id=5891):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x6c}, 0x1, 0xba01}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000980)='./file1\x00', 0x80989a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f0000000dc0)="$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")
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r7, {0x0, <r8=>0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
r9 = getgid()
getresgid(&(0x7f0000000280), &(0x7f0000000400)=<r10=>0x0, &(0x7f0000000440))
fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000010007000000000002000500", @ANYRES32, @ANYRES8=r4, @ANYRES32, @ANYRES16, @ANYRES32=r8, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r9, @ANYBLOB="08000500155c5cb7ba8425dada432d7c4d9634c0341abcf3407888f4be69f805456565f718027626d4d0c8f9139100"/62, @ANYRES32, @ANYBLOB="0859ad1da200000000", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="10000200000000002000000000000000"], 0x6c, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

2.877364709s ago: executing program 5 (id=5893):
r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000000)='$\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
close(r0)
socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
close_range(r6, 0xffffffffffffffff, 0x0)

2.860605369s ago: executing program 5 (id=5894):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @dev, 0x4}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
io_setup(0x1, &(0x7f0000000580)=<r4=>0x0)
r5 = epoll_create1(0x0)
epoll_wait(r5, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_create(0xb, 0x0, &(0x7f0000000400))
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4})
io_submit(r4, 0x1, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7fff, r3, 0x0, 0x0, 0x4, 0x0, 0x2, r3}])
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
sendmsg$nl_route(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x40, 0x3a}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0)

2.187308297s ago: executing program 2 (id=5898):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @dev, 0x4}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {r2}], 0x2, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r4 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
io_setup(0x1, &(0x7f0000000580)=<r5=>0x0)
r6 = epoll_create1(0x0)
epoll_wait(r6, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_create(0xb, 0x0, &(0x7f0000000400))
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4})
io_submit(r5, 0x1, &(0x7f0000000980)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7fff, r4, 0x0, 0x0, 0x4, 0x0, 0x2, r4}])
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r9=>0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
sendmsg$nl_route(r7, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x40, 0x3a}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0)

1.880380736s ago: executing program 5 (id=5908):
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xf92a, 0x9, 0x0, 0x5}, {0x5, 0xfd, 0xf2}, {0xfff9, 0x0, 0x1, 0xfffffffe}, {0x4b, 0x40, 0x9, 0x86}, {0xc, 0x40, 0x8, 0x7}]}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="010700000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
write(r0, &(0x7f0000000000)='\"', 0xfdef)

1.555732935s ago: executing program 4 (id=5914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu~-0\t||')
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x32, 0x1, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xfffffe19, 0x8, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000280)={0xfff, {{0xa, 0x4e20, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}}, {{0xa, 0x4e20, 0x7f, @local, 0x4}}}, 0x108)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.382420314s ago: executing program 4 (id=5918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001280)={0x274, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xced3a87}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "69d96a88391228bd1aecf4d9359e4cd3b375508d4479b7e888aa3b228580a3b4ffc14057141256f471dd3b2a1e560e46855dcb654c62fad10065fc2e07b93b2a965102c56f28e67f3c2a9acca7dfbd6d2a001abc52388a9ab553370a9a90ef4f41e17713169878460c99e290971143f637de50aeb231c2af1f8cf8cfac5da20e006a66105df815c4bf45c51207d85a2e126e13e0d8f875a347b39588cfa97e17ea7d98e13bc2baf9c63cf4c9e79fee1ac8da81abcf43355c7a9b97e0d99c1d49"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'p%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'TRACE\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'CT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'inlinecrypt'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "6f6ac20fa57912d32508128a88383d9c4bcccc039a33d51f604f763fcd0c0aa1006928f51f906c7367c5919d7b860a36084aab60aceb7fad699b9541513bd9f2c31f823eb2e2c49f6ab8d4752f6b67496d58284d229de8d07fe7a2144a644f7766fa061521892c5adca78847054a72e0498f0d0b613b1a3a2d1641dc16b9187cdd48e1c15c8fd861ee7706"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x10000014}, 0xc000)

1.353355184s ago: executing program 4 (id=5919):
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1, &(0x7f0000000100)={[], [{@smackfshat={'smackfshat', 0x3d, '.)\\}'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '],'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@audit}]}, 0x1, 0xb8e, &(0x7f00000017c0)="$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")
r1 = socket(0x1e, 0x5, 0x3)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000780)=@ethtool_flash={0x1f, 0x7, './file0\x00'}})
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x40000)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000240)=0x7fff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x5, &(0x7f00000002c0)=<r4=>0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
fchdir(r5)
statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240))
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="4200ffff0000", 0x6, 0x0, 0x0, 0x2}])
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080007009f5983db7813d9a997233806e48a5bcc84e54bd1f7c45ffd454ffa2a74817db73e1c2d597fb88078906008d8138eb144c9072b17deb6a7435c05d70f2bd21d2bd510bc3fb04a810548b5577bd6493a5381b9329175b7084da9747e80e9f9f13a665b3680f6a37ebb4cb90b1f5905fd2a", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x0)
r8 = eventfd(0x6)
r9 = eventfd(0x8)
r10 = eventfd2(0x40, 0x80801)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000a40)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r12}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x2000000, {0x0, 0x0, 0x7, 0x0, 0x40400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x17}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r15}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r16}, 0x10)
r17 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
readv(r17, &(0x7f0000001d00)=[{0x0}], 0x1)
io_submit(r4, 0x7, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000140)="c5e9ccd6d75789c305bb76ad3915eaf2df094be76890ebc3d693060a89ad9b197dc8b8167bcd9a70748a3219d732c644436e9d0da1d679ac83c01554d7bbc16c37fbdeae4d8230dd9989a300ccb0cc58d4c21c9e4b0718ecba877699f112a86c2b6cd7f47bd0b04103cb09ba76a071611c61a609a13b9eec957ca15aa66bbbb067534b9792c661ba680c64cd4bbd2f8f1afddbf1af448efab1f6222f2014331e6016e28bf8bd2efdd86de05f01f4e7dc659acf857c4214d3ac6e17be48e235d9455e760fee9d8f00c84c23172cdf3d", 0xcf, 0x80000000, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xd7, r7, &(0x7f00000002c0)="bc587ec97a8979ec8644652c3e1507ef5e6fbfd924ce562ffbb0b6fe8d25c7f660be91b0f4eb8f498b950f09c0f50436dd677fd94833aa442febd4d1479684254653106ecb8d2965f2a4e8aef9a0a6831e5d389ba6de8de938c171cbe084a7cc455091491df93293790f456ac2ccd23f648eacc0ad905164053eb8b80be96e8392c6720792bbb55cd618138a68f7764b0ea45229ddfaf9e065073958ad31b975ee36bfdf2bf1119b7d6f41fed02a737e5bc711de98", 0xb5, 0x0, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f00000003c0)="acadf0296368d6c25574c716d4b53aee67718677edc9cd2cd1ded14df6863861656a7e5b9215766f6788d0ee07161283462f60bb5bbfe96886757fddf34e4870c4029582c964bf0fe648a94fbf4b79c890e5f6e0e61bbac16c6973e29aeac041e161c6f755c1", 0x66, 0x3, 0x0, 0x0, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x6ae, r0, &(0x7f0000000480)="f5e8bc7777384c13e1b9a15c8c9f46040a44fba8234735cabc78cb1cc3dacd9cef8af18a03ab248f0d584512c4032d4aef393cbd352bb3b5a2e2f891242da3852df2de6fae34088560e4a49cc0cd0ed184fbd23a71399aa95ac49cfc02c3", 0x5e, 0x7c, 0x0, 0x1, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000540)="5c4f54fe508b3380149ec8abedbd23a4d30daf7391fa78c99f8752be24d24f2981ada28356855af0d027390a13c15647f131230212e875807cb7415493f66e87fe3ffd2c9950a7865f1053cfeb9225e70547be9fcafb4dfa478f9af835bf93e4f2915aa995105fb9211a805e0caf2a6d60debc88273eeb8ae34bdb9c746aeb1bafb3d735cafd08cc49eae822ae4fc4ff4831868bc70e12ef230f4caeae9ee4850f16d157bb935a9a", 0xa8, 0x3, 0x0, 0x3, r10}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000640)="344a8af9ff94fad01e5b8dafdec68a4a30bdf3c9bda17777bf3d58efdd7b2a2c1bdbaa1b102e23fdf51c7668a1702a5d41bf317c64f2ffbbdf142ec2f103821169572306aecfc6f3c9c7a39aa73c26bdf49f214d657abf38d6f17f582848305dee70c67519631dd4583ee1a1c672cb874c70c61a32df72bc62d06089ff4cd1172a22f1150454fac73f979a5e525bf79b3162733e528cfdfb702cf42a5bc0e3b3ab94a9b81ce5b8ca39b35ecabc991006e0aaf87de08868", 0xb7, 0x2, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x1, r16, &(0x7f0000000840)="ade9456f782e4f6f1423916c5ef73ba4850e048a34877136ad821df7b4239a071656921ea02ed3278582216f0210903ecbd18b62df49ecadd4ff76200c1c413f1fc82893510ac4bb1a207f5e2ec264a97b7a1dc626a2f822569afe43e304d0642b5b7919137b2fd46b40e33a059c688fb7ed14fb4a39b348040a5501ece9386004293aaa284fd1f212fa3c3a31caeb1b94e10138a55d2f1f464455ec1319232465fb261e20c51bee857d07b634c24c02c53b65c6dd051db61be416f1fbfac88ee7e28573f4795d91c892cf0ecee00e8204fb04b592d59be98300ab3c1d82b2b1b67db32a98c9340366", 0xe9, 0x7, 0x0, 0x3, r17}])

1.264724614s ago: executing program 4 (id=5920):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu~-0\t||')
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x32, 0x1, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xfffffe19, 0x8, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000280)={0xfff, {{0xa, 0x4e20, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}}, {{0xa, 0x4e20, 0x7f, @local, 0x4}}}, 0x108)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.232506364s ago: executing program 2 (id=5921):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x4}}}]}, 0x38}}, 0x8880) (fail_nth: 3)

1.193757314s ago: executing program 2 (id=5923):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000880), &(0x7f0000000680)}, 0x20)
syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10, 0x100}}}}}}}, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="bec3a7d76445f53cf6252b668806dcb8f04ea92cdba500db", @ANYRES16=r1], 0x48)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='percpu_destroy_chunk\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000e1090900010073797a3000000000090002"], 0x70}}, 0x0)

1.192787683s ago: executing program 0 (id=5924):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef)
fsopen(0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r0})

1.158119653s ago: executing program 0 (id=5926):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async)

1.102089273s ago: executing program 0 (id=5928):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu~-0\t||')
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x32, 0x1, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xfffffe19, 0x8, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000280)={0xfff, {{0xa, 0x4e20, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}}, {{0xa, 0x4e20, 0x7f, @local, 0x4}}}, 0x108)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.017687313s ago: executing program 5 (id=5932):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x1a0, 0x240, 0x240, 0x1a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0xffffff00, 0x0, 'ip_vti0\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x61}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x5]}, {0x0, [0x0, 0x0, 0x4], 0x0, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x140, 0x0, 0x140, 0xffffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x8, 0xd, [0x3, 0x3c, 0x33, 0x11, 0x10, 0xa, 0x1f, 0x2, 0x26, 0x8, 0xa, 0x34, 0x3b, 0x1d, 0x20, 0x2c], 0x1, 0x9, 0x1c}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x1}, {0x3, 0x2, 0x3}, 0xffffffff, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x2, 0x2, 0x3, 0x3, 0x6], 0x4, 0x4}, {0xffffffffffffffff, [0x3, 0x2, 0x5, 0x5, 0x4, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@delqdisc={0x7c, 0x25, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0xb, 0x10}, {0xfff2, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1ff, 0x9bc, 0x400, 0x2, 0x10, 0x1, 0x5e, 0xfffffff7, 0x1, 0xd68, 0xe, 0x1f, 0x6, 0x48, 0x9, 0x8000}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000280)={0xc, {"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", 0x1000}}, 0x1006)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000022408de1e285f2ba00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000340))
ptrace$poke(0x21, r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1)

950.029723ms ago: executing program 4 (id=5933):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x1000, 0x0)
write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000c4ff0c73b3a97a2cd229ba5db9b5c483e1c4a841e4dcd1147e563701933a22149177a61917d100"/66, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES32=r5, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10)
r9 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r11}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8aa, 0x4}, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000304efffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r13, @ANYBLOB="3bfc717e5290363b0e3d96d9b8e8a9044febb3622c4ee291099dda928e2f2160c65c097ee10c2f0b88867d78b1f609f527dac60bc23f2258345cf6840f4c1f06e017dbe13d817a5dc65d9ebbaeb9f97589ec1eff5f1408b3efc9fc1096f4ed5482572b7b5387921854fab19e91a0b06aa6d6d14c612b75c53cb53c7a1a4d1b8bac744fafb2f10a6eb896e21fd2b378f42aa795d8206138afb35f55f82d6b4e467a4cba46b3717e156c67fe7281126bc30a0c1d452e889573e101e27d601f24"], 0x44}}, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r14}, 0x10)
r15 = socket(0x10, 0x2, 0x0)
write(r15, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r15, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10)

899.200323ms ago: executing program 2 (id=5934):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r2}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300004004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x1, 0x6, 0xb, 0x1001, r3, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r6}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@delalloc}, {@nouser_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
getdents(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8, 0x143e00}, 0x140, 0x1, 0x43, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x2000000, 0x14002, 0x2, 0x3}, 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000000040))

784.907362ms ago: executing program 2 (id=5937):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)

734.146642ms ago: executing program 0 (id=5938):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='cachefiles_ondemand_fd_write\x00', r1, 0x0, 0x9}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000840)='kmem_cache_free\x00', r4}, 0x18)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

579.506251ms ago: executing program 3 (id=5944):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'dvmrp0\x00'})
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="e7ffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090"], 0x0)

519.866721ms ago: executing program 3 (id=5945):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', 0x0)

338.287551ms ago: executing program 3 (id=5946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0)

337.780811ms ago: executing program 3 (id=5947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="e7ffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090"], 0x0)

284.41714ms ago: executing program 3 (id=5948):
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1, &(0x7f0000000100)={[], [{@smackfshat={'smackfshat', 0x3d, '.)\\}'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '],'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@audit}]}, 0x1, 0xb8e, &(0x7f00000017c0)="$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")
r1 = socket(0x1e, 0x5, 0x3)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000780)=@ethtool_flash={0x1f, 0x7, './file0\x00'}})
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x40000)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000240)=0x7fff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x5, &(0x7f00000002c0)=<r4=>0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
fchdir(r5)
statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240))
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="4200ffff0000", 0x6, 0x0, 0x0, 0x2}])
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000080007009f5983db7813d9a997233806e48a5bcc84e54bd1f7c45ffd454ffa2a74817db73e1c2d597fb88078906008d8138eb144c9072b17deb6a7435c05d70f2bd21d2bd510bc3fb04a810548b5577bd6493a5381b9329175b7084da9747e80e9f9f13a665b3680f6a37ebb4cb90b1f5905fd2a", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x0)
r8 = eventfd(0x6)
r9 = eventfd(0x8)
r10 = eventfd2(0x40, 0x80801)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000a40)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r12}, 0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x2000000, {0x0, 0x0, 0x7, 0x0, 0x40400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x17}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r15}, @IFLA_HSR_SLAVE2={0x8, 0x2, r15}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r16}, 0x10)
r17 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
readv(r17, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2)
io_submit(r4, 0x7, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000140)="c5e9ccd6d75789c305bb76ad3915eaf2df094be76890ebc3d693060a89ad9b197dc8b8167bcd9a70748a3219d732c644436e9d0da1d679ac83c01554d7bbc16c37fbdeae4d8230dd9989a300ccb0cc58d4c21c9e4b0718ecba877699f112a86c2b6cd7f47bd0b04103cb09ba76a071611c61a609a13b9eec957ca15aa66bbbb067534b9792c661ba680c64cd4bbd2f8f1afddbf1af448efab1f6222f2014331e6016e28bf8bd2efdd86de05f01f4e7dc659acf857c4214d3ac6e17be48e235d9455e760fee9d8f00c84c23172cdf3d", 0xcf, 0x80000000, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xd7, r7, &(0x7f00000002c0)="bc587ec97a8979ec8644652c3e1507ef5e6fbfd924ce562ffbb0b6fe8d25c7f660be91b0f4eb8f498b950f09c0f50436dd677fd94833aa442febd4d1479684254653106ecb8d2965f2a4e8aef9a0a6831e5d389ba6de8de938c171cbe084a7cc455091491df93293790f456ac2ccd23f648eacc0ad905164053eb8b80be96e8392c6720792bbb55cd618138a68f7764b0ea45229ddfaf9e065073958ad31b975ee36bfdf2bf1119b7d6f41fed02a737e5bc711de98", 0xb5, 0x0, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f00000003c0)="acadf0296368d6c25574c716d4b53aee67718677edc9cd2cd1ded14df6863861656a7e5b9215766f6788d0ee07161283462f60bb5bbfe96886757fddf34e4870c4029582c964bf0fe648a94fbf4b79c890e5f6e0e61bbac16c6973e29aeac041e161c6f755c1", 0x66, 0x3, 0x0, 0x0, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x6ae, r0, &(0x7f0000000480)="f5e8bc7777384c13e1b9a15c8c9f46040a44fba8234735cabc78cb1cc3dacd9cef8af18a03ab248f0d584512c4032d4aef393cbd352bb3b5a2e2f891242da3852df2de6fae34088560e4a49cc0cd0ed184fbd23a71399aa95ac49cfc02c3", 0x5e, 0x7c, 0x0, 0x1, r9}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f0000000540)="5c4f54fe508b3380149ec8abedbd23a4d30daf7391fa78c99f8752be24d24f2981ada28356855af0d027390a13c15647f131230212e875807cb7415493f66e87fe3ffd2c9950a7865f1053cfeb9225e70547be9fcafb4dfa478f9af835bf93e4f2915aa995105fb9211a805e0caf2a6d60debc88273eeb8ae34bdb9c746aeb1bafb3d735cafd08cc49eae822ae4fc4ff4831868bc70e12ef230f4caeae9ee4850f16d157bb935a9a", 0xa8, 0x3, 0x0, 0x3, r10}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000640)="344a8af9ff94fad01e5b8dafdec68a4a30bdf3c9bda17777bf3d58efdd7b2a2c1bdbaa1b102e23fdf51c7668a1702a5d41bf317c64f2ffbbdf142ec2f103821169572306aecfc6f3c9c7a39aa73c26bdf49f214d657abf38d6f17f582848305dee70c67519631dd4583ee1a1c672cb874c70c61a32df72bc62d06089ff4cd1172a22f1150454fac73f979a5e525bf79b3162733e528cfdfb702cf42a5bc0e3b3ab94a9b81ce5b8ca39b35ecabc991006e0aaf87de08868", 0xb7, 0x2, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x1, r16, &(0x7f0000000840)="ade9456f782e4f6f1423916c5ef73ba4850e048a34877136ad821df7b4239a071656921ea02ed3278582216f0210903ecbd18b62df49ecadd4ff76200c1c413f1fc82893510ac4bb1a207f5e2ec264a97b7a1dc626a2f822569afe43e304d0642b5b7919137b2fd46b40e33a059c688fb7ed14fb4a39b348040a5501ece9386004293aaa284fd1f212fa3c3a31caeb1b94e10138a55d2f1f464455ec1319232465fb261e20c51bee857d07b634c24c02c53b65c6dd051db61be416f1fbfac88ee7e28573f4795d91c892cf0ecee00e8204fb04b592d59be98300ab3c1d82b2b1b67db32a98c9340366", 0xe9, 0x7, 0x0, 0x3, r17}])

129.10211ms ago: executing program 5 (id=5949):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu~-0\t||')
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x32, 0x1, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xfffffe19, 0x8, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000280)={0xfff, {{0xa, 0x4e20, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x3}}, {{0xa, 0x4e20, 0x7f, @local, 0x4}}}, 0x108)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

94.41708ms ago: executing program 0 (id=5950):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xef)
fsopen(0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r0})

73.7852ms ago: executing program 4 (id=5951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@private, @local}, &(0x7f0000000640)=0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0107000000000000000005"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

69.43192ms ago: executing program 0 (id=5952):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000002400)=<r8=>0x0)
r9 = eventfd2(0x3, 0x1)
io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x5, r2, &(0x7f0000000040)="0200ffff0000", 0xfffffffffffffe1d, 0x0, 0x0, 0x3, r9}])

40.52007ms ago: executing program 2 (id=5953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001280)={0x244, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xced3a87}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "69d96a88391228bd1aecf4d9359e4cd3b375508d4479b7e888aa3b228580a3b4ffc14057141256f471dd3b2a1e560e46855dcb654c62fad10065fc2e07b93b2a965102c56f28e67f3c2a9acca7dfbd6d2a001abc52388a9ab553370a9a90ef4f41e17713169878460c99e290971143f637de50aeb231c2af1f8cf8cfac5da20e006a66105df815c4bf45c51207d85a2e126e13e0d8f875a347b39588cfa97e17ea7d98e13bc2baf9c63cf4c9e79fee1ac8da81abcf43355c7a9b97e0d99c1d49"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'p%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x9c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x8f, 0x5, "6f6ac20fa57912d32508128a88383d9c4bcccc039a33d51f604f763fcd0c0aa1006928f51f906c7367c5919d7b860a36084aab60aceb7fad699b9541513bd9f2c31f823eb2e2c49f6ab8d4752f6b67496d58284d229de8d07fe7a2144a644f7766fa061521892c5adca78847054a72e0498f0d0b613b1a3a2d1641dc16b9187cdd48e1c15c8fd861ee7706"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10000014}, 0xc000)

0s ago: executing program 3 (id=5954):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
setgroups(0x0, 0x0)

kernel console output (not intermixed with test programs):

rt 6081 - 0
[  247.625507][T15530] netlink: 'syz.0.4521': attribute type 13 has an invalid length.
[  247.714079][T15541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.722899][T15541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.869146][T15558] netlink: 'syz.2.4534': attribute type 3 has an invalid length.
[  247.876971][T15558] __nla_validate_parse: 14 callbacks suppressed
[  247.877033][T15558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'.
[  248.099374][T15575] xt_hashlimit: max too large, truncated to 1048576
[  248.101681][T15574] netlink: 'syz.4.4540': attribute type 13 has an invalid length.
[  248.121256][T15574] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4540'.
[  248.276140][T15595] netlink: 'syz.2.4549': attribute type 3 has an invalid length.
[  248.284099][T15595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4549'.
[  248.498657][T15611] xt_hashlimit: max too large, truncated to 1048576
[  248.532263][T15616] netlink: 'syz.5.4554': attribute type 13 has an invalid length.
[  248.543762][T15614] xt_hashlimit: max too large, truncated to 1048576
[  248.543784][T15616] loop5: detected capacity change from 0 to 256
[  248.558296][T15616] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4554'.
[  248.601329][T15624] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.639558][T15624] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.699094][T15624] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.751357][T15624] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.789317][T15638] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4563'.
[  248.827415][T15624] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.842497][T15624] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.863852][T15624] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.879468][T15624] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.103056][T15669] netlink: 'syz.5.4578': attribute type 3 has an invalid length.
[  249.110890][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4578'.
[  249.128417][T15670] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4577'.
[  249.415020][T15692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.424030][T15692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.598021][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4590'.
[  249.609499][T15701] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4590'.
[  249.731476][T15709] netlink: 'syz.3.4593': attribute type 3 has an invalid length.
[  249.739358][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4593'.
[  250.051273][T15735] xt_hashlimit: max too large, truncated to 1048576
[  250.068114][   T29] kauditd_printk_skb: 991 callbacks suppressed
[  250.068130][   T29] audit: type=1326 audit(1738717202.814:24044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.098369][   T29] audit: type=1326 audit(1738717202.814:24045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.122166][   T29] audit: type=1326 audit(1738717202.814:24046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.145988][   T29] audit: type=1326 audit(1738717202.814:24047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.169954][   T29] audit: type=1326 audit(1738717202.814:24048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.193725][   T29] audit: type=1326 audit(1738717202.814:24049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.217505][   T29] audit: type=1326 audit(1738717202.814:24050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.241348][   T29] audit: type=1326 audit(1738717202.814:24051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.265080][   T29] audit: type=1326 audit(1738717202.814:24052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.288794][   T29] audit: type=1326 audit(1738717202.814:24053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.2.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  250.512856][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.521396][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.173808][T15808] xt_hashlimit: max too large, truncated to 1048576
[  251.281582][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.311377][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.337372][T15819] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  251.360692][T15823] netlink: 'syz.0.4640': attribute type 3 has an invalid length.
[  251.822417][T15847] loop5: detected capacity change from 0 to 256
[  251.980631][T15853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=15853 comm=syz.5.4652
[  252.005502][T15856] xt_hashlimit: max too large, truncated to 1048576
[  252.204183][T15871] loop5: detected capacity change from 0 to 256
[  252.354778][T15883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=15883 comm=syz.3.4664
[  252.433842][T15895] xt_hashlimit: max too large, truncated to 1048576
[  252.543715][T15902] netlink: 'syz.3.4672': attribute type 3 has an invalid length.
[  252.965736][T15931] loop5: detected capacity change from 0 to 4096
[  252.975312][T15931] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  252.995079][T15931] __nla_validate_parse: 16 callbacks suppressed
[  252.995095][T15931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4683'.
[  253.124500][T15937] xt_hashlimit: max too large, truncated to 1048576
[  253.141624][T15938] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4685'.
[  253.185427][T15940] xt_hashlimit: max too large, truncated to 1048576
[  253.244424][T15947] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4688'.
[  253.343538][T15949] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4691'.
[  253.422239][T15959] loop5: detected capacity change from 0 to 4096
[  253.429738][T15959] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  253.451399][T15959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4696'.
[  253.510039][T15967] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4698'.
[  253.630691][T15979] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4701'.
[  253.760624][T15994] loop5: detected capacity change from 0 to 256
[  253.781135][T15989] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4706'.
[  253.918652][T16005] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4710'.
[  253.973130][T16011] netlink: 'syz.5.4714': attribute type 3 has an invalid length.
[  253.980966][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4714'.
[  254.494410][T16045] xt_hashlimit: max too large, truncated to 1048576
[  254.708101][T16063] netlink: 'syz.4.4734': attribute type 3 has an invalid length.
[  255.093055][T16093] xt_hashlimit: max too large, truncated to 1048576
[  255.213511][T16102] netlink: 'syz.2.4748': attribute type 3 has an invalid length.
[  255.491761][   T29] kauditd_printk_skb: 336 callbacks suppressed
[  255.491780][   T29] audit: type=1326 audit(1738717204.267:24390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.522860][   T29] audit: type=1326 audit(1738717204.267:24391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.546590][   T29] audit: type=1326 audit(1738717204.267:24392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.570301][   T29] audit: type=1326 audit(1738717204.267:24393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.594115][   T29] audit: type=1326 audit(1738717204.267:24394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.618018][   T29] audit: type=1326 audit(1738717204.267:24395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.641721][   T29] audit: type=1326 audit(1738717204.267:24396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.665302][   T29] audit: type=1326 audit(1738717204.267:24397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.688859][   T29] audit: type=1326 audit(1738717204.267:24398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.712523][   T29] audit: type=1326 audit(1738717204.267:24399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16117 comm="syz.2.4755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  255.871579][T16143] netlink: 'syz.5.4763': attribute type 3 has an invalid length.
[  256.116986][T16154] bridge0: port 3(vlan2) entered blocking state
[  256.123390][T16154] bridge0: port 3(vlan2) entered disabled state
[  256.129990][T16154] vlan2: entered allmulticast mode
[  256.135616][T16154] vlan2: left allmulticast mode
[  256.200872][T16163] loop5: detected capacity change from 0 to 256
[  256.217358][T16165] xt_hashlimit: max too large, truncated to 1048576
[  256.459332][T16187] netlink: 'syz.0.4780': attribute type 3 has an invalid length.
[  256.700372][T16204] bridge0: port 4(vlan2) entered blocking state
[  256.706689][T16204] bridge0: port 4(vlan2) entered disabled state
[  256.740071][T16204] vlan2: entered allmulticast mode
[  256.760636][T16204] vlan2: left allmulticast mode
[  257.197664][T16243] netlink: 'syz.4.4801': attribute type 3 has an invalid length.
[  257.431987][T16254] bridge0: port 3(vlan2) entered blocking state
[  257.438637][T16254] bridge0: port 3(vlan2) entered disabled state
[  257.445839][T16254] vlan2: entered allmulticast mode
[  257.451773][T16254] vlan2: left allmulticast mode
[  257.536389][T16259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.588426][T16259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.628800][T16259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.678893][T16259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.735558][T16266] loop5: detected capacity change from 0 to 256
[  257.739933][T16259] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.764126][T16259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.777737][T16259] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.789781][T16259] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.946538][T16290] xt_hashlimit: max too large, truncated to 1048576
[  258.020476][T16301] __nla_validate_parse: 27 callbacks suppressed
[  258.020497][T16301] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4820'.
[  258.042277][T16292] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4820'.
[  258.319322][T16330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4836'.
[  258.331024][T16330] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4836'.
[  258.468311][T16342] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4847'.
[  258.484189][T16337] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4847'.
[  258.572490][T16353] netlink: 'syz.4.4844': attribute type 3 has an invalid length.
[  258.580333][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4844'.
[  258.695251][T16361] xt_hashlimit: max too large, truncated to 1048576
[  258.756881][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.791362][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.944292][T16386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.947442][T16384] netlink: 'syz.3.4858': attribute type 3 has an invalid length.
[  258.953014][T16386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.960699][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4858'.
[  259.048183][T16394] xt_hashlimit: max too large, truncated to 1048576
[  259.106310][T16398] xt_hashlimit: max too large, truncated to 1048576
[  259.422623][T16420] xt_hashlimit: max too large, truncated to 1048576
[  259.578968][T16432] netlink: 'syz.4.4879': attribute type 3 has an invalid length.
[  259.587081][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4879'.
[  259.879425][T16468] netlink: 'syz.4.4894': attribute type 3 has an invalid length.
[  259.887337][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'.
[  260.038839][T16486] bridge0: port 3(vlan2) entered blocking state
[  260.045229][T16486] bridge0: port 3(vlan2) entered disabled state
[  260.053677][T16486] vlan2: entered allmulticast mode
[  260.059649][T16486] vlan2: left allmulticast mode
[  260.348852][T16512] netlink: 'syz.0.4914': attribute type 3 has an invalid length.
[  260.627409][T16528] xt_hashlimit: max too large, truncated to 1048576
[  260.665797][   T29] kauditd_printk_skb: 311 callbacks suppressed
[  260.665815][   T29] audit: type=1326 audit(1738717205.429:24711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.695966][   T29] audit: type=1326 audit(1738717205.429:24712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.719730][   T29] audit: type=1326 audit(1738717205.429:24713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.743605][   T29] audit: type=1326 audit(1738717205.429:24714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.767308][   T29] audit: type=1326 audit(1738717205.429:24715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.791064][   T29] audit: type=1326 audit(1738717205.429:24716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.815044][   T29] audit: type=1326 audit(1738717205.429:24717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.838701][   T29] audit: type=1326 audit(1738717205.429:24718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.862532][   T29] audit: type=1326 audit(1738717205.429:24719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  260.886256][   T29] audit: type=1326 audit(1738717205.429:24720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.5.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  261.009311][T16557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.057321][T16562] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.069260][T16557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.148855][T16562] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.161753][T16557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.179303][T16567] netlink: 'syz.5.4931': attribute type 3 has an invalid length.
[  261.229172][T16562] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.241802][T16557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.300391][T16562] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.320170][T16557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.332428][T16557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.345666][T16557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.357237][T16557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.369234][T16562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.381201][T16562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.402189][T16562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.414317][T16562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.435718][T16571] xt_hashlimit: max too large, truncated to 1048576
[  261.619943][T16590] netlink: 'syz.5.4942': attribute type 3 has an invalid length.
[  261.794392][T16596] netlink: 'syz.0.4943': attribute type 3 has an invalid length.
[  261.815996][T16603] xt_hashlimit: max too large, truncated to 1048576
[  262.057498][T16640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.073082][T16640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.154032][T16653] netlink: 'syz.2.4967': attribute type 3 has an invalid length.
[  262.513643][T16687] bridge0: port 4(vlan2) entered blocking state
[  262.520058][T16687] bridge0: port 4(vlan2) entered disabled state
[  262.526559][T16687] vlan2: entered allmulticast mode
[  262.534992][T16687] vlan2: left allmulticast mode
[  262.591881][T16692] netlink: 'syz.4.4983': attribute type 3 has an invalid length.
[  262.649478][T16698] xt_hashlimit: max too large, truncated to 1048576
[  262.762597][T16714] netlink: 'syz.4.4994': attribute type 3 has an invalid length.
[  262.954521][T16730] bridge0: port 3(vlan2) entered blocking state
[  262.960872][T16730] bridge0: port 3(vlan2) entered disabled state
[  262.984640][T16730] vlan2: entered allmulticast mode
[  263.001618][T16730] vlan2: left allmulticast mode
[  263.050482][T16731] __nla_validate_parse: 18 callbacks suppressed
[  263.050504][T16731] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4996'.
[  263.103571][T16737] netlink: 'syz.4.5001': attribute type 3 has an invalid length.
[  263.111388][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5001'.
[  263.200412][T16740] xt_hashlimit: max too large, truncated to 1048576
[  263.241526][T16750] xt_hashlimit: max too large, truncated to 1048576
[  263.296844][T16749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5007'.
[  263.384620][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5011'.
[  263.469733][T16766] bridge0: port 4(vlan2) entered blocking state
[  263.476059][T16766] bridge0: port 4(vlan2) entered disabled state
[  263.484960][T16766] vlan2: entered allmulticast mode
[  263.491899][T16766] vlan2: left allmulticast mode
[  263.530769][T16762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5012'.
[  263.607913][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5018'.
[  263.798981][T16792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5024'.
[  263.810997][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5024'.
[  263.830387][T16795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5025'.
[  263.886426][T16801] hashlimit_mt_check_common: 1 callbacks suppressed
[  263.886445][T16801] xt_hashlimit: max too large, truncated to 1048576
[  263.938840][T16806] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.956587][T16803] bridge0: port 4(vlan2) entered blocking state
[  263.963106][T16803] bridge0: port 4(vlan2) entered disabled state
[  263.969818][T16803] vlan2: entered allmulticast mode
[  263.975663][T16803] vlan2: left allmulticast mode
[  263.983013][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5030'.
[  264.019059][T16806] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.090917][T16806] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.160354][T16806] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.206787][T16814] xt_hashlimit: max too large, truncated to 1048576
[  264.533419][T16835] loop5: detected capacity change from 0 to 4096
[  264.540660][T16835] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  264.606955][T16838] bridge0: port 3(vlan2) entered blocking state
[  264.613349][T16838] bridge0: port 3(vlan2) entered disabled state
[  264.621801][T16838] vlan2: entered allmulticast mode
[  264.627953][T16838] vlan2: left allmulticast mode
[  265.071002][T16862] validate_nla: 4 callbacks suppressed
[  265.071018][T16862] netlink: 'syz.5.5051': attribute type 3 has an invalid length.
[  265.148101][T16868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.156622][T16868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.209693][T16871] bridge0: port 3(vlan2) entered blocking state
[  265.216056][T16871] bridge0: port 3(vlan2) entered disabled state
[  265.225020][T16871] vlan2: entered allmulticast mode
[  265.234973][T16871] vlan2: left allmulticast mode
[  265.253471][T16875] netlink: 'syz.2.5056': attribute type 3 has an invalid length.
[  265.268662][T16869] loop5: detected capacity change from 0 to 256
[  265.431394][T16806] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.457742][T16806] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.474289][T16806] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.486553][T16806] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.679361][T16894] netlink: 'syz.5.5064': attribute type 3 has an invalid length.
[  265.734781][   T29] kauditd_printk_skb: 349 callbacks suppressed
[  265.734798][   T29] audit: type=1326 audit(1738717210.499:25070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.764805][   T29] audit: type=1326 audit(1738717210.499:25071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.795555][   T29] audit: type=1326 audit(1738717210.569:25072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.819254][   T29] audit: type=1326 audit(1738717210.569:25073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.842933][   T29] audit: type=1326 audit(1738717210.569:25074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.882325][   T29] audit: type=1326 audit(1738717210.569:25075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.906093][   T29] audit: type=1326 audit(1738717210.569:25076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.929766][   T29] audit: type=1326 audit(1738717210.569:25077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.953445][   T29] audit: type=1326 audit(1738717210.569:25078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.976991][   T29] audit: type=1326 audit(1738717210.569:25079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  265.980369][T16909] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.076602][T16909] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.113415][T16927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.129316][T16927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.148535][T16909] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.232260][T16909] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.299266][T16909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.324990][T16909] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.336481][T16909] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.351312][T16909] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.553968][T16954] xt_hashlimit: max too large, truncated to 1048576
[  266.761410][T16972] netlink: 'syz.4.5094': attribute type 3 has an invalid length.
[  267.040410][T16979] xt_hashlimit: max too large, truncated to 1048576
[  267.169613][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.178413][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.345214][T17004] netlink: 'syz.0.5107': attribute type 3 has an invalid length.
[  267.427074][T17009] xt_hashlimit: max too large, truncated to 1048576
[  267.703299][T17034] xt_hashlimit: max too large, truncated to 1048576
[  267.789271][T17044] netlink: 'syz.0.5125': attribute type 3 has an invalid length.
[  267.810784][T17049] xt_hashlimit: max too large, truncated to 1048576
[  267.955283][T17062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.993972][T17062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.030705][T17067] xt_hashlimit: max too large, truncated to 1048576
[  268.230584][T17080] xt_hashlimit: max too large, truncated to 1048576
[  268.345861][T17095] xt_hashlimit: max too large, truncated to 1048576
[  268.428526][T17104] bridge0: port 3(vlan2) entered blocking state
[  268.434867][T17104] bridge0: port 3(vlan2) entered disabled state
[  268.441477][T17104] vlan2: entered allmulticast mode
[  268.451006][T17104] vlan2: left allmulticast mode
[  268.489129][T17097] __nla_validate_parse: 19 callbacks suppressed
[  268.489145][T17097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5148'.
[  268.570930][T17119] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.618364][T17119] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.649257][T17126] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.677988][T17119] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.709159][T17126] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.759606][T17119] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.811268][T17126] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.863937][T17119] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.894252][T17119] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.903969][T17126] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.923897][T17139] bridge0: port 3(vlan2) entered blocking state
[  268.930457][T17139] bridge0: port 3(vlan2) entered disabled state
[  268.937163][T17139] vlan2: entered allmulticast mode
[  268.942826][T17139] vlan2: left allmulticast mode
[  268.951676][T17136] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5165'.
[  268.968024][T17119] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.981386][T17119] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.996776][T17126] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.009360][T17126] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.023405][T17126] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.041967][T17126] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.100462][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.109161][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.124350][T17149] hashlimit_mt_check_common: 1 callbacks suppressed
[  269.124366][T17149] xt_hashlimit: max too large, truncated to 1048576
[  269.342195][T17164] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  269.455815][T17171] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.500022][T17171] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.521194][T17175] bridge0: port 3(vlan2) entered blocking state
[  269.527756][T17175] bridge0: port 3(vlan2) entered disabled state
[  269.534605][T17175] vlan2: entered allmulticast mode
[  269.540425][T17175] vlan2: left allmulticast mode
[  269.548832][T17171] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.574086][T17173] loop5: detected capacity change from 0 to 256
[  269.582593][T17173] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5178'.
[  269.618815][T17171] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.043704][T17203] bridge0: port 4(vlan2) entered blocking state
[  270.048083][T17208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.050067][T17203] bridge0: port 4(vlan2) entered disabled state
[  270.058644][T17208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.064987][T17203] vlan2: entered allmulticast mode
[  270.080559][T17203] vlan2: left allmulticast mode
[  270.094511][T17206] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5190'.
[  270.293564][T17219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5197'.
[  270.304769][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5197'.
[  270.464089][T17231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5203'.
[  270.474400][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5203'.
[  270.571296][T17239] xt_hashlimit: max too large, truncated to 1048576
[  270.617396][T17245] FAULT_INJECTION: forcing a failure.
[  270.617396][T17245] name failslab, interval 1, probability 0, space 0, times 0
[  270.630130][T17245] CPU: 0 UID: 0 PID: 17245 Comm: syz.2.5210 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  270.630159][T17245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  270.630171][T17245] Call Trace:
[  270.630177][T17245]  <TASK>
[  270.630183][T17245]  dump_stack_lvl+0xf2/0x150
[  270.630211][T17245]  dump_stack+0x15/0x1a
[  270.630236][T17245]  should_fail_ex+0x24a/0x260
[  270.630316][T17245]  ? __se_sys_memfd_create+0x1ea/0x5a0
[  270.630339][T17245]  should_failslab+0x8f/0xb0
[  270.630377][T17245]  __kmalloc_cache_noprof+0x4e/0x320
[  270.630422][T17245]  __se_sys_memfd_create+0x1ea/0x5a0
[  270.630475][T17245]  __x64_sys_memfd_create+0x31/0x40
[  270.630495][T17245]  x64_sys_call+0x2d4c/0x2dc0
[  270.630521][T17245]  do_syscall_64+0xc9/0x1c0
[  270.630550][T17245]  ? clear_bhb_loop+0x55/0xb0
[  270.630583][T17245]  ? clear_bhb_loop+0x55/0xb0
[  270.630641][T17245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.630674][T17245] RIP: 0033:0x7fd9ef97cde9
[  270.630695][T17245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.630718][T17245] RSP: 002b:00007fd9edfe0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  270.630792][T17245] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fd9ef97cde9
[  270.630804][T17245] RDX: 00007fd9edfe0ef0 RSI: 0000000000000000 RDI: 00007fd9ef9fec51
[  270.630816][T17245] RBP: 0000200000000180 R08: 00007fd9edfe0bb7 R09: 00007fd9edfe0e40
[  270.630828][T17245] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040
[  270.630841][T17245] R13: 00007fd9edfe0ef0 R14: 00007fd9edfe0eb0 R15: 0000200000000940
[  270.630862][T17245]  </TASK>
[  270.828872][   T29] kauditd_printk_skb: 550 callbacks suppressed
[  270.828891][   T29] audit: type=1326 audit(1738717212.588:25630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17240 comm="syz.0.5207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8374bacde9 code=0x0
[  270.868711][   T29] audit: type=1400 audit(1738717212.638:25631): avc:  denied  { write } for  pid=17251 comm="syz.2.5211" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  270.893303][   T29] audit: type=1400 audit(1738717212.638:25632): avc:  denied  { mount } for  pid=17251 comm="syz.2.5211" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  270.915946][   T29] audit: type=1400 audit(1738717212.638:25633): avc:  denied  { create } for  pid=17251 comm="syz.2.5211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  270.952456][   T29] audit: type=1400 audit(1738717212.668:25634): avc:  denied  { unmount } for  pid=11723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  271.045354][   T29] audit: type=1326 audit(1738717212.808:25635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.2.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  271.070442][   T29] audit: type=1326 audit(1738717212.838:25636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.2.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  271.094220][   T29] audit: type=1326 audit(1738717212.838:25637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.2.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  271.118167][   T29] audit: type=1326 audit(1738717212.838:25638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.2.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  271.141917][   T29] audit: type=1326 audit(1738717212.838:25639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17260 comm="syz.2.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  271.156436][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5216'.
[  271.207237][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5216'.
[  271.237113][T17270] netlink: 'syz.5.5219': attribute type 3 has an invalid length.
[  271.339662][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.348364][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.480966][T17281] loop5: detected capacity change from 0 to 512
[  271.516586][T17281] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  271.541079][T17281] EXT4-fs (loop5): 1 truncate cleaned up
[  271.547607][T17281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.600716][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.727258][T17301] FAULT_INJECTION: forcing a failure.
[  272.727258][T17301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.740668][T17301] CPU: 1 UID: 0 PID: 17301 Comm: syz.5.5228 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  272.740695][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  272.740718][T17301] Call Trace:
[  272.740725][T17301]  <TASK>
[  272.740733][T17301]  dump_stack_lvl+0xf2/0x150
[  272.740834][T17301]  dump_stack+0x15/0x1a
[  272.740855][T17301]  should_fail_ex+0x24a/0x260
[  272.740888][T17301]  should_fail+0xb/0x10
[  272.740920][T17301]  should_fail_usercopy+0x1a/0x20
[  272.740980][T17301]  strncpy_from_user+0x25/0x210
[  272.741012][T17301]  ? __kmalloc_cache_noprof+0x186/0x320
[  272.741056][T17301]  __se_sys_memfd_create+0x218/0x5a0
[  272.741134][T17301]  __x64_sys_memfd_create+0x31/0x40
[  272.741158][T17301]  x64_sys_call+0x2d4c/0x2dc0
[  272.741198][T17301]  do_syscall_64+0xc9/0x1c0
[  272.741222][T17301]  ? clear_bhb_loop+0x55/0xb0
[  272.741253][T17301]  ? clear_bhb_loop+0x55/0xb0
[  272.741345][T17301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.741407][T17301] RIP: 0033:0x7f76ca9fcde9
[  272.741425][T17301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.741447][T17301] RSP: 002b:00007f76c9024e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  272.741469][T17301] RAX: ffffffffffffffda RBX: 000000000000049e RCX: 00007f76ca9fcde9
[  272.741481][T17301] RDX: 00007f76c9024ef0 RSI: 0000000000000000 RDI: 00007f76caa7ec51
[  272.741505][T17301] RBP: 0000200000000e00 R08: 00007f76c9024bb7 R09: 00007f76c9024e40
[  272.741578][T17301] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  272.741663][T17301] R13: 00007f76c9024ef0 R14: 00007f76c9024eb0 R15: 0000200000000100
[  272.741680][T17301]  </TASK>
[  273.376690][T17312] xt_hashlimit: max too large, truncated to 1048576
[  273.397311][T17314] netlink: 'syz.3.5234': attribute type 3 has an invalid length.
[  273.874637][T17327] netlink: 'syz.3.5238': attribute type 3 has an invalid length.
[  273.882545][T17327] __nla_validate_parse: 4 callbacks suppressed
[  273.882584][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5238'.
[  274.028829][T17332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.051127][T17332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.273129][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5244'.
[  274.283568][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5244'.
[  274.300457][T17344] xt_hashlimit: max too large, truncated to 1048576
[  274.361264][T17349] netlink: 'syz.2.5248': attribute type 3 has an invalid length.
[  274.369223][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5248'.
[  274.686708][T17372] xt_hashlimit: max too large, truncated to 1048576
[  274.726627][T17374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5260'.
[  274.737078][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5260'.
[  274.915725][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.924694][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.121952][T17401] xt_hashlimit: max too large, truncated to 1048576
[  275.516433][T17447] team0 (unregistering): Port device team_slave_0 removed
[  275.543416][T17447] team0 (unregistering): Port device team_slave_1 removed
[  275.572974][T17171] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.577078][T17452] netlink: 'syz.2.5287': attribute type 13 has an invalid length.
[  275.605081][T17171] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.625844][T17171] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.641384][T17171] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.662393][T17455] netlink: 'syz.0.5289': attribute type 3 has an invalid length.
[  275.670188][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5289'.
[  275.694599][T17462] FAULT_INJECTION: forcing a failure.
[  275.694599][T17462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.707813][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.4.5293 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  275.707845][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  275.707859][T17462] Call Trace:
[  275.707867][T17462]  <TASK>
[  275.707877][T17462]  dump_stack_lvl+0xf2/0x150
[  275.707909][T17462]  dump_stack+0x15/0x1a
[  275.708003][T17462]  should_fail_ex+0x24a/0x260
[  275.708035][T17462]  should_fail+0xb/0x10
[  275.708069][T17462]  should_fail_usercopy+0x1a/0x20
[  275.708092][T17462]  _copy_from_user+0x1c/0xa0
[  275.708182][T17462]  copy_msghdr_from_user+0x54/0x2a0
[  275.708208][T17462]  ? __fget_files+0x17c/0x1c0
[  275.708240][T17462]  __sys_sendmsg+0x13e/0x230
[  275.708339][T17462]  __x64_sys_sendmsg+0x46/0x50
[  275.708375][T17462]  x64_sys_call+0x2734/0x2dc0
[  275.708406][T17462]  do_syscall_64+0xc9/0x1c0
[  275.708436][T17462]  ? clear_bhb_loop+0x55/0xb0
[  275.708479][T17462]  ? clear_bhb_loop+0x55/0xb0
[  275.708513][T17462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.708610][T17462] RIP: 0033:0x7fd97c63cde9
[  275.708629][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.708650][T17462] RSP: 002b:00007fd97aca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.708671][T17462] RAX: ffffffffffffffda RBX: 00007fd97c855fa0 RCX: 00007fd97c63cde9
[  275.708686][T17462] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  275.708700][T17462] RBP: 00007fd97aca1090 R08: 0000000000000000 R09: 0000000000000000
[  275.708714][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.708730][T17462] R13: 0000000000000000 R14: 00007fd97c855fa0 R15: 00007ffd6156b308
[  275.708750][T17462]  </TASK>
[  276.011036][T17478] netlink: 'syz.2.5298': attribute type 3 has an invalid length.
[  276.019035][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'.
[  276.138084][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5301'.
[  276.169824][T17489] FAULT_INJECTION: forcing a failure.
[  276.169824][T17489] name failslab, interval 1, probability 0, space 0, times 0
[  276.173576][   T29] kauditd_printk_skb: 198 callbacks suppressed
[  276.173593][   T29] audit: type=1326 audit(1738717217.938:25838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.182611][T17489] CPU: 0 UID: 0 PID: 17489 Comm: syz.2.5303 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  276.182644][T17489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  276.182660][T17489] Call Trace:
[  276.182667][T17489]  <TASK>
[  276.182675][T17489]  dump_stack_lvl+0xf2/0x150
[  276.182765][T17489]  dump_stack+0x15/0x1a
[  276.182791][T17489]  should_fail_ex+0x24a/0x260
[  276.182831][T17489]  ? netdevice_event+0x2b6/0x610
[  276.182878][T17489]  should_failslab+0x8f/0xb0
[  276.182987][T17489]  __kmalloc_cache_noprof+0x4e/0x320
[  276.183030][T17489]  ? rtmsg_ifinfo_build_skb+0x122/0x1b0
[  276.183063][T17489]  netdevice_event+0x2b6/0x610
[  276.183169][T17489]  ? __pfx_add_netdev_ips+0x10/0x10
[  276.183211][T17489]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  276.183261][T17489]  ? __pfx_add_default_gids+0x10/0x10
[  276.183384][T17489]  ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10
[  276.183427][T17489]  ? __pfx_del_netdev_ips+0x10/0x10
[  276.183524][T17489]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  276.183634][T17489]  ? __pfx_netdevice_event+0x10/0x10
[  276.183714][T17489]  raw_notifier_call_chain+0x6f/0x1d0
[  276.183747][T17489]  ? avc_has_perm_noaudit+0x1cc/0x210
[  276.183782][T17489]  call_netdevice_notifiers_info+0xae/0x100
[  276.183825][T17489]  dev_set_mac_address+0x1ff/0x260
[  276.183900][T17489]  dev_set_mac_address_user+0x31/0x50
[  276.183932][T17489]  dev_ifsioc+0x8c3/0xa10
[  276.183962][T17489]  dev_ioctl+0x7fa/0xab0
[  276.183993][T17489]  sock_do_ioctl+0x11c/0x260
[  276.184050][T17489]  sock_ioctl+0x40f/0x600
[  276.184090][T17489]  ? __pfx_sock_ioctl+0x10/0x10
[  276.184262][T17489]  __se_sys_ioctl+0xc9/0x140
[  276.184289][T17489]  __x64_sys_ioctl+0x43/0x50
[  276.184313][T17489]  x64_sys_call+0x1690/0x2dc0
[  276.184345][T17489]  do_syscall_64+0xc9/0x1c0
[  276.184418][T17489]  ? clear_bhb_loop+0x55/0xb0
[  276.184451][T17489]  ? clear_bhb_loop+0x55/0xb0
[  276.184518][T17489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.184550][T17489] RIP: 0033:0x7fd9ef97cde9
[  276.184569][T17489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.184591][T17489] RSP: 002b:00007fd9edfe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  276.184638][T17489] RAX: ffffffffffffffda RBX: 00007fd9efb95fa0 RCX: 00007fd9ef97cde9
[  276.184653][T17489] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009
[  276.184745][T17489] RBP: 00007fd9edfe1090 R08: 0000000000000000 R09: 0000000000000000
[  276.184760][T17489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.184774][T17489] R13: 0000000000000000 R14: 00007fd9efb95fa0 R15: 00007ffee7cd86b8
[  276.184796][T17489]  </TASK>
[  276.479258][   T29] audit: type=1326 audit(1738717217.938:25839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.502893][   T29] audit: type=1326 audit(1738717217.938:25840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.526486][   T29] audit: type=1326 audit(1738717217.938:25841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.550106][   T29] audit: type=1326 audit(1738717217.938:25842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.573771][   T29] audit: type=1326 audit(1738717217.938:25843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.597390][   T29] audit: type=1326 audit(1738717217.938:25844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.620910][   T29] audit: type=1326 audit(1738717217.938:25845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.644513][   T29] audit: type=1326 audit(1738717217.938:25846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.668307][   T29] audit: type=1326 audit(1738717217.938:25847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17488 comm="syz.3.5304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09161cde9 code=0x7ffc0000
[  276.724112][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5307'.
[  276.770853][T17511] loop5: detected capacity change from 0 to 1024
[  276.807613][T17511] EXT4-fs: Ignoring removed orlov option
[  276.819139][T17511] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  276.860919][T17524] netlink: 'syz.0.5312': attribute type 3 has an invalid length.
[  276.867446][T17511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.968655][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.001765][T17531] netlink: 'syz.5.5314': attribute type 3 has an invalid length.
[  277.168933][T17547] xt_hashlimit: max too large, truncated to 1048576
[  277.241919][T17557] geneve0: entered allmulticast mode
[  277.255102][T17557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=17557 comm=syz.4.5326
[  277.294003][T17560] netlink: 'syz.2.5327': attribute type 3 has an invalid length.
[  277.311773][T17553] loop5: detected capacity change from 0 to 4096
[  277.322837][T17553] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  277.369368][T17570] netlink: 'syz.0.5332': attribute type 3 has an invalid length.
[  277.510678][T17580] xt_hashlimit: max too large, truncated to 1048576
[  277.653257][T17600] netlink: 'syz.0.5344': attribute type 3 has an invalid length.
[  277.825768][T17606] bridge0: port 3(vlan2) entered blocking state
[  277.832139][T17606] bridge0: port 3(vlan2) entered disabled state
[  277.847272][T17606] vlan2: entered allmulticast mode
[  277.861650][T17606] vlan2: left allmulticast mode
[  277.901262][T17608] loop5: detected capacity change from 0 to 256
[  277.984211][T17615] xt_hashlimit: max too large, truncated to 1048576
[  278.026914][T17623] netlink: 'syz.0.5354': attribute type 3 has an invalid length.
[  278.099560][T17631] netlink: 'syz.4.5357': attribute type 3 has an invalid length.
[  278.330392][T17650] bridge0: port 3(vlan2) entered blocking state
[  278.336812][T17650] bridge0: port 3(vlan2) entered disabled state
[  278.407268][T17650] vlan2: entered allmulticast mode
[  278.425637][T17650] vlan2: left allmulticast mode
[  278.488704][T17657] xt_hashlimit: max too large, truncated to 1048576
[  278.500192][T17661] netlink: 'syz.2.5370': attribute type 3 has an invalid length.
[  278.585886][T17672] netlink: 'syz.4.5371': attribute type 3 has an invalid length.
[  278.741313][T17683] tipc: Started in network mode
[  278.746308][T17683] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  278.787194][T17683] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  278.795667][T17683] tipc: Enabled bearer <udp:s>, priority 10
[  278.921772][T17693] netlink: 'syz.3.5384': attribute type 3 has an invalid length.
[  278.929727][T17693] __nla_validate_parse: 23 callbacks suppressed
[  278.929770][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5384'.
[  279.062370][T17708] bridge_slave_0: left allmulticast mode
[  279.068249][T17708] bridge_slave_0: left promiscuous mode
[  279.073989][T17708] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.099701][T17708] bridge_slave_1: left allmulticast mode
[  279.099814][T17722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5397'.
[  279.105460][T17708] bridge_slave_1: left promiscuous mode
[  279.120284][T17708] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.151482][T17708] team0: Port device team_slave_0 removed
[  279.177740][T17708] team0: Port device team_slave_1 removed
[  279.185057][T17708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.192684][T17708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.204339][T17708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.212038][T17708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.252754][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5398'.
[  279.345475][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5401'.
[  279.515017][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.526063][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.583096][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5411'.
[  279.593647][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'.
[  279.670402][T17762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5413'.
[  279.796251][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5417'.
[  279.868689][T17764] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5414'.
[  279.878519][T17772] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'.
[  279.917024][    T8] tipc: Node number set to 1
[  280.098846][T17794] FAULT_INJECTION: forcing a failure.
[  280.098846][T17794] name failslab, interval 1, probability 0, space 0, times 0
[  280.111531][T17794] CPU: 0 UID: 0 PID: 17794 Comm: syz.5.5426 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  280.111552][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  280.111563][T17794] Call Trace:
[  280.111567][T17794]  <TASK>
[  280.111573][T17794]  dump_stack_lvl+0xf2/0x150
[  280.111636][T17794]  dump_stack+0x15/0x1a
[  280.111654][T17794]  should_fail_ex+0x24a/0x260
[  280.111711][T17794]  should_failslab+0x8f/0xb0
[  280.111732][T17794]  kmem_cache_alloc_node_noprof+0x59/0x320
[  280.111822][T17794]  ? __alloc_skb+0x10b/0x310
[  280.111849][T17794]  ? rhashtable_jhash2+0x13e/0x1a0
[  280.111873][T17794]  __alloc_skb+0x10b/0x310
[  280.111901][T17794]  mroute_netlink_event+0x77/0x110
[  280.111940][T17794]  ipmr_mfc_add+0x1327/0x1510
[  280.111977][T17794]  ip_mroute_setsockopt+0x72b/0x950
[  280.112015][T17794]  do_ip_setsockopt+0xd4b/0x2340
[  280.112044][T17794]  ip_setsockopt+0x63/0x100
[  280.112088][T17794]  raw_setsockopt+0x101/0x150
[  280.112116][T17794]  sock_common_setsockopt+0x64/0x80
[  280.112140][T17794]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  280.112161][T17794]  __sys_setsockopt+0x187/0x200
[  280.112188][T17794]  __x64_sys_setsockopt+0x66/0x80
[  280.112266][T17794]  x64_sys_call+0x282e/0x2dc0
[  280.112297][T17794]  do_syscall_64+0xc9/0x1c0
[  280.112324][T17794]  ? clear_bhb_loop+0x55/0xb0
[  280.112358][T17794]  ? clear_bhb_loop+0x55/0xb0
[  280.112428][T17794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.112451][T17794] RIP: 0033:0x7f76ca9fcde9
[  280.112464][T17794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.112479][T17794] RSP: 002b:00007f76c9067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  280.112520][T17794] RAX: ffffffffffffffda RBX: 00007f76cac15fa0 RCX: 00007f76ca9fcde9
[  280.112530][T17794] RDX: 00000000000000cc RSI: 0000000000000000 RDI: 0000000000000003
[  280.112540][T17794] RBP: 00007f76c9067090 R08: 000000000000003c R09: 0000000000000000
[  280.112574][T17794] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  280.112584][T17794] R13: 0000000000000000 R14: 00007f76cac15fa0 R15: 00007fff6a96eb28
[  280.112599][T17794]  </TASK>
[  280.603098][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.611783][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.774543][T17827] syz.0.5439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  281.216440][T17834] loop5: detected capacity change from 0 to 4096
[  281.223217][T17834] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  281.523615][   T29] kauditd_printk_skb: 306 callbacks suppressed
[  281.523633][   T29] audit: type=1326 audit(1738717218.291:26154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.553642][   T29] audit: type=1326 audit(1738717218.291:26155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.585976][   T29] audit: type=1326 audit(1738717218.331:26156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.595814][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.609645][   T29] audit: type=1326 audit(1738717218.331:26157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.635619][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.641718][   T29] audit: type=1326 audit(1738717218.331:26158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.673057][   T29] audit: type=1326 audit(1738717218.331:26159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.696791][   T29] audit: type=1326 audit(1738717218.331:26160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.720426][   T29] audit: type=1326 audit(1738717218.331:26161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.744153][   T29] audit: type=1326 audit(1738717218.331:26162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  281.767742][   T29] audit: type=1326 audit(1738717218.331:26163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  282.041051][T17871] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.089034][T17871] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.129596][T17871] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.179209][T17871] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.253628][T17871] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.270754][T17871] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.286803][T17871] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.300221][T17871] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.363004][T17877] FAULT_INJECTION: forcing a failure.
[  282.363004][T17877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.376149][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.4.5455 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  282.376176][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  282.376192][T17877] Call Trace:
[  282.376200][T17877]  <TASK>
[  282.376210][T17877]  dump_stack_lvl+0xf2/0x150
[  282.376244][T17877]  dump_stack+0x15/0x1a
[  282.376269][T17877]  should_fail_ex+0x24a/0x260
[  282.376357][T17877]  should_fail+0xb/0x10
[  282.376393][T17877]  should_fail_usercopy+0x1a/0x20
[  282.376417][T17877]  strncpy_from_user+0x25/0x210
[  282.376452][T17877]  ? kmem_cache_alloc_noprof+0x18e/0x320
[  282.376485][T17877]  ? getname_flags+0x81/0x3b0
[  282.376525][T17877]  getname_flags+0xb0/0x3b0
[  282.376622][T17877]  getname+0x17/0x20
[  282.376655][T17877]  do_sys_openat2+0x67/0x120
[  282.376695][T17877]  __x64_sys_openat+0xf3/0x120
[  282.376740][T17877]  x64_sys_call+0x2b30/0x2dc0
[  282.376770][T17877]  do_syscall_64+0xc9/0x1c0
[  282.376799][T17877]  ? clear_bhb_loop+0x55/0xb0
[  282.376850][T17877]  ? clear_bhb_loop+0x55/0xb0
[  282.376922][T17877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.376953][T17877] RIP: 0033:0x7fd97c63cde9
[  282.376968][T17877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.376985][T17877] RSP: 002b:00007fd97aca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  282.377035][T17877] RAX: ffffffffffffffda RBX: 00007fd97c855fa0 RCX: 00007fd97c63cde9
[  282.377083][T17877] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c
[  282.377095][T17877] RBP: 00007fd97aca1090 R08: 0000000000000000 R09: 0000000000000000
[  282.377107][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.377121][T17877] R13: 0000000000000000 R14: 00007fd97c855fa0 R15: 00007ffd6156b308
[  282.377143][T17877]  </TASK>
[  282.681366][T17890] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.758899][T17890] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.850355][T17890] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.897940][T17898] loop5: detected capacity change from 0 to 1024
[  282.922213][T17898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.945457][T17890] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.013018][T17898] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5465: bg 0: block 368: padding at end of block bitmap is not set
[  283.054197][T17890] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.059977][T17890] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.073620][T17890] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.080091][T17890] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.092466][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.134022][T17911] serio: Serial port ttyS3
[  283.916524][T17944] lo speed is unknown, defaulting to 1000
[  284.022853][T17950] __nla_validate_parse: 13 callbacks suppressed
[  284.022872][T17950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5481'.
[  284.041678][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'.
[  284.176657][T17954] validate_nla: 4 callbacks suppressed
[  284.176676][T17954] netlink: 'syz.4.5483': attribute type 3 has an invalid length.
[  284.190316][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5483'.
[  284.543636][T17975] netlink: 'syz.4.5492': attribute type 3 has an invalid length.
[  284.551486][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5492'.
[  284.712507][T17977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5493'.
[  284.730237][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5493'.
[  284.745679][T17981] netlink: 'syz.0.5495': attribute type 3 has an invalid length.
[  284.753612][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5495'.
[  284.826561][T17983] FAULT_INJECTION: forcing a failure.
[  284.826561][T17983] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.839732][T17983] CPU: 1 UID: 0 PID: 17983 Comm: syz.0.5496 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  284.839758][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  284.839779][T17983] Call Trace:
[  284.839785][T17983]  <TASK>
[  284.839793][T17983]  dump_stack_lvl+0xf2/0x150
[  284.839825][T17983]  dump_stack+0x15/0x1a
[  284.839858][T17983]  should_fail_ex+0x24a/0x260
[  284.839899][T17983]  should_fail+0xb/0x10
[  284.840000][T17983]  should_fail_usercopy+0x1a/0x20
[  284.840022][T17983]  _copy_to_user+0x20/0xa0
[  284.840047][T17983]  simple_read_from_buffer+0xa0/0x110
[  284.840107][T17983]  proc_fail_nth_read+0xf9/0x140
[  284.840216][T17983]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  284.840246][T17983]  vfs_read+0x19b/0x6f0
[  284.840270][T17983]  ? __rcu_read_unlock+0x4e/0x70
[  284.840296][T17983]  ? __fget_files+0x17c/0x1c0
[  284.840333][T17983]  ksys_read+0xe8/0x1b0
[  284.840355][T17983]  __x64_sys_read+0x42/0x50
[  284.840388][T17983]  x64_sys_call+0x2874/0x2dc0
[  284.840414][T17983]  do_syscall_64+0xc9/0x1c0
[  284.840444][T17983]  ? clear_bhb_loop+0x55/0xb0
[  284.840549][T17983]  ? clear_bhb_loop+0x55/0xb0
[  284.840582][T17983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.840615][T17983] RIP: 0033:0x7f8374bab7fc
[  284.840672][T17983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  284.840692][T17983] RSP: 002b:00007f8373211030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  284.840714][T17983] RAX: ffffffffffffffda RBX: 00007f8374dc5fa0 RCX: 00007f8374bab7fc
[  284.840729][T17983] RDX: 000000000000000f RSI: 00007f83732110a0 RDI: 0000000000000006
[  284.840743][T17983] RBP: 00007f8373211090 R08: 0000000000000000 R09: 0000000000000000
[  284.840757][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.840771][T17983] R13: 0000000000000000 R14: 00007f8374dc5fa0 R15: 00007ffe2ee1d438
[  284.840828][T17983]  </TASK>
[  285.160862][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5497'.
[  285.276473][T18007] netlink: 'syz.0.5506': attribute type 3 has an invalid length.
[  285.284401][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5506'.
[  285.353335][T18011] netlink: 'syz.3.5508': attribute type 3 has an invalid length.
[  285.361568][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5508'.
[  286.098329][T18052] bridge0: port 4(vlan2) entered blocking state
[  286.104648][T18052] bridge0: port 4(vlan2) entered disabled state
[  286.129967][T18052] vlan2: entered allmulticast mode
[  286.137880][T18052] vlan2: left allmulticast mode
[  286.191886][T18058] netlink: 'syz.5.5527': attribute type 3 has an invalid length.
[  286.537927][   T29] kauditd_printk_skb: 426 callbacks suppressed
[  286.537945][   T29] audit: type=1326 audit(1738717218.312:26590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.570452][   T29] audit: type=1326 audit(1738717218.312:26591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.594182][   T29] audit: type=1326 audit(1738717218.312:26592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.617994][   T29] audit: type=1326 audit(1738717218.312:26593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.641612][   T29] audit: type=1326 audit(1738717218.312:26594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.665280][   T29] audit: type=1326 audit(1738717218.312:26595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.689033][   T29] audit: type=1326 audit(1738717218.312:26596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.712683][   T29] audit: type=1326 audit(1738717218.312:26597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.736343][   T29] audit: type=1326 audit(1738717218.312:26598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  286.759826][   T29] audit: type=1326 audit(1738717218.312:26599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18081 comm="syz.4.5535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd97c63cde9 code=0x7ffc0000
[  287.084917][T18103] loop5: detected capacity change from 0 to 4096
[  287.091817][T18103] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  287.282489][T18119] futex_wake_op: syz.0.5546 tries to shift op by -1; fix this program
[  287.605550][T18129] serio: Serial port ttyS3
[  287.728713][T18154] random: crng reseeded on system resumption
[  288.152834][T18177] bridge0: port 3(vlan2) entered blocking state
[  288.159206][T18177] bridge0: port 3(vlan2) entered disabled state
[  288.165616][T18177] vlan2: entered allmulticast mode
[  288.171623][T18177] vlan2: left allmulticast mode
[  288.394729][T18192] netlink: 'syz.5.5574': attribute type 3 has an invalid length.
[  288.402206][T18188] serio: Serial port ttyS3
[  288.622827][T18203] loop5: detected capacity change from 0 to 4096
[  288.629846][T18203] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  288.784810][T18210] bridge0: port 3(vlan2) entered blocking state
[  288.791221][T18210] bridge0: port 3(vlan2) entered disabled state
[  288.800324][T18210] vlan2: entered allmulticast mode
[  288.816898][T18210] vlan2: left allmulticast mode
[  288.988916][T18221] netlink: 'syz.4.5586': attribute type 3 has an invalid length.
[  289.068935][T18230] netlink: 'syz.4.5589': attribute type 3 has an invalid length.
[  289.076822][T18230] __nla_validate_parse: 26 callbacks suppressed
[  289.076836][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5589'.
[  289.160632][T18243] netlink: 'syz.0.5595': attribute type 15 has an invalid length.
[  289.176427][T18246] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.220452][T18247] bridge0: port 3(vlan2) entered blocking state
[  289.226783][T18247] bridge0: port 3(vlan2) entered disabled state
[  289.244552][T18247] vlan2: entered allmulticast mode
[  289.250351][T18247] vlan2: left allmulticast mode
[  289.260609][T18246] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.274720][T18240] loop5: detected capacity change from 0 to 256
[  289.285110][T18240] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5596'.
[  289.328684][T18252] FAULT_INJECTION: forcing a failure.
[  289.328684][T18252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.329622][T18246] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.341905][T18252] CPU: 1 UID: 0 PID: 18252 Comm: syz.5.5598 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  289.341940][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  289.341956][T18252] Call Trace:
[  289.341965][T18252]  <TASK>
[  289.342017][T18252]  dump_stack_lvl+0xf2/0x150
[  289.342051][T18252]  dump_stack+0x15/0x1a
[  289.342076][T18252]  should_fail_ex+0x24a/0x260
[  289.342174][T18252]  should_fail+0xb/0x10
[  289.342209][T18252]  should_fail_usercopy+0x1a/0x20
[  289.342232][T18252]  _copy_to_user+0x20/0xa0
[  289.342313][T18252]  simple_read_from_buffer+0xa0/0x110
[  289.342343][T18252]  proc_fail_nth_read+0xf9/0x140
[  289.342374][T18252]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  289.342402][T18252]  vfs_read+0x19b/0x6f0
[  289.342425][T18252]  ? __rcu_read_unlock+0x4e/0x70
[  289.342451][T18252]  ? __fget_files+0x17c/0x1c0
[  289.342555][T18252]  ksys_read+0xe8/0x1b0
[  289.342581][T18252]  __x64_sys_read+0x42/0x50
[  289.342601][T18252]  x64_sys_call+0x2874/0x2dc0
[  289.342630][T18252]  do_syscall_64+0xc9/0x1c0
[  289.342778][T18252]  ? clear_bhb_loop+0x55/0xb0
[  289.342811][T18252]  ? clear_bhb_loop+0x55/0xb0
[  289.342844][T18252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.342907][T18252] RIP: 0033:0x7f76ca9fb7fc
[  289.342926][T18252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  289.342948][T18252] RSP: 002b:00007f76c9067030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  289.342970][T18252] RAX: ffffffffffffffda RBX: 00007f76cac15fa0 RCX: 00007f76ca9fb7fc
[  289.342986][T18252] RDX: 000000000000000f RSI: 00007f76c90670a0 RDI: 000000000000000d
[  289.343000][T18252] RBP: 00007f76c9067090 R08: 0000000000000000 R09: 0000000000000000
[  289.343027][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.343042][T18252] R13: 0000000000000000 R14: 00007f76cac15fa0 R15: 00007fff6a96eb28
[  289.343064][T18252]  </TASK>
[  289.550123][T18256] netlink: 'syz.4.5599': attribute type 3 has an invalid length.
[  289.558002][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5599'.
[  289.620387][T18246] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.674064][T18246] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.688654][T18246] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.701827][T18246] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.734165][T18282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.735709][T18246] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.744053][T18282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.759762][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.772074][T18281] netlink: 'syz.4.5609': attribute type 3 has an invalid length.
[  289.779901][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5609'.
[  289.787356][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.879381][T18294] netlink: 'syz.2.5613': attribute type 3 has an invalid length.
[  289.887307][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5613'.
[  290.069819][T18315] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.108524][T18315] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.141573][T18318] serio: Serial port ttyS3
[  290.158306][T18315] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.208970][T18315] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.273117][T18315] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.284642][T18315] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.295982][T18315] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.307140][T18315] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.400233][T18330] netlink: 'syz.4.5629': attribute type 3 has an invalid length.
[  290.408260][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5629'.
[  290.535055][T18343] loop5: detected capacity change from 0 to 4096
[  290.544418][T18343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.574502][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.683359][T18351] bridge0: port 3(vlan2) entered blocking state
[  290.689729][T18351] bridge0: port 3(vlan2) entered disabled state
[  290.697314][T18351] vlan2: entered allmulticast mode
[  290.703196][T18351] vlan2: left allmulticast mode
[  290.744102][T18348] loop5: detected capacity change from 0 to 512
[  290.758683][T18348] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #4: comm +}[T: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 9(4), depth 0(0)
[  290.778612][T18348] EXT4-fs error (device loop5): ext4_quota_enable:7104: comm +}[T: Bad quota inode: 4, type: 1
[  290.781644][T18350] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5636'.
[  290.790830][T18348] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  290.813197][T18348] EXT4-fs (loop5): mount failed
[  290.865918][T18358] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.888516][T18360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5639'.
[  290.949523][T18358] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.998483][T18358] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.026136][T18374] netlink: 'syz.5.5646': attribute type 3 has an invalid length.
[  291.033956][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5646'.
[  291.131170][T18358] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.271577][T18380] lo speed is unknown, defaulting to 1000
[  291.355180][T18380] chnl_net:caif_netlink_parms(): no params data found
[  291.394380][T18380] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.401596][T18380] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.408960][T18380] bridge_slave_0: entered allmulticast mode
[  291.415355][T18380] bridge_slave_0: entered promiscuous mode
[  291.422237][T18380] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.429424][T18380] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.436743][T18380] bridge_slave_1: entered allmulticast mode
[  291.443383][T18380] bridge_slave_1: entered promiscuous mode
[  291.462119][T18380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.472978][T18380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.493669][T18380] team0: Port device team_slave_0 added
[  291.500555][T18380] team0: Port device team_slave_1 added
[  291.517762][T18380] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.524785][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.550942][T18380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.562361][T18380] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.569443][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.595467][T18380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.622448][T18380] hsr_slave_0: entered promiscuous mode
[  291.628652][T18380] hsr_slave_1: entered promiscuous mode
[  291.634565][T18380] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.642175][T18380] Cannot create hsr debugfs directory
[  291.695124][T18380] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.748773][T18380] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.808435][T18380] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.859022][T18380] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.878017][T18407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5653'.
[  292.061496][   T29] kauditd_printk_skb: 340 callbacks suppressed
[  292.061596][   T29] audit: type=1326 audit(1738717221.830:26940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.094986][   T29] audit: type=1326 audit(1738717221.830:26941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.118689][   T29] audit: type=1326 audit(1738717221.830:26942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.142255][   T29] audit: type=1326 audit(1738717221.830:26943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.166024][   T29] audit: type=1326 audit(1738717221.830:26944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.189634][   T29] audit: type=1326 audit(1738717221.830:26945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.213263][   T29] audit: type=1326 audit(1738717221.830:26946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.236915][   T29] audit: type=1326 audit(1738717221.830:26947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.260658][   T29] audit: type=1326 audit(1738717221.830:26948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.284187][   T29] audit: type=1326 audit(1738717221.840:26949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.2.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ef97cde9 code=0x7ffc0000
[  292.313477][T18420] netlink: 'syz.0.5659': attribute type 3 has an invalid length.
[  292.358685][T18424] netlink: 'syz.5.5661': attribute type 1 has an invalid length.
[  292.388075][T18427] loop5: detected capacity change from 0 to 1024
[  292.411315][T18427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.430808][T18427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5662: bg 0: block 368: padding at end of block bitmap is not set
[  292.461222][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.580337][T18441] FAULT_INJECTION: forcing a failure.
[  292.580337][T18441] name failslab, interval 1, probability 0, space 0, times 0
[  292.593136][T18441] CPU: 0 UID: 0 PID: 18441 Comm: syz.5.5667 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  292.593167][T18441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  292.593181][T18441] Call Trace:
[  292.593187][T18441]  <TASK>
[  292.593253][T18441]  dump_stack_lvl+0xf2/0x150
[  292.593287][T18441]  dump_stack+0x15/0x1a
[  292.593368][T18441]  should_fail_ex+0x24a/0x260
[  292.593410][T18441]  should_failslab+0x8f/0xb0
[  292.593516][T18441]  kmem_cache_alloc_lru_noprof+0x57/0x320
[  292.593558][T18441]  ? __d_alloc+0x3d/0x340
[  292.593600][T18441]  __d_alloc+0x3d/0x340
[  292.593663][T18441]  d_alloc_parallel+0x54/0xc80
[  292.593683][T18441]  ? __rcu_read_unlock+0x4e/0x70
[  292.593753][T18441]  ? __d_lookup+0x342/0x370
[  292.593770][T18441]  ? inode_permission+0xbf/0x300
[  292.593807][T18441]  __lookup_slow+0x8d/0x250
[  292.593847][T18441]  lookup_one_len+0xf1/0x1c0
[  292.593926][T18441]  start_creating+0x139/0x230
[  292.593951][T18441]  __debugfs_create_file+0x73/0x330
[  292.593976][T18441]  debugfs_create_file_full+0x40/0x60
[  292.594008][T18441]  do_blk_trace_setup+0x2cf/0x4d0
[  292.594140][T18441]  blk_trace_setup+0xa7/0x140
[  292.594174][T18441]  blk_trace_ioctl+0xea/0x2e0
[  292.594207][T18441]  ? do_vfs_ioctl+0x96e/0x1530
[  292.594227][T18441]  ? selinux_file_ioctl+0x2f7/0x380
[  292.594248][T18441]  blkdev_ioctl+0x281/0x450
[  292.594275][T18441]  ? __pfx_blkdev_ioctl+0x10/0x10
[  292.594314][T18441]  __se_sys_ioctl+0xc9/0x140
[  292.594338][T18441]  __x64_sys_ioctl+0x43/0x50
[  292.594360][T18441]  x64_sys_call+0x1690/0x2dc0
[  292.594385][T18441]  do_syscall_64+0xc9/0x1c0
[  292.594408][T18441]  ? clear_bhb_loop+0x55/0xb0
[  292.594495][T18441]  ? clear_bhb_loop+0x55/0xb0
[  292.594527][T18441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.594591][T18441] RIP: 0033:0x7f76ca9fcde9
[  292.594607][T18441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.594677][T18441] RSP: 002b:00007f76c9067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.594759][T18441] RAX: ffffffffffffffda RBX: 00007f76cac15fa0 RCX: 00007f76ca9fcde9
[  292.594770][T18441] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000005
[  292.594782][T18441] RBP: 00007f76c9067090 R08: 0000000000000000 R09: 0000000000000000
[  292.594793][T18441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.594804][T18441] R13: 0000000000000000 R14: 00007f76cac15fa0 R15: 00007fff6a96eb28
[  292.594901][T18441]  </TASK>
[  293.101820][T18455] FAULT_INJECTION: forcing a failure.
[  293.101820][T18455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.115015][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.2.5673 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  293.115044][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  293.115059][T18455] Call Trace:
[  293.115067][T18455]  <TASK>
[  293.115076][T18455]  dump_stack_lvl+0xf2/0x150
[  293.115155][T18455]  dump_stack+0x15/0x1a
[  293.115174][T18455]  should_fail_ex+0x24a/0x260
[  293.115203][T18455]  should_fail+0xb/0x10
[  293.115283][T18455]  should_fail_usercopy+0x1a/0x20
[  293.115326][T18455]  _copy_from_user+0x1c/0xa0
[  293.115346][T18455]  copy_msghdr_from_user+0x54/0x2a0
[  293.115366][T18455]  ? __fget_files+0x17c/0x1c0
[  293.115394][T18455]  __sys_sendmsg+0x13e/0x230
[  293.115431][T18455]  __x64_sys_sendmsg+0x46/0x50
[  293.115457][T18455]  x64_sys_call+0x2734/0x2dc0
[  293.115487][T18455]  do_syscall_64+0xc9/0x1c0
[  293.115508][T18455]  ? clear_bhb_loop+0x55/0xb0
[  293.115531][T18455]  ? clear_bhb_loop+0x55/0xb0
[  293.115553][T18455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.115576][T18455] RIP: 0033:0x7fd9ef97cde9
[  293.115650][T18455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.115666][T18455] RSP: 002b:00007fd9edfe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.115681][T18455] RAX: ffffffffffffffda RBX: 00007fd9efb95fa0 RCX: 00007fd9ef97cde9
[  293.115692][T18455] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  293.115702][T18455] RBP: 00007fd9edfe1090 R08: 0000000000000000 R09: 0000000000000000
[  293.115732][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.115783][T18455] R13: 0000000000000000 R14: 00007fd9efb95fa0 R15: 00007ffee7cd86b8
[  293.115799][T18455]  </TASK>
[  293.299757][T18457] netlink: 'syz.2.5674': attribute type 3 has an invalid length.
[  293.773975][T18480] serio: Serial port ttyS3
[  294.001788][T18380] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  294.011913][T18380] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  294.020697][T18380] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  294.029676][T18380] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  294.078376][T18380] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.092287][T18380] 8021q: adding VLAN 0 to HW filter on device team0
[  294.103046][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.110146][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.123573][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.130780][ T1655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.162366][ T1807] bridge_slave_1: left allmulticast mode
[  294.168126][ T1807] bridge_slave_1: left promiscuous mode
[  294.173855][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.182324][ T1807] bridge_slave_0: left allmulticast mode
[  294.188107][ T1807] bridge_slave_0: left promiscuous mode
[  294.193762][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.304988][T18380] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.350368][ T1807] hsr_slave_0: left promiscuous mode
[  294.356405][ T1807] hsr_slave_1: left promiscuous mode
[  294.362835][ T1807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.370463][ T1807] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.381163][ T1807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.386162][T18486] __nla_validate_parse: 8 callbacks suppressed
[  294.386180][T18486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5683'.
[  294.388668][ T1807] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.413629][ T1807] veth1_macvtap: left promiscuous mode
[  294.414451][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5683'.
[  294.425298][ T1807] veth0_macvtap: left promiscuous mode
[  294.433642][ T1807] veth1_vlan: left promiscuous mode
[  294.439028][ T1807] veth0_vlan: left promiscuous mode
[  294.502217][T18490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5684'.
[  294.512319][ T1807] team0 (unregistering): Port device team_slave_1 removed
[  294.512983][T18490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'.
[  294.528801][ T1807] team0 (unregistering): Port device team_slave_0 removed
[  294.595888][T18380] veth0_vlan: entered promiscuous mode
[  294.603720][T18380] veth1_vlan: entered promiscuous mode
[  294.627823][T18380] veth0_macvtap: entered promiscuous mode
[  294.638168][T18380] veth1_macvtap: entered promiscuous mode
[  294.659253][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.669751][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.679593][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.690069][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.699939][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.710511][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.720385][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.730904][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.740823][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.751325][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.761201][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  294.771769][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.782474][T18380] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.797675][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.808228][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.818150][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.828612][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.838746][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.849205][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.859064][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.869646][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.879481][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.890068][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.900095][T18380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.910549][T18380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.921221][T18380] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.928615][T18501] netlink: 'syz.2.5687': attribute type 3 has an invalid length.
[  294.936397][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5687'.
[  295.018129][T18380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.026977][T18380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.035855][T18380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.044924][T18380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.081180][T18358] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.093444][T18358] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.111561][T18358] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.126171][T18358] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.173473][T18521] bridge0: port 1(vlan2) entered blocking state
[  295.180251][T18521] bridge0: port 1(vlan2) entered disabled state
[  295.243604][T18521] vlan2: entered allmulticast mode
[  295.250379][T18531] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5693'.
[  295.278418][T18521] vlan2: left allmulticast mode
[  295.444872][T18545] bridge0: port 3(vlan2) entered blocking state
[  295.451295][T18545] bridge0: port 3(vlan2) entered disabled state
[  295.468437][T18545] vlan2: entered allmulticast mode
[  295.486340][T18545] vlan2: left allmulticast mode
[  295.514241][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'.
[  295.557872][T18549] batadv0 (unregistering): left allmulticast mode
[  295.564408][T18549] batadv0 (unregistering): left promiscuous mode
[  295.570884][T18549] bridge0: port 3(batadv0) entered disabled state
[  295.605576][T18556] netlink: 'syz.5.5704': attribute type 3 has an invalid length.
[  295.613406][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5704'.
[  295.647301][T18542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5700'.
[  295.702213][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5703'.
[  296.149839][T18590] bridge0: port 3(vlan2) entered blocking state
[  296.156197][T18590] bridge0: port 3(vlan2) entered disabled state
[  296.165076][T18590] vlan2: entered allmulticast mode
[  296.171602][T18590] vlan2: left allmulticast mode
[  296.303732][T18597] lo speed is unknown, defaulting to 1000
[  296.409999][T18596] FAULT_INJECTION: forcing a failure.
[  296.409999][T18596] name failslab, interval 1, probability 0, space 0, times 0
[  296.422910][T18596] CPU: 1 UID: 0 PID: 18596 Comm: syz.5.5717 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  296.422938][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  296.422951][T18596] Call Trace:
[  296.422980][T18596]  <TASK>
[  296.422987][T18596]  dump_stack_lvl+0xf2/0x150
[  296.423015][T18596]  dump_stack+0x15/0x1a
[  296.423036][T18596]  should_fail_ex+0x24a/0x260
[  296.423104][T18596]  should_failslab+0x8f/0xb0
[  296.423134][T18596]  kmem_cache_alloc_noprof+0x52/0x320
[  296.423167][T18596]  ? alloc_empty_file+0xd0/0x200
[  296.423224][T18596]  alloc_empty_file+0xd0/0x200
[  296.423254][T18596]  path_openat+0x6a/0x1fc0
[  296.423349][T18596]  ? mntput+0x49/0x70
[  296.423365][T18596]  ? terminate_walk+0x260/0x280
[  296.423394][T18596]  ? path_openat+0x1a78/0x1fc0
[  296.423417][T18596]  ? _parse_integer_limit+0x167/0x180
[  296.423452][T18596]  do_filp_open+0x107/0x230
[  296.423533][T18596]  do_open_execat+0xd0/0x280
[  296.423630][T18596]  alloc_bprm+0x2a/0x680
[  296.423658][T18596]  do_execveat_common+0x12b/0x7e0
[  296.423785][T18596]  __x64_sys_execve+0x5a/0x70
[  296.423826][T18596]  x64_sys_call+0x1333/0x2dc0
[  296.423855][T18596]  do_syscall_64+0xc9/0x1c0
[  296.423877][T18596]  ? clear_bhb_loop+0x55/0xb0
[  296.423942][T18596]  ? clear_bhb_loop+0x55/0xb0
[  296.423967][T18596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.424056][T18596] RIP: 0033:0x7f76ca9fcde9
[  296.424079][T18596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.424101][T18596] RSP: 002b:00007f76c9046038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  296.424118][T18596] RAX: ffffffffffffffda RBX: 00007f76cac16080 RCX: 00007f76ca9fcde9
[  296.424130][T18596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  296.424141][T18596] RBP: 00007f76c9046090 R08: 0000000000000000 R09: 0000000000000000
[  296.424152][T18596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.424184][T18596] R13: 0000000000000000 R14: 00007f76cac16080 R15: 00007fff6a96eb28
[  296.424205][T18596]  </TASK>
[  296.743944][T18606] netlink: 'syz.0.5726': attribute type 3 has an invalid length.
[  297.051195][T18632] netlink: 'syz.0.5739': attribute type 3 has an invalid length.
[  297.193299][   T29] kauditd_printk_skb: 175 callbacks suppressed
[  297.193312][   T29] audit: type=1326 audit(1738717224.967:27125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.236243][   T29] audit: type=1326 audit(1738717224.997:27126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.260190][   T29] audit: type=1326 audit(1738717224.997:27127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.284384][   T29] audit: type=1326 audit(1738717224.997:27128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.308000][   T29] audit: type=1326 audit(1738717224.997:27129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.331811][   T29] audit: type=1326 audit(1738717224.997:27130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.355660][   T29] audit: type=1326 audit(1738717224.997:27131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18641 comm="syz.3.5743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.379916][   T29] audit: type=1326 audit(1738717225.077:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18651 comm="syz.3.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.403760][   T29] audit: type=1326 audit(1738717225.077:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18651 comm="syz.3.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.427602][   T29] audit: type=1326 audit(1738717225.077:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18651 comm="syz.3.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f32d6aecde9 code=0x7ffc0000
[  297.955916][T18662] loop5: detected capacity change from 0 to 4096
[  297.962993][T18662] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  298.000678][T18667] netlink: 'syz.4.5752': attribute type 3 has an invalid length.
[  298.159332][T18683] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.201832][T18691] netlink: 'syz.0.5764': attribute type 3 has an invalid length.
[  298.233178][T18694] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  298.244907][T18683] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.318423][T18683] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.368581][T18683] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.397306][T18706] netlink: 'syz.3.5771': attribute type 3 has an invalid length.
[  298.593995][T18720] FAULT_INJECTION: forcing a failure.
[  298.593995][T18720] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.607382][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.0.5776 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  298.607414][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  298.607493][T18720] Call Trace:
[  298.607502][T18720]  <TASK>
[  298.607512][T18720]  dump_stack_lvl+0xf2/0x150
[  298.607546][T18720]  dump_stack+0x15/0x1a
[  298.607572][T18720]  should_fail_ex+0x24a/0x260
[  298.607613][T18720]  should_fail+0xb/0x10
[  298.607724][T18720]  should_fail_usercopy+0x1a/0x20
[  298.607759][T18720]  _copy_from_user+0x1c/0xa0
[  298.607788][T18720]  move_addr_to_kernel+0x82/0x120
[  298.607829][T18720]  __sys_sendto+0x12e/0x230
[  298.607867][T18720]  __x64_sys_sendto+0x78/0x90
[  298.607926][T18720]  x64_sys_call+0x29fa/0x2dc0
[  298.607952][T18720]  do_syscall_64+0xc9/0x1c0
[  298.607975][T18720]  ? clear_bhb_loop+0x55/0xb0
[  298.608007][T18720]  ? clear_bhb_loop+0x55/0xb0
[  298.608095][T18720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.608128][T18720] RIP: 0033:0x7f8374baec7c
[  298.608143][T18720] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  298.608161][T18720] RSP: 002b:00007f837320fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  298.608180][T18720] RAX: ffffffffffffffda RBX: 00007f837320ffc0 RCX: 00007f8374baec7c
[  298.608196][T18720] RDX: 0000000000000020 RSI: 00007f8373210010 RDI: 0000000000000004
[  298.608211][T18720] RBP: 0000000000000000 R08: 00007f837320ff14 R09: 000000000000000c
[  298.608239][T18720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  298.608254][T18720] R13: 00007f837320ff68 R14: 00007f8373210010 R15: 0000000000000000
[  298.608272][T18720]  </TASK>
[  298.610076][T18720] netlink: 'syz.0.5776': attribute type 10 has an invalid length.
[  298.819257][T18720] team0: Port device dummy0 added
[  298.882628][T18730] loop5: detected capacity change from 0 to 8192
[  298.908828][T18733] bridge0: port 1(vlan2) entered blocking state
[  298.915176][T18733] bridge0: port 1(vlan2) entered disabled state
[  298.934415][T18733] vlan2: entered allmulticast mode
[  298.942207][T18733] vlan2: left allmulticast mode
[  299.275779][T18752] netlink: 'syz.0.5790': attribute type 3 has an invalid length.
[  299.366590][T18755] can: request_module (can-proto-5) failed.
[  299.460954][T18759] netlink: 'syz.2.5792': attribute type 3 has an invalid length.
[  299.469184][T18759] __nla_validate_parse: 30 callbacks suppressed
[  299.469200][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5792'.
[  299.538854][T18763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5793'.
[  299.555611][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5793'.
[  299.632693][T18768] bridge0: port 3(vlan2) entered blocking state
[  299.639272][T18768] bridge0: port 3(vlan2) entered disabled state
[  299.654252][T18768] vlan2: entered allmulticast mode
[  299.673951][T18768] vlan2: left allmulticast mode
[  299.707488][T18765] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5795'.
[  299.727558][T18765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.738060][T18765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.748022][T18765] bond0 (unregistering): Released all slaves
[  299.805662][T18781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5801'.
[  299.832872][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5801'.
[  299.840729][T18783] loop5: detected capacity change from 0 to 512
[  299.856521][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5803'.
[  299.867471][T18783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.881806][T18783] FAULT_INJECTION: forcing a failure.
[  299.881806][T18783] name failslab, interval 1, probability 0, space 0, times 0
[  299.894613][T18783] CPU: 1 UID: 0 PID: 18783 Comm: syz.5.5802 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  299.894724][T18783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  299.894739][T18783] Call Trace:
[  299.894746][T18783]  <TASK>
[  299.894756][T18783]  dump_stack_lvl+0xf2/0x150
[  299.894795][T18783]  dump_stack+0x15/0x1a
[  299.894820][T18783]  should_fail_ex+0x24a/0x260
[  299.894861][T18783]  should_failslab+0x8f/0xb0
[  299.894892][T18783]  kmem_cache_alloc_noprof+0x52/0x320
[  299.895004][T18783]  ? io_submit_one+0xb7/0x1230
[  299.895036][T18783]  io_submit_one+0xb7/0x1230
[  299.895074][T18783]  ? __rcu_read_unlock+0x4e/0x70
[  299.895165][T18783]  __se_sys_io_submit+0xf5/0x280
[  299.895235][T18783]  __x64_sys_io_submit+0x43/0x50
[  299.895265][T18783]  x64_sys_call+0x2c20/0x2dc0
[  299.895298][T18783]  do_syscall_64+0xc9/0x1c0
[  299.895373][T18783]  ? clear_bhb_loop+0x55/0xb0
[  299.895404][T18783]  ? clear_bhb_loop+0x55/0xb0
[  299.895438][T18783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.895496][T18783] RIP: 0033:0x7f76ca9fcde9
[  299.895514][T18783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.895561][T18783] RSP: 002b:00007f76c9067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  299.895580][T18783] RAX: ffffffffffffffda RBX: 00007f76cac15fa0 RCX: 00007f76ca9fcde9
[  299.895592][T18783] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007f76cb754000
[  299.895604][T18783] RBP: 00007f76c9067090 R08: 0000000000000000 R09: 0000000000000000
[  299.895618][T18783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.895631][T18783] R13: 0000000000000000 R14: 00007f76cac15fa0 R15: 00007fff6a96eb28
[  299.895726][T18783]  </TASK>
[  300.140705][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.162265][T18791] vlan2: entered promiscuous mode
[  300.167453][T18791] team0: entered promiscuous mode
[  300.172639][T18791] team_slave_0: entered promiscuous mode
[  300.178607][T18791] team_slave_1: entered promiscuous mode
[  300.185084][T18791] vlan2: entered allmulticast mode
[  300.190429][T18791] team0: entered allmulticast mode
[  300.196087][T18791] team_slave_0: entered allmulticast mode
[  300.202145][T18791] team_slave_1: entered allmulticast mode
[  300.243216][T18683] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.269886][T18795] loop5: detected capacity change from 0 to 512
[  300.276950][T18795] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  300.292099][T18683] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.293035][T18800] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5807'.
[  300.305685][T18683] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.323817][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5807'.
[  300.331187][T18795] EXT4-fs (loop5): 1 truncate cleaned up
[  300.341769][T18683] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.367261][T18795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.642461][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.707419][T18816] loop5: detected capacity change from 0 to 1024
[  300.761203][T18816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.807811][T18816] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5813: bg 0: block 368: padding at end of block bitmap is not set
[  300.908869][T18827] validate_nla: 1 callbacks suppressed
[  300.908888][T18827] netlink: 'syz.0.5817': attribute type 3 has an invalid length.
[  300.922315][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5817'.
[  300.962077][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.029439][T18833] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.117770][T18833] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.181622][T18833] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.232861][T18840] netlink: 'syz.3.5821': attribute type 3 has an invalid length.
[  301.304793][T18833] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.446198][T18833] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.588447][T18858] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.599582][T18859] netlink: 'syz.3.5831': attribute type 3 has an invalid length.
[  301.623531][T18833] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.694391][T18833] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.876016][T18858] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.887304][T18867] netlink: 'syz.3.5835': attribute type 3 has an invalid length.
[  301.902344][T18833] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.928442][T18858] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.981022][T18858] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.058634][T18876] loop5: detected capacity change from 0 to 1024
[  302.116572][T18876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.152736][T18876] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5837: bg 0: block 368: padding at end of block bitmap is not set
[  302.213745][T12069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.245115][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  302.245132][   T29] audit: type=1400 audit(1738717228.016:27404): avc:  denied  { watch_reads } for  pid=18887 comm="syz.2.5843" path="/546" dev="tmpfs" ino=2852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  302.354760][T18902] netlink: 'syz.2.5849': attribute type 3 has an invalid length.
[  302.455365][T18911] serio: Serial port ttyS3
[  302.616056][T18922] tmpfs: Bad value for 'mpol'
[  302.618705][   T29] audit: type=1400 audit(1738717228.386:27405): avc:  denied  { mounton } for  pid=18920 comm="syz.0.5856" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  302.685854][   T29] audit: type=1400 audit(1738717228.456:27406): avc:  granted  { setsecparam } for  pid=18926 comm="syz.0.5859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  302.951481][T18938] loop5: detected capacity change from 0 to 4096
[  302.958636][T18938] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  303.017076][T18945] lo speed is unknown, defaulting to 1000
[  303.142453][T18962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.218420][T18962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.299057][T18962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.310383][T18984] loop5: detected capacity change from 0 to 4096
[  303.317007][T18984] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  303.378676][T18962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.435127][T18962] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.449526][T18962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.464326][T18962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.476307][T18962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.623237][T19002] bridge0: port 3(vlan2) entered blocking state
[  303.629608][T19002] bridge0: port 3(vlan2) entered disabled state
[  303.636028][T19002] vlan2: entered allmulticast mode
[  303.641716][T19002] vlan2: left allmulticast mode
[  303.672826][T19005] loop5: detected capacity change from 0 to 256
[  303.733437][   T29] audit: type=1326 audit(1738717229.506:27407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.757762][   T29] audit: type=1326 audit(1738717229.506:27408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.781519][   T29] audit: type=1326 audit(1738717229.506:27409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.805118][   T29] audit: type=1326 audit(1738717229.506:27410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.828939][   T29] audit: type=1326 audit(1738717229.506:27411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.852694][   T29] audit: type=1326 audit(1738717229.506:27412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  303.876588][   T29] audit: type=1326 audit(1738717229.506:27413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.5.5894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f76ca9fcde9 code=0x7ffc0000
[  304.365088][T18858] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.376330][T18858] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.388335][T18858] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.401789][T18858] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.568396][T19042] bridge0: port 1(vlan2) entered blocking state
[  304.574737][T19042] bridge0: port 1(vlan2) entered disabled state
[  304.582081][T19042] vlan2: entered allmulticast mode
[  304.587850][T19042] vlan2: left allmulticast mode
[  304.604112][T19043] vlan2: entered promiscuous mode
[  304.609270][T19043] team0: entered promiscuous mode
[  304.614422][T19043] team_slave_0: entered promiscuous mode
[  304.620313][T19043] team_slave_1: entered promiscuous mode
[  304.626308][T19043] vlan2: entered allmulticast mode
[  304.631604][T19043] team0: entered allmulticast mode
[  304.636783][T19043] team_slave_0: entered allmulticast mode
[  304.642741][T19043] team_slave_1: entered allmulticast mode
[  304.656560][T19036] __nla_validate_parse: 23 callbacks suppressed
[  304.656579][T19036] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5904'.
[  304.725274][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5907'.
[  304.735806][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'.
[  304.879569][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5910'.
[  304.890718][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5910'.
[  305.041870][T19060] netlink: 'syz.4.5914': attribute type 3 has an invalid length.
[  305.049735][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5914'.
[  305.146476][T19068] netlink: 'syz.0.5917': attribute type 3 has an invalid length.
[  305.154982][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5917'.
[  305.272682][T19072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5919'.
[  305.282777][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5919'.
[  305.336356][T19074] netlink: 'syz.4.5920': attribute type 3 has an invalid length.
[  305.344177][T19074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5920'.
[  305.495821][T19094] netlink: 'syz.0.5928': attribute type 3 has an invalid length.
[  305.730432][T19115] FAULT_INJECTION: forcing a failure.
[  305.730432][T19115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.730477][T19115] CPU: 0 UID: 0 PID: 19115 Comm: syz.3.5935 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  305.730507][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  305.730521][T19115] Call Trace:
[  305.730526][T19115]  <TASK>
[  305.730533][T19115]  dump_stack_lvl+0xf2/0x150
[  305.730581][T19115]  dump_stack+0x15/0x1a
[  305.730606][T19115]  should_fail_ex+0x24a/0x260
[  305.730673][T19115]  should_fail+0xb/0x10
[  305.730709][T19115]  should_fail_usercopy+0x1a/0x20
[  305.730749][T19115]  _copy_from_user+0x1c/0xa0
[  305.730840][T19115]  copy_msghdr_from_user+0x54/0x2a0
[  305.730865][T19115]  ? __fget_files+0x17c/0x1c0
[  305.730908][T19115]  __sys_sendmsg+0x13e/0x230
[  305.730949][T19115]  __x64_sys_sendmsg+0x46/0x50
[  305.731067][T19115]  x64_sys_call+0x2734/0x2dc0
[  305.731099][T19115]  do_syscall_64+0xc9/0x1c0
[  305.731195][T19115]  ? clear_bhb_loop+0x55/0xb0
[  305.731229][T19115]  ? clear_bhb_loop+0x55/0xb0
[  305.731262][T19115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.731335][T19115] RIP: 0033:0x7f32d6aecde9
[  305.731353][T19115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.731376][T19115] RSP: 002b:00007f32d5151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.731398][T19115] RAX: ffffffffffffffda RBX: 00007f32d6d05fa0 RCX: 00007f32d6aecde9
[  305.731414][T19115] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000000000000005
[  305.731429][T19115] RBP: 00007f32d5151090 R08: 0000000000000000 R09: 0000000000000000
[  305.731523][T19115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.731538][T19115] R13: 0000000000000000 R14: 00007f32d6d05fa0 R15: 00007ffd400fa878
[  305.731559][T19115]  </TASK>
[  305.775117][T19116] vlan2: entered promiscuous mode
[  305.775164][T19116] team0: entered promiscuous mode
[  305.775207][T19116] team_slave_0: entered promiscuous mode
[  305.775335][T19116] team_slave_1: entered promiscuous mode
[  305.775603][T19116] vlan2: entered allmulticast mode
[  305.775660][T19116] team0: entered allmulticast mode
[  305.775686][T19116] team_slave_0: entered allmulticast mode
[  305.775716][T19116] team_slave_1: entered allmulticast mode
[  305.801080][T19117] serio: Serial port ttyS3
[  306.474862][T19148] netlink: 'syz.5.5949': attribute type 3 has an invalid length.
[  306.598075][    C1] ==================================================================
[  306.606206][    C1] BUG: KCSAN: data-race in can_receive / can_receive
[  306.612931][    C1] 
[  306.615259][    C1] read-write to 0xffff888117f1a608 of 8 bytes by interrupt on cpu 0:
[  306.623332][    C1]  can_receive+0x4e/0x1f0
[  306.627687][    C1]  canfd_rcv+0xe7/0x180
[  306.631865][    C1]  __netif_receive_skb+0x123/0x280
[  306.636992][    C1]  process_backlog+0x22e/0x440
[  306.641776][    C1]  __napi_poll+0x63/0x3c0
[  306.646134][    C1]  net_rx_action+0x3a1/0x7f0
[  306.650747][    C1]  handle_softirqs+0xbf/0x280
[  306.655432][    C1]  run_ksoftirqd+0x1c/0x30
[  306.659857][    C1]  smpboot_thread_fn+0x31c/0x4c0
[  306.664820][    C1]  kthread+0x4ae/0x520
[  306.668990][    C1]  ret_from_fork+0x4b/0x60
[  306.673415][    C1]  ret_from_fork_asm+0x1a/0x30
[  306.678188][    C1] 
[  306.680508][    C1] read-write to 0xffff888117f1a608 of 8 bytes by interrupt on cpu 1:
[  306.688569][    C1]  can_receive+0x4e/0x1f0
[  306.692908][    C1]  canfd_rcv+0xe7/0x180
[  306.697083][    C1]  __netif_receive_skb+0x123/0x280
[  306.702228][    C1]  process_backlog+0x22e/0x440
[  306.707042][    C1]  __napi_poll+0x63/0x3c0
[  306.711421][    C1]  net_rx_action+0x3a1/0x7f0
[  306.716049][    C1]  handle_softirqs+0xbf/0x280
[  306.720732][    C1]  do_softirq+0x5e/0x90
[  306.724894][    C1]  __local_bh_enable_ip+0x6e/0x70
[  306.729922][    C1]  _raw_spin_unlock_bh+0x36/0x40
[  306.734874][    C1]  lock_sock_nested+0x10f/0x140
[  306.739730][    C1]  tcp_close+0x1b/0xd0
[  306.743805][    C1]  inet_release+0xce/0xf0
[  306.748148][    C1]  sock_close+0x68/0x150
[  306.752403][    C1]  __fput+0x2ac/0x640
[  306.756396][    C1]  __fput_sync+0x96/0xc0
[  306.760649][    C1]  __x64_sys_close+0x55/0xe0
[  306.765251][    C1]  x64_sys_call+0x266c/0x2dc0
[  306.769933][    C1]  do_syscall_64+0xc9/0x1c0
[  306.774438][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.780343][    C1] 
[  306.782660][    C1] value changed: 0x00000000000010b3 -> 0x00000000000010b4
[  306.789772][    C1] 
[  306.792099][    C1] Reported by Kernel Concurrency Sanitizer on:
[  306.798278][    C1] CPU: 1 UID: 0 PID: 18380 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0
[  306.809211][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  306.819278][    C1] ==================================================================