last executing test programs: 2.641339221s ago: executing program 0 (id=167): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x65, 0xfa, 0x8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x4}, 0x800, 0x8000000000000000, 0xfffffff7, 0x8, 0x8, 0x5, 0x6, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c00010007000040"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x400, 0xffffffff, 0x0, 0x188, 0x98, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth0_macvtap\x00', {}, {}, 0x89}, 0x0, 0x90, 0xf0, 0x0, {0x60010000}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0xffff, 0x0, 0x0, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x1f, 0x2, 0x0, 0x0, 0x0, 0xfffc, 0x100]}}}, {{@uncond, 0x0, 0xb8, 0x1e0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x675, 0x6, 0xfffffffffffffff3, 0xa8, 0x3ff, 0x3a, 0x5d4b}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff8001, 'system_u:object_r:tzdata_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) 2.257575526s ago: executing program 3 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x3, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) 2.252063296s ago: executing program 3 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xa, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xe, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f0000000840)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @ldst={0x3, 0x1, 0x1, 0x1, 0x0, 0x40, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r4}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xb, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000e8c, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r10 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 1.931911421s ago: executing program 3 (id=178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x0, @multicast2=0xac1414aa}], 0x2c) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000100)={0x20000003}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) getdents64(r6, &(0x7f0000000000)=""/26, 0x1a) getdents(r6, 0xfffffffffffffffd, 0x58) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.705953384s ago: executing program 0 (id=182): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f00000000c0), &(0x7f0000000140)=0x14) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 1.649659525s ago: executing program 0 (id=183): syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 1.565778707s ago: executing program 1 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x8, 0x1, 0xfc, 0x2e2d}, {0x1041, 0x0, 0x8, 0xa}, {0x76, 0x9, 0x86, 0x9}, {0x4, 0xb, 0x9, 0xe1cf}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x18a00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000480), &(0x7f0000000080)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') pread64(r8, 0x0, 0x0, 0x4009) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x5c, r5, 0x1, 0x0, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r10, 0x0, 0x4}, 0x18) r11 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r12, 0x400, 0x1) fallocate(r9, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r13, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r11, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r11}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r9, 0x0, 0x0, 0xffffffffffffffff}]) close(r2) 1.238858801s ago: executing program 0 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000019c0)=@nat={'nat\x00', 0x670, 0x5, 0x3e8, 0x278, 0x350, 0xfeffffff, 0x0, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key=0x3}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x0, 0x7}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x6, 0x2, 0xc], 0x3, 0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x350}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x6, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x17f]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x1000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xff}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x2e}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000000}], [{}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000140)={0x0, 0x3938700}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private2, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) fsmount(r4, 0x0, 0x0) creat(0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513883, 0x488) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 1.238029051s ago: executing program 0 (id=193): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) 1.237783591s ago: executing program 1 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x2, 0x0, 0x300, 0x0, 0x2900, 0x20, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4030, 0x5, 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) cachestat(r2, &(0x7f0000000000)={0x3ff, 0x80000}, &(0x7f0000000500), 0x0) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="a98726bb2ced8019dbe642f197476f", 0xf, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 1.006639225s ago: executing program 1 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0xf2f, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/17, &(0x7f0000000080)=0x11) 998.719825ms ago: executing program 1 (id=197): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000207020000f8ffffffb703000000000000b7040000c3000000950000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r3, 0x0, 0x6}, 0x18) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e1c, 0x0, @private1}, 0x1c) syz_emit_ethernet(0xc6, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaac8aaaa0180c200000088a8350081003f000800450000b0000000000011907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26324898f04bd10c9bf9dca04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001400"/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r6, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r8, 0x0, 0x6}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r12, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r14 = signalfd4(r13, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) sendmsg$TIPC_NL_NAME_TABLE_GET(r14, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e801c8a2", @ANYRES64=r4, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4040881}, 0x48051) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r15, 0x0, 0xffffffffffffffff}, 0x13) 975.799255ms ago: executing program 3 (id=199): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) r3 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf2502000000080004006401010014000300fe80000000000000000000000000000d"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8840) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000540)) 817.484978ms ago: executing program 4 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/17, &(0x7f0000000080)=0x11) 562.187832ms ago: executing program 4 (id=210): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") mkdir(&(0x7f00000000c0)='./control\x00', 0x20) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001100)={&(0x7f0000000ac0)=@x25, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/207, 0xcf}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/130, 0x82}, {&(0x7f0000000e00)=""/9, 0x9}, {&(0x7f0000000e40)=""/224, 0xe0}, {&(0x7f0000000f40)=""/48, 0x30}], 0x7, &(0x7f0000001000)=""/212, 0xd4}, 0x40002000) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000180)='./control\x00', &(0x7f00000001c0), 0x1002, &(0x7f0000000200)={'trans=xen,', {[{@uname={'uname', 0x3d, '-^$.'}}, {@noxattr}, {@noextend}, {@noextend}, {@nodevmap}, {@afid={'afid', 0x3d, 0x48}}, {@version_9p2000}], [{@dont_hash}, {@obj_user={'obj_user', 0x3d, '^@${}+'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f0000000500)={0x6b, 0x7d, 0x2, {{0x0, 0x51, 0x800, 0x4, {0x80, 0x4, 0x6}, 0x1c0000, 0x800, 0x5, 0xd, 0x9, 'dont_hash', 0x4, 'afid', 0xa, 'trans=xen,', 0x7, 'noxattr'}, 0x5, '-+%@(', r3, r4, r5}}, 0x6b) 561.251622ms ago: executing program 3 (id=212): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000c26d20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000700000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff44, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 560.955322ms ago: executing program 4 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) 539.751072ms ago: executing program 3 (id=214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) pwritev2(r0, &(0x7f0000000d80)=[{&(0x7f0000001ec0)="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", 0x107}, {&(0x7f00000009c0)="0bf7dc6ee93227237e5792e97d57819c4052e8828638ed28387e961de254a06e226eb009557ed176d359bbc344ffc2dae9a6855ba3a4924124b8309a1d869a9e0fbcea3376759d454847bcf1b64fafa8afa561ef1fc42ee9a643", 0x5a}, {&(0x7f0000000340)="56d46a52b4814fd8423a42", 0xb}, {&(0x7f0000000e00)="c94f5329c1cf00453e50810a4f065d15ae9162c33e24beb47c46380124b520b2a754803a8f655b2a2ce524f144975937711dfb35b2f615289ee5d2a304cf7287f46f9e1250c762a63008514d8bab6f6bdb6e3d39f22e531fc35d4ef79ee1f76d95e70b180f2183", 0x67}, {&(0x7f0000000ac0)="f7fe61641effc21e7653bced0fa975e15217d2f8259ab8dcaf9c0720dd4a5242bde307272fe13c4c31f5c33da12208b26a616da40390091d52d59042c6d83acb97af3f3d2e6a49ddf60b3942daf57291bfbee16ce8d09bf1a262ad82c90164584d4b9ecc2f7092ddd17b1c1c19cdefc6cc0c27d3e3a7ccbcbd04e3514e8eb3490b920644258e31bfc1d23474093b9fe522eee5b881656023705580b984674f46ebf5bcc4adb533bfb0ed6d85aabe64bf943aa3d44d499fc8b4f337fdf5f6ad260ca84148109122e5615381f4ff939b8e3cb5d14138688c1bbdb7039b792341371527af2e6ffcbc0b305fbfd7aaa71d4c9be7e3071ae0b561", 0xf8}, {&(0x7f0000000bc0)="d8dd6619af7d7bcda7efbc06b22437204290e38144e891277a4e504a061034fe31ffac37933299479dbabc32b4c9d61dae1dc10ca2b32f792ffa14ba490f851285ac427db399c290fbe9930d000000000000008cd4b43a970d8360d2ad99bdccc600a8dd3740b5e5edbf69564b43f48ce7b02f486dec431af3f374ac3b39994fe40987748bbfeb4e1da9ddfe44f41810da2ebd77e6712f105dd60f0b89415e13875c8bc2d7d24a27634f9f48b4c3df78ef69", 0xb2}, {&(0x7f0000000c80)="1762c9168071f933828ad6140a05620852d65e5c05e76625625303f4e7296c22c452f08904024772940a022656eeb260bc265c143fc274e3ef2709b81dc8fc837157536495384c0f34f22fbf1de8f89f56eaee401cc8711824e730718c5aac52b1a130ee5a971186edb39c7c6cbdc9a6352d2980b2c06e453cc32b14599e9109373668ba25ae2cd0c7199d80544eca5df03fdbe89ad682f88301b466a56fa0cbab37a488697e7bb29c1a0cb987cd9184d2159eb60c457f490156aadc7076892f4f13ae0b87784606e84a156931", 0xcd}, {&(0x7f0000000ec0)="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", 0x1000}], 0x8, 0x5, 0xa1f, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = msgget$private(0x0, 0xfffffffffffffffd) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) setgroups(0x1, &(0x7f0000000740)=[r3]) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgsnd(r2, &(0x7f0000002000)=ANY=[@ANYBLOB="0100000000000000c47b1c4c98483e6f12bf9032c6a2d92752241486b5a8cd9bf5a55693be12fe1f9b440f5d4982b75b64c72f1346b85b671f9f54bd51866ca8f0eec83898173c821c90ce18baf274c140b9b0e3a6df2a079eba46ac36f925230d3761fc38fd16402d310ee101c572c6c7df7817d9f9b9d7317ebffcb323545f0ed162"], 0x8, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r9, 0x1}}, 0x18) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x100440, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x3, r9, 0x0, 0x0, 0x1}}, 0x20) accept4$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0xc0c00) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0, r11}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 539.142862ms ago: executing program 4 (id=215): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x3) (async) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) (async) unshare(0x6a040000) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) (async) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x4021}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r11 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r11, &(0x7f00000003c0), 0x0) 461.540143ms ago: executing program 4 (id=216): chmod(&(0x7f0000000000)='./file0\x00', 0x100) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000040)="53ef713d6203f08735fea89b701ea4aca72a3703b8789bb583d3adbbe9a2c4f8b5b126b4a3640ca702de6d785b44fd94c540b6dce5089cbe0ee1c8892925fb3f531315ee10cf8143dda522b8ec370027f6c67a13b8bb1cc772eef2be954a0fbd9c1e538a765071369dc8516e1dfb5371ead02e44098a427bfdb73b99b1a65cd007a13791fbca2fd454e7ae3e5b2f689f70eb2895fa8af0226f08444e3cf152", 0x9f, 0x50, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x2, 0x4}}, 0x80) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 461.346053ms ago: executing program 4 (id=217): creat(&(0x7f0000000200)='./file1\x00', 0x12e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000060000480240001800b0001006f626a72656600001400028008000540000000020800034000000006280001800a00010071756f7461000000180002800c00044000000000000000040800024000000001100001800b000100736f636b657400000900010073797a30000000000900020073797a3200", @ANYRES8], 0xbc}, 0x1, 0x0, 0x0, 0x24004049}, 0xc800) (fail_nth: 4) 428.644304ms ago: executing program 0 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x10, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+\a:h\x03') (async) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x80000) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000004c0)=0x400, &(0x7f0000000500)=0x4) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) acct(&(0x7f0000003000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x2, 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c103638", @ANYRES16=r8, @ANYBLOB="00022bbd7000fbdbdf25020000000800060001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1eb8af569c85889c) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000004000)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69", @ANYBLOB="7053584badbf19155a6538782610f3c1a77fd132b7a2f10338ca2d53843d51cc2181f4891ee6b40b7be743770cb6c59c5ffe50daabb0e0463fadd5a1642965e712f63747fbe761be31b6cb48e491734b2971e652eb5d52912909781d5aa5d0d1b085bfd18ede89df83742e7c7be7a449174e0d52b4ea7d870b3805e08de08de971c584fd155e57cbb96b880787a4849a00", @ANYRES32=r6, @ANYRESDEC=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x1}, 0x18) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r11, 0x5412, &(0x7f0000000400)=0x13) (async, rerun: 64) pselect6(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffffe, 0x10001, 0x100000003, 0x0, 0xc81, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2}, 0x0, 0x0) (async, rerun: 64) ioctl$TCSETSW(r11, 0x5403, &(0x7f0000000040)={0xd, 0x20000007, 0x7, 0x9, 0x1b, "0001000000000000649300"}) 349.278065ms ago: executing program 1 (id=220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x3}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000600)={0x20, 0x1, 0x8, 0x3, 0x52, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delchain={0x2c, 0x65, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x1}, {0xa, 0x10}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x35, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) 348.069295ms ago: executing program 2 (id=222): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x81) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8009005}, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = gettid() sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="5383812c6ca6d633c437ad2ff3317200c9c847499d30c497327c450fc8e3376cd6a53c5e075875ad25d938bf55f2dbbf2d5cf387a1d54767d2d297723865bbd2413d70302000"/80, @ANYRES16=0x0, @ANYRES64], 0x1c}}, 0x4000) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x2a, 0x2, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000235, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019", @ANYRES8=r1], 0x4c}}, 0x4090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018140000", @ANYRES32=r1, @ANYBLOB="00000000000000002430100004000000180000003900000000000000ff0f00008520000004000000181100", @ANYRES32, @ANYBLOB="00000000000000008520000002000000bf91000000000000b7020000000000008500000085000000b7000000000008009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0xdb, &(0x7f0000000780)=""/219, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0xf, 0x10, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9d, @void, @value}, 0x94) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x1004018, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (fail_nth: 4) 342.185445ms ago: executing program 1 (id=223): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x237}) r3 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf2502000000080004006401010014000300fe80000000000000000000000000000d"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8840) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000540)) 72.019699ms ago: executing program 2 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x5d1e3326448b6235, &(0x7f00000005c0), 0x3, 0x575, &(0x7f0000001140)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) utimes(&(0x7f0000000040)='./file0\x00', 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xf904}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000040000000070800014000000008080001400000000908000140000000080c000180080001400000000a"], 0x140}}, 0x0) 9.45011ms ago: executing program 2 (id=225): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000001380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unshare(0x2c020400) write$P9_RGETLOCK(r11, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r10, r12, 0xfffffffffffffc01, 0x0) tee(r4, r12, 0x60000000000, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) fsmount(r9, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.13039ms ago: executing program 2 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xf904}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x88, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000040000000070800014000000008080001400000000908000140000000080c000180080001400000000a"], 0x140}}, 0x0) 8.6982ms ago: executing program 2 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f00000f9000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0xd, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = syz_io_uring_setup(0x1316, &(0x7f0000000040)={0x0, 0x50b7, 0x8000, 0x2, 0x1a0}, &(0x7f00000001c0), &(0x7f0000000240)) io_uring_setup(0x3656, &(0x7f0000000280)={0x0, 0x28a8, 0x4000, 0x1, 0x305, 0x0, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) r10 = gettid() ioprio_get$pid(0x3, r10) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) 0s ago: executing program 2 (id=228): perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_io_uring_setup(0xfa1, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1000000, 0x2db}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file1\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x2004, @fd, 0x7ff, &(0x7f00000000c0)=""/85, 0x55, 0x11}) (async, rerun: 32) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x40, 0x1000, 0x10, @remote, @private0, 0xf8c0, 0x7800, 0x8e, 0xc0000000}}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @rc={0x1f, @any, 0x6}, @xdp={0x2c, 0xa, r5, 0x40}, 0x3, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)='dvmrp0\x00', 0x9, 0x0, 0x7}) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') (rerun: 32) getdents64(r6, &(0x7f0000000480)=""/62, 0x3e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x20010, r6, 0x0) (async, rerun: 64) getdents(r6, 0xffffffffffffffff, 0x5a) (async, rerun: 64) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. [ 22.648871][ T29] audit: type=1400 audit(1750439734.579:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.649733][ T3292] cgroup: Unknown subsys name 'net' [ 22.671610][ T29] audit: type=1400 audit(1750439734.579:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.698964][ T29] audit: type=1400 audit(1750439734.609:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.846294][ T3292] cgroup: Unknown subsys name 'cpuset' [ 22.852341][ T3292] cgroup: Unknown subsys name 'rlimit' [ 23.041636][ T29] audit: type=1400 audit(1750439734.969:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.064947][ T29] audit: type=1400 audit(1750439734.969:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.085390][ T29] audit: type=1400 audit(1750439734.969:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.095462][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.105721][ T29] audit: type=1400 audit(1750439734.969:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.134543][ T29] audit: type=1400 audit(1750439734.979:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.148104][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.159405][ T29] audit: type=1400 audit(1750439734.979:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.191331][ T29] audit: type=1400 audit(1750439735.049:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.305069][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.317895][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 24.398319][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.410950][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.418045][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.425147][ T3303] bridge_slave_0: entered allmulticast mode [ 24.431808][ T3303] bridge_slave_0: entered promiscuous mode [ 24.438526][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.445572][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.452711][ T3303] bridge_slave_1: entered allmulticast mode [ 24.459232][ T3303] bridge_slave_1: entered promiscuous mode [ 24.465352][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.472451][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.479697][ T3306] bridge_slave_0: entered allmulticast mode [ 24.486136][ T3306] bridge_slave_0: entered promiscuous mode [ 24.510530][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.517630][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.524772][ T3306] bridge_slave_1: entered allmulticast mode [ 24.531265][ T3306] bridge_slave_1: entered promiscuous mode [ 24.554261][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.573790][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.585435][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.602079][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.615514][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.635801][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.675590][ T3306] team0: Port device team_slave_0 added [ 24.682584][ T3303] team0: Port device team_slave_0 added [ 24.688480][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.695602][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.702992][ T3302] bridge_slave_0: entered allmulticast mode [ 24.709241][ T3302] bridge_slave_0: entered promiscuous mode [ 24.720333][ T3306] team0: Port device team_slave_1 added [ 24.728781][ T3303] team0: Port device team_slave_1 added [ 24.734544][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.741643][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.748858][ T3302] bridge_slave_1: entered allmulticast mode [ 24.755395][ T3302] bridge_slave_1: entered promiscuous mode [ 24.796760][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.803726][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.830012][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.847459][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.854433][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.880369][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.891084][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.898247][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.905360][ T3304] bridge_slave_0: entered allmulticast mode [ 24.911762][ T3304] bridge_slave_0: entered promiscuous mode [ 24.918196][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.925148][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.951155][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.962784][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.978996][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.985960][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.011910][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.022710][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.029869][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.036992][ T3304] bridge_slave_1: entered allmulticast mode [ 25.043352][ T3304] bridge_slave_1: entered promiscuous mode [ 25.051216][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.071985][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.079136][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.086318][ T3313] bridge_slave_0: entered allmulticast mode [ 25.092653][ T3313] bridge_slave_0: entered promiscuous mode [ 25.113842][ T3302] team0: Port device team_slave_0 added [ 25.119633][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.126781][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.133943][ T3313] bridge_slave_1: entered allmulticast mode [ 25.140142][ T3313] bridge_slave_1: entered promiscuous mode [ 25.151611][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.167065][ T3302] team0: Port device team_slave_1 added [ 25.186647][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.207037][ T3306] hsr_slave_0: entered promiscuous mode [ 25.212945][ T3306] hsr_slave_1: entered promiscuous mode [ 25.225331][ T3303] hsr_slave_0: entered promiscuous mode [ 25.231354][ T3303] hsr_slave_1: entered promiscuous mode [ 25.237117][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.244736][ T3303] Cannot create hsr debugfs directory [ 25.259786][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.266780][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.292760][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.304650][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.315068][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.324814][ T3304] team0: Port device team_slave_0 added [ 25.335380][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.342390][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.368379][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.396117][ T3304] team0: Port device team_slave_1 added [ 25.420485][ T3313] team0: Port device team_slave_0 added [ 25.443042][ T3313] team0: Port device team_slave_1 added [ 25.471917][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.478996][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.504958][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.521700][ T3302] hsr_slave_0: entered promiscuous mode [ 25.527733][ T3302] hsr_slave_1: entered promiscuous mode [ 25.533510][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.541068][ T3302] Cannot create hsr debugfs directory [ 25.546891][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.553860][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.579910][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.590911][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.597893][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.623913][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.643891][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.650949][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.676884][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.754468][ T3304] hsr_slave_0: entered promiscuous mode [ 25.760500][ T3304] hsr_slave_1: entered promiscuous mode [ 25.766569][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.774114][ T3304] Cannot create hsr debugfs directory [ 25.787375][ T3313] hsr_slave_0: entered promiscuous mode [ 25.793283][ T3313] hsr_slave_1: entered promiscuous mode [ 25.799209][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.806865][ T3313] Cannot create hsr debugfs directory [ 25.874275][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.891694][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.902653][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.913247][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.964000][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.973148][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.981752][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.991020][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.017061][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.025537][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.034312][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.044988][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.103415][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.111195][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.122180][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.136405][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.148173][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.157201][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.169266][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.185727][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.192792][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.203830][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.213464][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.220611][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.238748][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.245878][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.261985][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.276017][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.283126][ T2184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.292985][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.307384][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.314558][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.328208][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.366026][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.426731][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.435268][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.445608][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.455667][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.462894][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.476022][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.484167][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.491302][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.502180][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.513393][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.523788][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.530870][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.543684][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.550769][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.559812][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.578314][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.585428][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.594056][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.601166][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.704750][ T3306] veth0_vlan: entered promiscuous mode [ 26.734856][ T3306] veth1_vlan: entered promiscuous mode [ 26.767045][ T3303] veth0_vlan: entered promiscuous mode [ 26.777424][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.785244][ T3306] veth0_macvtap: entered promiscuous mode [ 26.792827][ T3306] veth1_macvtap: entered promiscuous mode [ 26.801380][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.811248][ T3303] veth1_vlan: entered promiscuous mode [ 26.829561][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.845570][ T3303] veth0_macvtap: entered promiscuous mode [ 26.859942][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.869205][ T3303] veth1_macvtap: entered promiscuous mode [ 26.880704][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.906291][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.915043][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.923971][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.932824][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.956967][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.975450][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.009089][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.024881][ T3304] veth0_vlan: entered promiscuous mode [ 27.036300][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.045510][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.054395][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.063143][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.087123][ T3304] veth1_vlan: entered promiscuous mode [ 27.103196][ T3302] veth0_vlan: entered promiscuous mode [ 27.139110][ T3472] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 27.139145][ T3313] veth0_vlan: entered promiscuous mode [ 27.161053][ T3302] veth1_vlan: entered promiscuous mode [ 27.170627][ T3304] veth0_macvtap: entered promiscuous mode [ 27.181546][ T3304] veth1_macvtap: entered promiscuous mode [ 27.193579][ T3313] veth1_vlan: entered promiscuous mode [ 27.215634][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.223782][ T3302] veth0_macvtap: entered promiscuous mode [ 27.238477][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.247615][ T3302] veth1_macvtap: entered promiscuous mode [ 27.257995][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.267051][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.276104][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.285009][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.301926][ T3477] syzkaller0: entered promiscuous mode [ 27.307499][ T3477] syzkaller0: entered allmulticast mode [ 27.314501][ T3482] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 27.335139][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.353055][ T3313] veth0_macvtap: entered promiscuous mode [ 27.362769][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.371193][ T3313] veth1_macvtap: entered promiscuous mode [ 27.380745][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.389794][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.398822][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.407743][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.433129][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.450147][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.468624][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.477799][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.486720][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.495599][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.589632][ T3491] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 27.599881][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 27.608798][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 27.612003][ T3493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.616312][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 27.633521][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 27.641134][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 27.756762][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 27.756776][ T29] audit: type=1400 audit(1750439739.689:126): avc: denied { create } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.787003][ T29] audit: type=1400 audit(1750439739.689:127): avc: denied { setopt } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.806330][ T29] audit: type=1404 audit(1750439739.689:128): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 27.821221][ T29] audit: type=1400 audit(1750439739.709:129): avc: denied { open } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 27.840201][ T29] audit: type=1400 audit(1750439739.709:130): avc: denied { read write } for pid=3496 comm="syz.2.7" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 27.864141][ T29] audit: type=1400 audit(1750439739.719:131): avc: denied { prog_load } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 27.884015][ T29] audit: type=1400 audit(1750439739.719:132): avc: denied { create } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 27.904376][ T29] audit: type=1400 audit(1750439739.719:133): avc: denied { prog_load } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 27.923150][ T29] audit: type=1400 audit(1750439739.719:134): avc: denied { open } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 27.942085][ T29] audit: type=1400 audit(1750439739.719:135): avc: denied { prog_load } for pid=3496 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 28.252121][ T3502] loop3: detected capacity change from 0 to 8192 [ 28.497507][ T3509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.578494][ T3512] loop2: detected capacity change from 0 to 1024 [ 28.589024][ T3514] netdevsim netdevsim0: Direct firmware load for „ failed with error -2 [ 28.599637][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 28.608011][ T3512] ext4: Unknown parameter 'uid<00000000000000000000' [ 28.619056][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.626563][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 28.646583][ T3514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.654053][ T3514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.678230][ T9] IPVS: starting estimator thread 0... [ 28.744525][ T3521] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 28.765911][ T3517] IPVS: using max 2544 ests per chain, 127200 per kthread [ 28.798411][ T3521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 28.862774][ T3532] loop3: detected capacity change from 0 to 2048 [ 28.874319][ T3531] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 28.887393][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 28.929206][ T3541] loop4: detected capacity change from 0 to 512 [ 28.949187][ T3541] ======================================================= [ 28.949187][ T3541] WARNING: The mand mount option has been deprecated and [ 28.949187][ T3541] and is ignored by this kernel. Remove the mand [ 28.949187][ T3541] option from the mount to silence this warning. [ 28.949187][ T3541] ======================================================= [ 28.988022][ T3541] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.994650][ T3541] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.22: bad orphan inode 13 [ 29.012965][ T3541] ext4_test_bit(bit=12, block=18) = 1 [ 29.018606][ T3541] is_bad_inode(inode)=0 [ 29.022770][ T3541] NEXT_ORPHAN(inode)=2130706432 [ 29.027713][ T3541] max_ino=32 [ 29.030974][ T3541] i_nlink=1 [ 29.036465][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.055035][ T3543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.070357][ T3543] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1962 with error 28 [ 29.071008][ T3534] loop2: detected capacity change from 0 to 512 [ 29.082942][ T3543] EXT4-fs (loop3): This should not happen!! Data will be lost [ 29.082942][ T3543] [ 29.098950][ T3543] EXT4-fs (loop3): Total free blocks count 0 [ 29.102018][ T3534] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.20: corrupted xattr block 95: invalid header [ 29.104934][ T3543] EXT4-fs (loop3): Free/Dirty block details [ 29.104949][ T3543] EXT4-fs (loop3): free_blocks=2415919104 [ 29.104961][ T3543] EXT4-fs (loop3): dirty_blocks=1968 [ 29.104973][ T3543] EXT4-fs (loop3): Block reservation details [ 29.120803][ T3534] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 29.124409][ T3543] EXT4-fs (loop3): i_reserved_data_blocks=123 [ 29.166363][ T3534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.20: bg 0: block 7: invalid block bitmap [ 29.178779][ T3541] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET) [ 29.197429][ T3534] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 29.206786][ T3534] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.20: corrupted xattr block 95: invalid header [ 29.226938][ T3534] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 29.237236][ T3534] EXT4-fs (loop2): 1 orphan inode deleted [ 29.243437][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.266426][ T3543] syz.3.17 (3543) used greatest stack depth: 10120 bytes left [ 29.278936][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.299840][ T90] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 29.327659][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.353415][ T3509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.377576][ T3554] netlink: 5 bytes leftover after parsing attributes in process `syz.3.24'. [ 29.407223][ T3559] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 29.407583][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 29.407610][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.407639][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.417285][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.417310][ T3559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.426451][ T3557] GUP no longer grows the stack in syz.4.25 (3557): 200000004000-200000008000 (200000002000) [ 29.426502][ T3557] CPU: 0 UID: 0 PID: 3557 Comm: syz.4.25 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 29.426529][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.426543][ T3557] Call Trace: [ 29.426548][ T3557] [ 29.426554][ T3557] __dump_stack+0x1d/0x30 [ 29.426628][ T3557] dump_stack_lvl+0xe8/0x140 [ 29.426689][ T3557] dump_stack+0x15/0x1b [ 29.426707][ T3557] __get_user_pages+0x199d/0x1fb0 [ 29.426801][ T3557] ? __rcu_read_unlock+0x4f/0x70 [ 29.426898][ T3557] get_user_pages_remote+0x1dc/0x7a0 [ 29.426922][ T3557] __access_remote_vm+0x156/0x560 [ 29.426947][ T3557] access_remote_vm+0x32/0x40 [ 29.426969][ T3557] proc_pid_cmdline_read+0x30f/0x6a0 [ 29.427049][ T3557] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 29.427142][ T3557] vfs_readv+0x3fb/0x690 [ 29.427278][ T3557] ? restore_fpregs_from_fpstate+0x61/0x120 [ 29.427307][ T3557] __x64_sys_preadv+0xfd/0x1c0 [ 29.427328][ T3557] x64_sys_call+0x1503/0x2fb0 [ 29.427420][ T3557] do_syscall_64+0xd2/0x200 [ 29.427445][ T3557] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.427504][ T3557] ? clear_bhb_loop+0x40/0x90 [ 29.427525][ T3557] ? clear_bhb_loop+0x40/0x90 [ 29.427546][ T3557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.427567][ T3557] RIP: 0033:0x7ff5b60be929 [ 29.427585][ T3557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.427622][ T3557] RSP: 002b:00007ff5b4706038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 29.427639][ T3557] RAX: ffffffffffffffda RBX: 00007ff5b62e6080 RCX: 00007ff5b60be929 [ 29.427652][ T3557] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000b [ 29.427664][ T3557] RBP: 00007ff5b6140b39 R08: 0000000000000200 R09: 0000000000000000 [ 29.427675][ T3557] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 29.427687][ T3557] R13: 0000000000000000 R14: 00007ff5b62e6080 R15: 00007ffd7adada58 [ 29.427704][ T3557] [ 29.458768][ T3560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.052132][ T3564] netlink: 5 bytes leftover after parsing attributes in process `syz.0.28'. [ 30.241683][ T3571] syzkaller0: entered promiscuous mode [ 30.247356][ T3571] syzkaller0: entered allmulticast mode [ 30.323015][ T3570] netlink: 5 bytes leftover after parsing attributes in process `syz.0.39'. [ 30.333962][ T3580] loop4: detected capacity change from 0 to 1024 [ 30.336411][ T3583] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.385598][ T3509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.412863][ T3580] ext4: Unknown parameter 'uid<00000000000000000000' [ 30.445351][ T3378] IPVS: starting estimator thread 0... [ 30.459266][ T3509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.496831][ T3589] program syz.4.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.533929][ T3509] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.538951][ T3593] loop2: detected capacity change from 0 to 2048 [ 30.549097][ T3587] IPVS: using max 2592 ests per chain, 129600 per kthread [ 30.554704][ T3509] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.592087][ T3598] program syz.3.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.593684][ T3596] netdevsim netdevsim0: Direct firmware load for „ failed with error -2 [ 30.611815][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 30.614357][ T3509] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.646238][ T3509] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.759199][ T3607] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.794810][ T3612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.801991][ T3607] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1416 with error 28 [ 30.815491][ T3607] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.815491][ T3607] [ 30.825182][ T3607] EXT4-fs (loop2): Total free blocks count 0 [ 30.831232][ T3607] EXT4-fs (loop2): Free/Dirty block details [ 30.837369][ T3607] EXT4-fs (loop2): free_blocks=2415919104 [ 30.843126][ T3607] EXT4-fs (loop2): dirty_blocks=1424 [ 30.848625][ T3607] EXT4-fs (loop2): Block reservation details [ 30.854616][ T3607] EXT4-fs (loop2): i_reserved_data_blocks=89 [ 30.915276][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 30.975790][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.983312][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.066540][ T3611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.074089][ T3611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.143098][ T3620] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 31.192603][ T3620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 31.245278][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 31.265023][ T3628] loop3: detected capacity change from 0 to 1024 [ 31.272437][ T3628] ext4: Unknown parameter 'uid<00000000000000000000' [ 31.369387][ T3626] loop4: detected capacity change from 0 to 512 [ 31.506533][ T803] IPVS: starting estimator thread 0... [ 31.526651][ T3626] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.47: corrupted xattr block 95: invalid header [ 31.551339][ T3626] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.47: bg 0: block 7: invalid block bitmap [ 31.571211][ T3626] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 31.595850][ T3632] IPVS: using max 2592 ests per chain, 129600 per kthread [ 31.611348][ T3626] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.47: corrupted xattr block 95: invalid header [ 31.656068][ T3626] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 31.685672][ T3640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.697917][ T3626] EXT4-fs (loop4): 1 orphan inode deleted [ 31.704395][ T3626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.798029][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.839469][ T3652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.899635][ T3652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.948913][ T3652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.998976][ T3652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.072751][ T3652] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.085459][ T3652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097277][ T3652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109396][ T3652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.415807][ T3658] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 32.430317][ T3662] program syz.4.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.442505][ T3661] program syz.0.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.482026][ T3666] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 32.532743][ T3671] loop3: detected capacity change from 0 to 512 [ 32.541525][ T3671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.548500][ T3671] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.59: bad orphan inode 13 [ 32.558696][ T3671] ext4_test_bit(bit=12, block=18) = 1 [ 32.564230][ T3671] is_bad_inode(inode)=0 [ 32.568611][ T3671] NEXT_ORPHAN(inode)=2130706432 [ 32.568619][ T3671] max_ino=32 [ 32.568625][ T3671] i_nlink=1 [ 32.569406][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.694907][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.909018][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 32.909050][ T29] audit: type=1400 audit(1750439744.839:875): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 32.923617][ T29] audit: type=1400 audit(1750439744.839:876): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 32.946366][ T3683] __nla_validate_parse: 2 callbacks suppressed [ 32.946475][ T3683] netlink: 5 bytes leftover after parsing attributes in process `syz.3.63'. [ 32.964584][ T29] audit: type=1400 audit(1750439744.869:877): avc: denied { map_create } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 32.997896][ T29] audit: type=1400 audit(1750439744.869:878): avc: denied { prog_load } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 33.016824][ T29] audit: type=1400 audit(1750439744.869:879): avc: denied { prog_load } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 33.035836][ T29] audit: type=1400 audit(1750439744.869:880): avc: denied { map_create } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 33.054850][ T29] audit: type=1400 audit(1750439744.879:881): avc: denied { create } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 33.075260][ T29] audit: type=1400 audit(1750439744.879:882): avc: denied { create } for pid=3682 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 33.129518][ T29] audit: type=1400 audit(1750439744.899:883): avc: denied { prog_load } for pid=3681 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 33.129548][ T29] audit: type=1400 audit(1750439744.909:884): avc: denied { prog_load } for pid=3681 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 33.230051][ T3692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.334284][ T3697] netdevsim netdevsim3: Direct firmware load for „ failed with error -2 [ 33.344221][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 33.547078][ T3691] loop0: detected capacity change from 0 to 8192 [ 33.598889][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 33.607797][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.615246][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.634311][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.642081][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.667802][ T3712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.759209][ T3712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.840202][ T3712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.908487][ T3712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.997680][ T3712] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.018091][ T3712] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031714][ T3712] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.045636][ T3712] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.072108][ T3724] netlink: 5 bytes leftover after parsing attributes in process `syz.4.77'. [ 34.202906][ T3730] netlink: 5 bytes leftover after parsing attributes in process `syz.4.79'. [ 34.560562][ T3739] netdevsim netdevsim0: Direct firmware load for „ failed with error -2 [ 34.561244][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 34.947172][ T3743] netdevsim netdevsim0: Direct firmware load for „ failed with error -2 [ 34.947913][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 35.109493][ T3754] netlink: 5 bytes leftover after parsing attributes in process `syz.3.89'. [ 35.170655][ T3755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.309693][ T3750] loop1: detected capacity change from 0 to 8192 [ 35.910538][ T3760] loop4: detected capacity change from 0 to 2048 [ 35.945061][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 35.962083][ T3760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 36.006111][ T3775] netlink: 5 bytes leftover after parsing attributes in process `syz.0.96'. [ 36.188396][ T3789] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 36.198062][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 36.289704][ T3799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.326181][ T3802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.407177][ T3807] FAULT_INJECTION: forcing a failure. [ 36.407177][ T3807] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 36.420534][ T3807] CPU: 1 UID: 0 PID: 3807 Comm: syz.2.106 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 36.420561][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.420573][ T3807] Call Trace: [ 36.420580][ T3807] [ 36.420586][ T3807] __dump_stack+0x1d/0x30 [ 36.420606][ T3807] dump_stack_lvl+0xe8/0x140 [ 36.420672][ T3807] dump_stack+0x15/0x1b [ 36.420689][ T3807] should_fail_ex+0x265/0x280 [ 36.420798][ T3807] should_fail_alloc_page+0xf2/0x100 [ 36.420820][ T3807] __alloc_frozen_pages_noprof+0xff/0x360 [ 36.420851][ T3807] alloc_pages_mpol+0xb3/0x250 [ 36.420917][ T3807] folio_alloc_mpol_noprof+0x39/0x80 [ 36.420933][ T3807] shmem_get_folio_gfp+0x3cf/0xd60 [ 36.420950][ T3807] ? simple_xattr_get+0xb9/0x120 [ 36.421024][ T3807] shmem_write_begin+0xa8/0x190 [ 36.421041][ T3807] generic_perform_write+0x184/0x490 [ 36.421054][ T3807] shmem_file_write_iter+0xc5/0xf0 [ 36.421067][ T3807] do_iter_readv_writev+0x421/0x4c0 [ 36.421190][ T3807] vfs_writev+0x2df/0x8b0 [ 36.421226][ T3807] __se_sys_pwritev2+0xfc/0x1c0 [ 36.421238][ T3807] __x64_sys_pwritev2+0x67/0x80 [ 36.421249][ T3807] x64_sys_call+0x1cea/0x2fb0 [ 36.421261][ T3807] do_syscall_64+0xd2/0x200 [ 36.421353][ T3807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.421382][ T3807] ? clear_bhb_loop+0x40/0x90 [ 36.421394][ T3807] ? clear_bhb_loop+0x40/0x90 [ 36.421405][ T3807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.421480][ T3807] RIP: 0033:0x7f9d60a4e929 [ 36.421494][ T3807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.421511][ T3807] RSP: 002b:00007f9d5f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 36.421529][ T3807] RAX: ffffffffffffffda RBX: 00007f9d60c75fa0 RCX: 00007f9d60a4e929 [ 36.421539][ T3807] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 36.421546][ T3807] RBP: 00007f9d5f0b7090 R08: 0000000000000000 R09: 0000000000000003 [ 36.421552][ T3807] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 36.421625][ T3807] R13: 0000000000000000 R14: 00007f9d60c75fa0 R15: 00007ffe497a4b08 [ 36.421642][ T3807] [ 36.696550][ T3817] FAULT_INJECTION: forcing a failure. [ 36.696550][ T3817] name failslab, interval 1, probability 0, space 0, times 1 [ 36.709255][ T3817] CPU: 1 UID: 0 PID: 3817 Comm: syz.1.114 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 36.709330][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.709372][ T3817] Call Trace: [ 36.709378][ T3817] [ 36.709385][ T3817] __dump_stack+0x1d/0x30 [ 36.709407][ T3817] dump_stack_lvl+0xe8/0x140 [ 36.709427][ T3817] dump_stack+0x15/0x1b [ 36.709445][ T3817] should_fail_ex+0x265/0x280 [ 36.709508][ T3817] should_failslab+0x8c/0xb0 [ 36.709531][ T3817] kmem_cache_alloc_noprof+0x50/0x310 [ 36.709597][ T3817] ? audit_log_start+0x365/0x6c0 [ 36.709687][ T3817] audit_log_start+0x365/0x6c0 [ 36.709721][ T3817] audit_seccomp+0x48/0x100 [ 36.709748][ T3817] ? __seccomp_filter+0x68c/0x10d0 [ 36.709790][ T3817] __seccomp_filter+0x69d/0x10d0 [ 36.709815][ T3817] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.709836][ T3817] ? vfs_write+0x75e/0x8e0 [ 36.709878][ T3817] __secure_computing+0x82/0x150 [ 36.709974][ T3817] syscall_trace_enter+0xcf/0x1e0 [ 36.709999][ T3817] do_syscall_64+0xac/0x200 [ 36.710018][ T3817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.710046][ T3817] ? clear_bhb_loop+0x40/0x90 [ 36.710068][ T3817] ? clear_bhb_loop+0x40/0x90 [ 36.710155][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.710178][ T3817] RIP: 0033:0x7f485e6fe929 [ 36.710266][ T3817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.710401][ T3817] RSP: 002b:00007f485cd67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 36.710422][ T3817] RAX: ffffffffffffffda RBX: 00007f485e925fa0 RCX: 00007f485e6fe929 [ 36.710435][ T3817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.710589][ T3817] RBP: 00007f485cd67090 R08: 0000000000000000 R09: 0000000000000000 [ 36.710601][ T3817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.710612][ T3817] R13: 0000000000000000 R14: 00007f485e925fa0 R15: 00007ffc411ac308 [ 36.710684][ T3817] [ 36.948119][ T3827] FAULT_INJECTION: forcing a failure. [ 36.948119][ T3827] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.961310][ T3827] CPU: 1 UID: 0 PID: 3827 Comm: syz.1.118 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 36.961357][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.961364][ T3827] Call Trace: [ 36.961368][ T3827] [ 36.961375][ T3827] __dump_stack+0x1d/0x30 [ 36.961530][ T3827] dump_stack_lvl+0xe8/0x140 [ 36.961540][ T3827] dump_stack+0x15/0x1b [ 36.961551][ T3827] should_fail_ex+0x265/0x280 [ 36.961628][ T3827] should_fail+0xb/0x20 [ 36.961643][ T3827] should_fail_usercopy+0x1a/0x20 [ 36.961693][ T3827] _copy_from_user+0x1c/0xb0 [ 36.961705][ T3827] do_handle_open+0x296/0x650 [ 36.961756][ T3827] __x64_sys_open_by_handle_at+0x44/0x50 [ 36.961768][ T3827] x64_sys_call+0xaa0/0x2fb0 [ 36.961825][ T3827] do_syscall_64+0xd2/0x200 [ 36.961836][ T3827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.961851][ T3827] ? clear_bhb_loop+0x40/0x90 [ 36.961929][ T3827] ? clear_bhb_loop+0x40/0x90 [ 36.961941][ T3827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.961952][ T3827] RIP: 0033:0x7f485e6fe929 [ 36.961962][ T3827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.961971][ T3827] RSP: 002b:00007f485cd67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 36.961983][ T3827] RAX: ffffffffffffffda RBX: 00007f485e925fa0 RCX: 00007f485e6fe929 [ 36.961990][ T3827] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 36.962059][ T3827] RBP: 00007f485cd67090 R08: 0000000000000000 R09: 0000000000000000 [ 36.962066][ T3827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.962072][ T3827] R13: 0000000000000000 R14: 00007f485e925fa0 R15: 00007ffc411ac308 [ 36.962082][ T3827] [ 37.232559][ T3844] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 37.580741][ T3858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.912733][ T3865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.921267][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 37.921279][ T29] audit: type=1400 audit(1750439749.849:1492): avc: denied { read write } for pid=3863 comm="syz.3.132" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 38.092743][ T29] audit: type=1400 audit(1750439750.019:1493): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.126989][ T29] audit: type=1400 audit(1750439750.049:1494): avc: denied { map_create } for pid=3867 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.146184][ T29] audit: type=1400 audit(1750439750.049:1495): avc: denied { prog_load } for pid=3867 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.165436][ T29] audit: type=1400 audit(1750439750.049:1496): avc: denied { prog_load } for pid=3867 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.199543][ T3872] binfmt_misc: register: failed to install interpreter file ./file2 [ 38.216324][ T3872] FAULT_INJECTION: forcing a failure. [ 38.216324][ T3872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.219806][ T3876] binfmt_misc: register: failed to install interpreter file ./file2 [ 38.229522][ T3872] CPU: 1 UID: 0 PID: 3872 Comm: syz.1.136 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 38.229547][ T3872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.229635][ T3872] Call Trace: [ 38.229642][ T3872] [ 38.229650][ T3872] __dump_stack+0x1d/0x30 [ 38.229670][ T3872] dump_stack_lvl+0xe8/0x140 [ 38.229715][ T3872] dump_stack+0x15/0x1b [ 38.229787][ T3872] should_fail_ex+0x265/0x280 [ 38.229823][ T3872] should_fail+0xb/0x20 [ 38.229849][ T3872] should_fail_usercopy+0x1a/0x20 [ 38.229879][ T3872] _copy_to_user+0x20/0xa0 [ 38.229900][ T3872] simple_read_from_buffer+0xb5/0x130 [ 38.230156][ T3872] proc_fail_nth_read+0x100/0x140 [ 38.230172][ T3872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 38.230204][ T3872] vfs_read+0x1a0/0x6f0 [ 38.230231][ T3872] ? __rcu_read_unlock+0x4f/0x70 [ 38.230310][ T3872] ? __fget_files+0x184/0x1c0 [ 38.230330][ T3872] ksys_read+0xda/0x1a0 [ 38.230360][ T3872] __x64_sys_read+0x40/0x50 [ 38.230446][ T3872] x64_sys_call+0x2d77/0x2fb0 [ 38.230473][ T3872] do_syscall_64+0xd2/0x200 [ 38.230562][ T3872] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.230587][ T3872] ? clear_bhb_loop+0x40/0x90 [ 38.230607][ T3872] ? clear_bhb_loop+0x40/0x90 [ 38.230628][ T3872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.230653][ T3872] RIP: 0033:0x7f485e6fd33c [ 38.230668][ T3872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 38.230751][ T3872] RSP: 002b:00007f485cd67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.230770][ T3872] RAX: ffffffffffffffda RBX: 00007f485e925fa0 RCX: 00007f485e6fd33c [ 38.230782][ T3872] RDX: 000000000000000f RSI: 00007f485cd670a0 RDI: 0000000000000004 [ 38.230794][ T3872] RBP: 00007f485cd67090 R08: 0000000000000000 R09: 0000000000000000 [ 38.230806][ T3872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.230817][ T3872] R13: 0000000000000000 R14: 00007f485e925fa0 R15: 00007ffc411ac308 [ 38.230833][ T3872] [ 38.247285][ T29] audit: type=1400 audit(1750439750.059:1497): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 38.268160][ T3880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 38.271277][ T29] audit: type=1400 audit(1750439750.079:1498): avc: denied { prog_load } for pid=3869 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 38.271312][ T29] audit: type=1400 audit(1750439750.079:1499): avc: denied { create } for pid=3869 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 38.275940][ T3880] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 38.287712][ T3878] __nla_validate_parse: 3 callbacks suppressed [ 38.287739][ T3878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.138'. [ 38.572868][ T3900] FAULT_INJECTION: forcing a failure. [ 38.572868][ T3900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.586300][ T3900] CPU: 0 UID: 0 PID: 3900 Comm: syz.4.146 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 38.586325][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.586338][ T3900] Call Trace: [ 38.586344][ T3900] [ 38.586351][ T3900] __dump_stack+0x1d/0x30 [ 38.586375][ T3900] dump_stack_lvl+0xe8/0x140 [ 38.586449][ T3900] dump_stack+0x15/0x1b [ 38.586549][ T3900] should_fail_ex+0x265/0x280 [ 38.586580][ T3900] should_fail+0xb/0x20 [ 38.586602][ T3900] should_fail_usercopy+0x1a/0x20 [ 38.586640][ T3900] strncpy_from_user+0x25/0x230 [ 38.586664][ T3900] ? kmem_cache_alloc_noprof+0x186/0x310 [ 38.586692][ T3900] ? getname_flags+0x80/0x3b0 [ 38.586786][ T3900] getname_flags+0xae/0x3b0 [ 38.586808][ T3900] user_path_at+0x28/0x130 [ 38.586872][ T3900] __se_sys_mount+0x25b/0x2e0 [ 38.586887][ T3900] ? fput+0x8f/0xc0 [ 38.586907][ T3900] __x64_sys_mount+0x67/0x80 [ 38.586923][ T3900] x64_sys_call+0xd36/0x2fb0 [ 38.586944][ T3900] do_syscall_64+0xd2/0x200 [ 38.586992][ T3900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.587019][ T3900] ? clear_bhb_loop+0x40/0x90 [ 38.587037][ T3900] ? clear_bhb_loop+0x40/0x90 [ 38.587058][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.587080][ T3900] RIP: 0033:0x7ff5b60be929 [ 38.587170][ T3900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.587185][ T3900] RSP: 002b:00007ff5b4727038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.587205][ T3900] RAX: ffffffffffffffda RBX: 00007ff5b62e5fa0 RCX: 00007ff5b60be929 [ 38.587218][ T3900] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 38.587231][ T3900] RBP: 00007ff5b4727090 R08: 0000000000000000 R09: 0000000000000000 [ 38.587289][ T3900] R10: 0000000001004018 R11: 0000000000000246 R12: 0000000000000001 [ 38.587300][ T3900] R13: 0000000000000000 R14: 00007ff5b62e5fa0 R15: 00007ffd7adada58 [ 38.587315][ T3900] [ 38.890930][ T3926] FAULT_INJECTION: forcing a failure. [ 38.890930][ T3926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.904281][ T3926] CPU: 0 UID: 0 PID: 3926 Comm: syz.2.156 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 38.904310][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.904322][ T3926] Call Trace: [ 38.904329][ T3926] [ 38.904401][ T3926] __dump_stack+0x1d/0x30 [ 38.904421][ T3926] dump_stack_lvl+0xe8/0x140 [ 38.904436][ T3926] dump_stack+0x15/0x1b [ 38.904528][ T3926] should_fail_ex+0x265/0x280 [ 38.904559][ T3926] should_fail+0xb/0x20 [ 38.904586][ T3926] should_fail_usercopy+0x1a/0x20 [ 38.904618][ T3926] _copy_from_user+0x1c/0xb0 [ 38.904713][ T3926] do_handle_open+0x296/0x650 [ 38.904735][ T3926] __x64_sys_open_by_handle_at+0x44/0x50 [ 38.904835][ T3926] x64_sys_call+0xaa0/0x2fb0 [ 38.904856][ T3926] do_syscall_64+0xd2/0x200 [ 38.904926][ T3926] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.904955][ T3926] ? clear_bhb_loop+0x40/0x90 [ 38.904976][ T3926] ? clear_bhb_loop+0x40/0x90 [ 38.904998][ T3926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.905039][ T3926] RIP: 0033:0x7f9d60a4e929 [ 38.905054][ T3926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.905071][ T3926] RSP: 002b:00007f9d5f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 38.905155][ T3926] RAX: ffffffffffffffda RBX: 00007f9d60c75fa0 RCX: 00007f9d60a4e929 [ 38.905168][ T3926] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 38.905193][ T3926] RBP: 00007f9d5f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.905203][ T3926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.905213][ T3926] R13: 0000000000000000 R14: 00007f9d60c75fa0 R15: 00007ffe497a4b08 [ 38.905228][ T3926] [ 39.135854][ T3928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.336517][ T3943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.399165][ T3950] FAULT_INJECTION: forcing a failure. [ 39.399165][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 39.412006][ T3950] CPU: 1 UID: 0 PID: 3950 Comm: syz.1.160 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 39.412030][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.412041][ T3950] Call Trace: [ 39.412047][ T3950] [ 39.412054][ T3950] __dump_stack+0x1d/0x30 [ 39.412074][ T3950] dump_stack_lvl+0xe8/0x140 [ 39.412152][ T3950] dump_stack+0x15/0x1b [ 39.412169][ T3950] should_fail_ex+0x265/0x280 [ 39.412198][ T3950] should_failslab+0x8c/0xb0 [ 39.412271][ T3950] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 39.412298][ T3950] ? __d_alloc+0x3d/0x350 [ 39.412345][ T3950] __d_alloc+0x3d/0x350 [ 39.412369][ T3950] d_alloc+0x2e/0x100 [ 39.412393][ T3950] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 39.412416][ T3950] do_renameat2+0x3e0/0xab0 [ 39.412463][ T3950] ? proc_fail_nth_write+0x12d/0x160 [ 39.412487][ T3950] __x64_sys_renameat2+0x7e/0x90 [ 39.412527][ T3950] x64_sys_call+0x2bf6/0x2fb0 [ 39.412545][ T3950] do_syscall_64+0xd2/0x200 [ 39.412560][ T3950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.412582][ T3950] ? clear_bhb_loop+0x40/0x90 [ 39.412607][ T3950] ? clear_bhb_loop+0x40/0x90 [ 39.412669][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.412687][ T3950] RIP: 0033:0x7f485e6fe929 [ 39.412700][ T3950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.412782][ T3950] RSP: 002b:00007f485cd46038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 39.412854][ T3950] RAX: ffffffffffffffda RBX: 00007f485e926080 RCX: 00007f485e6fe929 [ 39.412864][ T3950] RDX: 0000000000000003 RSI: 0000200000000380 RDI: 0000000000000003 [ 39.412875][ T3950] RBP: 00007f485cd46090 R08: 0000000000000000 R09: 0000000000000000 [ 39.412885][ T3950] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 39.412895][ T3950] R13: 0000000000000001 R14: 00007f485e926080 R15: 00007ffc411ac308 [ 39.412913][ T3950] [ 39.736981][ T3964] FAULT_INJECTION: forcing a failure. [ 39.736981][ T3964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.750262][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: syz.3.171 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 39.750292][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.750313][ T3964] Call Trace: [ 39.750348][ T3964] [ 39.750355][ T3964] __dump_stack+0x1d/0x30 [ 39.750442][ T3964] dump_stack_lvl+0xe8/0x140 [ 39.750462][ T3964] dump_stack+0x15/0x1b [ 39.750479][ T3964] should_fail_ex+0x265/0x280 [ 39.750563][ T3964] should_fail+0xb/0x20 [ 39.750590][ T3964] should_fail_usercopy+0x1a/0x20 [ 39.750656][ T3964] strncpy_from_user+0x25/0x230 [ 39.750677][ T3964] ? kmem_cache_alloc_noprof+0x186/0x310 [ 39.750701][ T3964] ? getname_flags+0x80/0x3b0 [ 39.750757][ T3964] getname_flags+0xae/0x3b0 [ 39.750776][ T3964] __x64_sys_symlinkat+0x4d/0x70 [ 39.750807][ T3964] x64_sys_call+0x1558/0x2fb0 [ 39.750829][ T3964] do_syscall_64+0xd2/0x200 [ 39.750896][ T3964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.750921][ T3964] ? clear_bhb_loop+0x40/0x90 [ 39.750939][ T3964] ? clear_bhb_loop+0x40/0x90 [ 39.750956][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.751053][ T3964] RIP: 0033:0x7f39bfaae929 [ 39.751069][ T3964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.751085][ T3964] RSP: 002b:00007f39be117038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 39.751100][ T3964] RAX: ffffffffffffffda RBX: 00007f39bfcd5fa0 RCX: 00007f39bfaae929 [ 39.751111][ T3964] RDX: 0000200000000140 RSI: ffffffffffffffff RDI: 0000000000000000 [ 39.751181][ T3964] RBP: 00007f39be117090 R08: 0000000000000000 R09: 0000000000000000 [ 39.751194][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.751206][ T3964] R13: 0000000000000001 R14: 00007f39bfcd5fa0 R15: 00007ffcdb674588 [ 39.751222][ T3964] [ 39.989719][ T3968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.054429][ T3977] FAULT_INJECTION: forcing a failure. [ 40.054429][ T3977] name failslab, interval 1, probability 0, space 0, times 0 [ 40.067147][ T3977] CPU: 0 UID: 0 PID: 3977 Comm: syz.2.177 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 40.067173][ T3977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.067186][ T3977] Call Trace: [ 40.067192][ T3977] [ 40.067198][ T3977] __dump_stack+0x1d/0x30 [ 40.067273][ T3977] dump_stack_lvl+0xe8/0x140 [ 40.067293][ T3977] dump_stack+0x15/0x1b [ 40.067311][ T3977] should_fail_ex+0x265/0x280 [ 40.067341][ T3977] should_failslab+0x8c/0xb0 [ 40.067409][ T3977] kmem_cache_alloc_noprof+0x50/0x310 [ 40.067437][ T3977] ? security_inode_alloc+0x37/0x100 [ 40.067469][ T3977] security_inode_alloc+0x37/0x100 [ 40.067517][ T3977] inode_init_always_gfp+0x4b7/0x500 [ 40.067602][ T3977] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 40.067623][ T3977] alloc_inode+0x58/0x170 [ 40.067649][ T3977] new_inode+0x1d/0xe0 [ 40.067696][ T3977] shmem_get_inode+0x244/0x750 [ 40.067759][ T3977] __shmem_file_setup+0x113/0x210 [ 40.067789][ T3977] shmem_file_setup+0x3b/0x50 [ 40.067818][ T3977] __se_sys_memfd_create+0x2c3/0x590 [ 40.067926][ T3977] __x64_sys_memfd_create+0x31/0x40 [ 40.068014][ T3977] x64_sys_call+0x122f/0x2fb0 [ 40.068036][ T3977] do_syscall_64+0xd2/0x200 [ 40.068055][ T3977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.068083][ T3977] ? clear_bhb_loop+0x40/0x90 [ 40.068126][ T3977] ? clear_bhb_loop+0x40/0x90 [ 40.068148][ T3977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.068170][ T3977] RIP: 0033:0x7f9d60a4e929 [ 40.068186][ T3977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.068209][ T3977] RSP: 002b:00007f9d5f0b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.068228][ T3977] RAX: ffffffffffffffda RBX: 000000000000061c RCX: 00007f9d60a4e929 [ 40.068291][ T3977] RDX: 00007f9d5f0b6ef0 RSI: 0000000000000000 RDI: 00007f9d60ad14cc [ 40.068304][ T3977] RBP: 0000200000000d80 R08: 00007f9d5f0b6bb7 R09: 00007f9d5f0b6e40 [ 40.068317][ T3977] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 40.068329][ T3977] R13: 00007f9d5f0b6ef0 R14: 00007f9d5f0b6eb0 R15: 0000200000000000 [ 40.068345][ T3977] [ 40.329936][ T3983] FAULT_INJECTION: forcing a failure. [ 40.329936][ T3983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.343071][ T3983] CPU: 1 UID: 0 PID: 3983 Comm: syz.2.179 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 40.343117][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.343130][ T3983] Call Trace: [ 40.343137][ T3983] [ 40.343144][ T3983] __dump_stack+0x1d/0x30 [ 40.343166][ T3983] dump_stack_lvl+0xe8/0x140 [ 40.343263][ T3983] dump_stack+0x15/0x1b [ 40.343277][ T3983] should_fail_ex+0x265/0x280 [ 40.343307][ T3983] should_fail+0xb/0x20 [ 40.343362][ T3983] should_fail_usercopy+0x1a/0x20 [ 40.343393][ T3983] _copy_to_user+0x20/0xa0 [ 40.343410][ T3983] simple_read_from_buffer+0xb5/0x130 [ 40.343465][ T3983] proc_fail_nth_read+0x100/0x140 [ 40.343485][ T3983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.343557][ T3983] vfs_read+0x1a0/0x6f0 [ 40.343585][ T3983] ? __rcu_read_unlock+0x4f/0x70 [ 40.343612][ T3983] ? __fget_files+0x184/0x1c0 [ 40.343655][ T3983] ksys_read+0xda/0x1a0 [ 40.343686][ T3983] __x64_sys_read+0x40/0x50 [ 40.343770][ T3983] x64_sys_call+0x2d77/0x2fb0 [ 40.343789][ T3983] do_syscall_64+0xd2/0x200 [ 40.343804][ T3983] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.343849][ T3983] ? clear_bhb_loop+0x40/0x90 [ 40.343871][ T3983] ? clear_bhb_loop+0x40/0x90 [ 40.343909][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.343926][ T3983] RIP: 0033:0x7f9d60a4d33c [ 40.343940][ T3983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.343954][ T3983] RSP: 002b:00007f9d5f0b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.344049][ T3983] RAX: ffffffffffffffda RBX: 00007f9d60c75fa0 RCX: 00007f9d60a4d33c [ 40.344062][ T3983] RDX: 000000000000000f RSI: 00007f9d5f0b70a0 RDI: 0000000000000003 [ 40.344074][ T3983] RBP: 00007f9d5f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.344087][ T3983] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 40.344097][ T3983] R13: 0000000000000000 R14: 00007f9d60c75fa0 R15: 00007ffe497a4b08 [ 40.344111][ T3983] [ 40.671045][ T4003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.682751][ T3996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.736560][ T4010] binfmt_misc: register: failed to install interpreter file ./file2 [ 40.762679][ T4012] FAULT_INJECTION: forcing a failure. [ 40.762679][ T4012] name failslab, interval 1, probability 0, space 0, times 0 [ 40.775447][ T4012] CPU: 0 UID: 0 PID: 4012 Comm: syz.4.190 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 40.775498][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.775511][ T4012] Call Trace: [ 40.775518][ T4012] [ 40.775526][ T4012] __dump_stack+0x1d/0x30 [ 40.775547][ T4012] dump_stack_lvl+0xe8/0x140 [ 40.775611][ T4012] dump_stack+0x15/0x1b [ 40.775625][ T4012] should_fail_ex+0x265/0x280 [ 40.775702][ T4012] should_failslab+0x8c/0xb0 [ 40.775724][ T4012] __kmalloc_noprof+0xa5/0x3e0 [ 40.775749][ T4012] ? bm_register_write+0x9f/0xbf0 [ 40.775796][ T4012] bm_register_write+0x9f/0xbf0 [ 40.775816][ T4012] ? avc_policy_seqno+0x15/0x30 [ 40.775915][ T4012] ? selinux_file_permission+0x1e4/0x320 [ 40.775941][ T4012] ? __pfx_bm_register_write+0x10/0x10 [ 40.775982][ T4012] vfs_write+0x269/0x8e0 [ 40.776080][ T4012] ? __rcu_read_unlock+0x4f/0x70 [ 40.776099][ T4012] ? __fget_files+0x184/0x1c0 [ 40.776121][ T4012] ksys_write+0xda/0x1a0 [ 40.776174][ T4012] __x64_sys_write+0x40/0x50 [ 40.776192][ T4012] x64_sys_call+0x2cdd/0x2fb0 [ 40.776215][ T4012] do_syscall_64+0xd2/0x200 [ 40.776232][ T4012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.776334][ T4012] ? clear_bhb_loop+0x40/0x90 [ 40.776355][ T4012] ? clear_bhb_loop+0x40/0x90 [ 40.776374][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.776392][ T4012] RIP: 0033:0x7ff5b60be929 [ 40.776408][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.776440][ T4012] RSP: 002b:00007ff5b4727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.776537][ T4012] RAX: ffffffffffffffda RBX: 00007ff5b62e5fa0 RCX: 00007ff5b60be929 [ 40.776551][ T4012] RDX: 0000000000000032 RSI: 0000200000000440 RDI: 0000000000000003 [ 40.776563][ T4012] RBP: 00007ff5b4727090 R08: 0000000000000000 R09: 0000000000000000 [ 40.776573][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.776583][ T4012] R13: 0000000000000000 R14: 00007ff5b62e5fa0 R15: 00007ffd7adada58 [ 40.776597][ T4012] [ 41.023633][ T4016] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.052150][ T4022] FAULT_INJECTION: forcing a failure. [ 41.052150][ T4022] name failslab, interval 1, probability 0, space 0, times 0 [ 41.064901][ T4022] CPU: 1 UID: 0 PID: 4022 Comm: syz.4.195 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 41.065000][ T4022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.065012][ T4022] Call Trace: [ 41.065018][ T4022] [ 41.065024][ T4022] __dump_stack+0x1d/0x30 [ 41.065042][ T4022] dump_stack_lvl+0xe8/0x140 [ 41.065058][ T4022] dump_stack+0x15/0x1b [ 41.065075][ T4022] should_fail_ex+0x265/0x280 [ 41.065156][ T4022] should_failslab+0x8c/0xb0 [ 41.065177][ T4022] kmem_cache_alloc_noprof+0x50/0x310 [ 41.065270][ T4022] ? getname_flags+0x80/0x3b0 [ 41.065292][ T4022] ? get_pid_task+0x96/0xd0 [ 41.065318][ T4022] getname_flags+0x80/0x3b0 [ 41.065336][ T4022] do_mq_open+0xd9/0x4f0 [ 41.065357][ T4022] ? __rcu_read_unlock+0x4f/0x70 [ 41.065444][ T4022] ? __fget_files+0x184/0x1c0 [ 41.065528][ T4022] __x64_sys_mq_open+0xcb/0x100 [ 41.065601][ T4022] x64_sys_call+0x27d6/0x2fb0 [ 41.065623][ T4022] do_syscall_64+0xd2/0x200 [ 41.065641][ T4022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.065664][ T4022] ? clear_bhb_loop+0x40/0x90 [ 41.065710][ T4022] ? clear_bhb_loop+0x40/0x90 [ 41.065786][ T4022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.065803][ T4022] RIP: 0033:0x7ff5b60be929 [ 41.065816][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.065831][ T4022] RSP: 002b:00007ff5b4727038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 41.065850][ T4022] RAX: ffffffffffffffda RBX: 00007ff5b62e5fa0 RCX: 00007ff5b60be929 [ 41.065863][ T4022] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000b40 [ 41.065899][ T4022] RBP: 00007ff5b4727090 R08: 0000000000000000 R09: 0000000000000000 [ 41.065909][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.065958][ T4022] R13: 0000000000000000 R14: 00007ff5b62e5fa0 R15: 00007ffd7adada58 [ 41.065977][ T4022] [ 41.280775][ T4030] netdevsim netdevsim4: Direct firmware load for „ failed with error -2 [ 41.465523][ T4058] FAULT_INJECTION: forcing a failure. [ 41.465523][ T4058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.478728][ T4058] CPU: 1 UID: 0 PID: 4058 Comm: syz.2.209 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 41.478758][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.478771][ T4058] Call Trace: [ 41.478777][ T4058] [ 41.478783][ T4058] __dump_stack+0x1d/0x30 [ 41.478801][ T4058] dump_stack_lvl+0xe8/0x140 [ 41.478830][ T4058] dump_stack+0x15/0x1b [ 41.478848][ T4058] should_fail_ex+0x265/0x280 [ 41.478997][ T4058] should_fail+0xb/0x20 [ 41.479103][ T4058] should_fail_usercopy+0x1a/0x20 [ 41.479154][ T4058] strncpy_from_user+0x25/0x230 [ 41.479175][ T4058] ? __fget_files+0x184/0x1c0 [ 41.479192][ T4058] __se_sys_add_key+0x86/0x350 [ 41.479214][ T4058] __x64_sys_add_key+0x67/0x80 [ 41.479280][ T4058] x64_sys_call+0x1d0d/0x2fb0 [ 41.479300][ T4058] do_syscall_64+0xd2/0x200 [ 41.479317][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.479339][ T4058] ? clear_bhb_loop+0x40/0x90 [ 41.479461][ T4058] ? clear_bhb_loop+0x40/0x90 [ 41.479483][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.479505][ T4058] RIP: 0033:0x7f9d60a4e929 [ 41.479522][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.479537][ T4058] RSP: 002b:00007f9d5f0b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.479581][ T4058] RAX: ffffffffffffffda RBX: 00007f9d60c75fa0 RCX: 00007f9d60a4e929 [ 41.479591][ T4058] RDX: 0000200000000300 RSI: 0000000000000000 RDI: 0000200000000040 [ 41.479603][ T4058] RBP: 00007f9d5f0b7090 R08: 000000001ded1abf R09: 0000000000000000 [ 41.479616][ T4058] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 41.479629][ T4058] R13: 0000000000000000 R14: 00007f9d60c75fa0 R15: 00007ffe497a4b08 [ 41.479644][ T4058] [ 41.829033][ T4076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.961018][ T4094] FAULT_INJECTION: forcing a failure. [ 41.961018][ T4094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.974154][ T4094] CPU: 0 UID: 0 PID: 4094 Comm: syz.2.222 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 41.974208][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.974276][ T4094] Call Trace: [ 41.974283][ T4094] [ 41.974292][ T4094] __dump_stack+0x1d/0x30 [ 41.974314][ T4094] dump_stack_lvl+0xe8/0x140 [ 41.974331][ T4094] dump_stack+0x15/0x1b [ 41.974345][ T4094] should_fail_ex+0x265/0x280 [ 41.974375][ T4094] should_fail+0xb/0x20 [ 41.974401][ T4094] should_fail_usercopy+0x1a/0x20 [ 41.974430][ T4094] _copy_from_user+0x1c/0xb0 [ 41.974449][ T4094] kstrtouint_from_user+0x69/0xf0 [ 41.974480][ T4094] ? 0xffffffff81000000 [ 41.974493][ T4094] ? selinux_file_permission+0x1e4/0x320 [ 41.974535][ T4094] proc_fail_nth_write+0x50/0x160 [ 41.974553][ T4094] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.974569][ T4094] vfs_write+0x269/0x8e0 [ 41.974593][ T4094] ? vfs_read+0x47f/0x6f0 [ 41.974652][ T4094] ? __rcu_read_unlock+0x4f/0x70 [ 41.974674][ T4094] ? __fget_files+0x184/0x1c0 [ 41.974695][ T4094] ksys_write+0xda/0x1a0 [ 41.974710][ T4094] __x64_sys_write+0x40/0x50 [ 41.974725][ T4094] x64_sys_call+0x2cdd/0x2fb0 [ 41.974804][ T4094] do_syscall_64+0xd2/0x200 [ 41.974821][ T4094] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.974853][ T4094] ? clear_bhb_loop+0x40/0x90 [ 41.974871][ T4094] ? clear_bhb_loop+0x40/0x90 [ 41.974900][ T4094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.974923][ T4094] RIP: 0033:0x7f9d60a4d3df [ 41.974938][ T4094] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 41.974955][ T4094] RSP: 002b:00007f9d5f0b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 41.974975][ T4094] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d60a4d3df [ 41.975025][ T4094] RDX: 0000000000000001 RSI: 00007f9d5f0b70a0 RDI: 0000000000000004 [ 41.975035][ T4094] RBP: 00007f9d5f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.975045][ T4094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 41.975061][ T4094] R13: 0000000000000000 R14: 00007f9d60c75fa0 R15: 00007ffe497a4b08 [ 41.975078][ T4094] [ 42.259430][ T4107] Zero length message leads to an empty skb [ 42.292858][ T4109] ================================================================== [ 42.300972][ T4109] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 42.307643][ T4109] [ 42.309952][ T4109] write to 0xffff888103d07c08 of 8 bytes by task 4108 on cpu 1: [ 42.317569][ T4109] call_rcu+0x48/0x3e0 [ 42.321635][ T4109] mas_replace_node+0x2e7/0x410 [ 42.326489][ T4109] mas_wr_store_entry+0x2406/0x2b50 [ 42.331695][ T4109] mas_store_prealloc+0x74d/0x9e0 [ 42.336715][ T4109] vma_iter_store_new+0x1c5/0x200 [ 42.341735][ T4109] vma_complete+0x125/0x580 [ 42.346229][ T4109] __split_vma+0x591/0x650 [ 42.350642][ T4109] vma_modify+0x21e/0xc80 [ 42.354970][ T4109] vma_modify_flags+0x101/0x130 [ 42.359823][ T4109] mprotect_fixup+0x2cc/0x570 [ 42.364486][ T4109] do_mprotect_pkey+0x6d6/0x980 [ 42.369348][ T4109] __x64_sys_mprotect+0x48/0x60 [ 42.374192][ T4109] x64_sys_call+0x2794/0x2fb0 [ 42.378853][ T4109] do_syscall_64+0xd2/0x200 [ 42.383352][ T4109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.389236][ T4109] [ 42.391544][ T4109] read to 0xffff888103d07c08 of 8 bytes by task 4109 on cpu 0: [ 42.399065][ T4109] mas_state_walk+0x28f/0x650 [ 42.403733][ T4109] mas_walk+0x30/0x120 [ 42.407795][ T4109] lock_vma_under_rcu+0xa2/0x2f0 [ 42.412723][ T4109] do_user_addr_fault+0x233/0x1090 [ 42.417841][ T4109] exc_page_fault+0x62/0xa0 [ 42.422334][ T4109] asm_exc_page_fault+0x26/0x30 [ 42.427183][ T4109] [ 42.429486][ T4109] Reported by Kernel Concurrency Sanitizer on: [ 42.435619][ T4109] CPU: 0 UID: 0 PID: 4109 Comm: syz.2.228 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 42.447934][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.457989][ T4109] ==================================================================