last executing test programs: 6m7.923672027s ago: executing program 4 (id=3567): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@void, @val={0xc, 0x99, {0x100, 0x57}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x5, 0x6, 0x5, 0x80, 0x3]}, @NL80211_ATTR_FRAME={0x48, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0x1, 0xff0}}, 0x10, 0x9, @device_b, {0x0, 0x20, @random="eaa39a2498f9fc82421a618c03ca4f6408e01c66a7270df37785f6adc8d35676"}, @void, @void}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4840}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000dc0)={0x60c, "531e78d3a57b4464760057f1ac196a08f5958503dfb730373e2167131734dfea7eb80acfc3a5d1e461cdd4cc80df75c8ffcaf4c5b28db7e6dadbc034e37386f0a7b4be90ac7e937a6cac72875768bf61cbf337fcb888adff2b8415d43073c8faeefc0b1843f95852c8a3770a71cf3b4f79f0adae0e364011c1143b3cec6a46112204932061751e6bb6623bf1cfad379bef3b95a0ccff8914e75dd44915e545e427cd380b569c65a2726d7bcb8f00f76ce1dddb5f22f347469158684ab4d6aadf1eaf40e273c3f7d30bf83c17d3d9a4e4fae5ec0b6721351c9bcbdb0ffe586a63d4f9326907f94762e47c2102d04f5d0c93224b0f0f6fa8115926334ef1448eaebcb2413f591a0413c5fccefa3cecbc492003f7ba9742473c445f72aa741adcc59474f5b44c23f9c34f570c2dc10dee445396190220497609e1989e4de93b9b707606817f6b5196e2f21ae0e301fe472d22fdc9324d82d498c66f782527384f60246395d30b1e3201881873b4d11c13a1332d680bc9ddcb29a952c6a320a2cf06d9e6e44416b51c4fe16b88f7e4d43a793928b95f132bb5555c8ecfd4dd553075e0a543a0c8e5fda5da31a52a266d8fad2d01de5d0eac48ab9de79371bcbb26161596a3c65c106e8076b82b49bea70e6fbd208243dc1e2d4f96857d7c8aed526185b87b984feb8aaefe0f4402f266b904ddb6c4c661b66338923088ce1f8af38bbcb11e12f6bcaafb916cb5206c340e62a2165ff03c7567b80d0227f2b1ef4ac2d9c1522a7ded0defdb10c565545724da1d90bdd491ab0a93437385d74af4560387e2538b7499212416a20fd7d5295228dbcc2b5e55ad3d31ee834dce0a54529b4b9bd16fad92e74a981e60243f914145f6aa66748a3c557123f02c8ae9b106915a3efc2cb19ac22df77d1e4782956acfd1ceab97d2cd9bf72aa1a06c6b6ac4e12ef8b865dea6a62101ce15263c9cb6fb6918a1fc2975e52929f006d69dee677ea93919215666ff114e15f10541f80ba006c245b1fc9c213095b1f417b304b930745040e4b9fb8ae3b1d2774c29c289429c1a594797d9ff720bd3595ae8384be1d115c21b62c658d5a60dfc18cf17f7d469971041053d023b53fab66af616132d12e3f9d3b3334872b14a1afacc55d345a7c6ccba4cb30aa9bbb620c4bdbebaf8d34ffac4cdd80eee1065755527a701e926d2f263fa1daa7a4b4af1001c64d80fda1c0c847859c0022dbc7d89bbc79d739e435568b1f5cf2caa0bc8d43e1c56d6b9eb5eb3988400a5c8301eee98d7f5592773401d7527a3a4c596cb07821e06e1d5524d16e869b08d110a85a16bb297e7dff72a05e8b23e6c9079f43d5f8bfddb5efeebad1b5b776e429ca5d8f2b1909bab1244e2ff228fa96315b811a710fee586eb065c6618eb039b1da9d8ebed7ef2582db0530f6e50e67280a654a259386ae7e0bb222c957edaa3b1fd7fc778e578e2b072d0c8ab72f6bc3a7fb8d3f52d0c6b0c5e6c5174be79f37f4375110486d04d9427d6f1e083dff82fc6a4e81fb659fe225e1ca5d66108b800b9132b77c397af98165c7a3011a01f983494e01a33be9a44e5e81fa5183ce7006a5d342bc67b25390c48fadf12cd0455af2e7905897735f16ed356bfe4aa3d70701d2c62f6746776bff05ea21744184d0869e2eedb7c3c7afeb5b7964bba46d46da131d546e1ae00b0a2c4259a9e105fd98ff5bd4de382b167d797d0fdd78bf09d34cea1d0f386c57376ea71cc9a5e6e278e89f942eadaa83ef57dc24f8726815d3ba712dfcfb33182d82a020f15a53c8a1443b0cfacea10928efab59052b587a7e2f05955a18389dde49812bfa7caaa879b6d2ff68fb2fcd2c936c7bcc10cae3fc0b0df9634ceb1bd5a0873a4542be897f67acb35fa218d79e0d17bc435b16f7bef67726152745769f6f5a5486ddb115ba24b765995ad71b37923d306b7ae1cb003abd7ef9c56ab85ea2622e06c369d6b60744858d95e1f0cbf7b4351c4181f4f7c844c4b303d01abba866068a0615d342edce65bc9c4613b8dc86c9127a98ea32f11e4d7024f2edef9d36211960437d58a0509e420fdba8529fc8527c75a8ee994579330ec26d81a18cd67fca8e254c5dc5025788adee5780cfbea1695cb7c5cbf667e536a5e1bc6b31d2166151df289df59adf3b52200486a41da9021202addf5"}) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) close_range(r2, 0xffffffffffffffff, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000700)={[&(0x7f0000000380)='\\,@{}$^-\xd7\'\xc4.!&\\\x00', &(0x7f0000000480)='-(+^(.\x00', &(0x7f00000004c0)='))\'}@{\x00', &(0x7f0000000900)='\x00\xcb\x00\x00\xdd\x94\xacp\xd7\xb2\x119\x18Sq\xf2?F\x99\xdf\x01\x9e\xd5\xd6\xae\x12./\xe3\xd3\xe5?\xadB\xfb\x8f\xe5]\xd1}Jh\xdc\xac\xe9\x8a\x94\xba\xb4\xa0\x8e\xa2\xb6\xd2\xa2\r\x90\xdcx\xa1\x80\xf9\xba\xd3\xb3\x15\xbe\x1a`\v\xed\xaeK?\x10\xae\x11i\xde\x93\xa8?\xe1\xbbyj\r\xaa\xdeql\xfe\fs\x8f\xe8\xa4J\xe0\xec]\x940xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x2, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000002c0)}, 0x20) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x24000800) 6m7.52638083s ago: executing program 1 (id=3573): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xfe8e, &(0x7f00000009c0)=[{&(0x7f0000000780)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d07452a92307ff0ff0e97031e9f05e9f16e9cb5000000000000000800"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000007000000006574683a73797a6b616c6c6572100000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) personality(0x410000e) pipe2(&(0x7f0000000240), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6m7.35329371s ago: executing program 1 (id=3575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x48804) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff0006}, {0x0, 0x6, 0xdd, 0x1}, {0x1000, 0xfb, 0x6, 0x3ff}, {0x6, 0x37, 0x8, 0xa12}, {0x4, 0x2, 0x0, 0xfe}]}) mknod$loop(0x0, 0x100000000000600d, 0x1) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) 6m7.269451711s ago: executing program 1 (id=3576): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) 6m7.210978671s ago: executing program 1 (id=3580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) close_range(r0, r0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @local, 0x6}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback={0xfec0ffffffffffff}, 0x4}, 0x1c, 0x0}, 0x8004) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f00000003c0)="c186964e21c347870670d229c4395565a0e986db32f0c20ef2f7374dfe358a90c32dd54fa457b3f9c67f77ac602255fd6acfe61a03abd7ffbde71ab1d16352e0b148c75073938aed75dbb751ff0f858772e6885a8fc14d07eafb59d8d8b666feea824b94e9c6225bba9a7559351f9404d826d90bb3beb84a239c8ffe756934012a599bc28f6e84188027b57c10c48b029158d22c9752cc6e83a33ddc1c79db0e8ec6070faa77a3"}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000800)={0x7, &(0x7f00000007c0)=[{0x6f2, 0x4e, 0x3, 0xc}, {0xff, 0x0, 0x5, 0x2}, {0x0, 0x8e, 0x8, 0x8001}, {0xf, 0x4, 0x1, 0x4}, {0xff87, 0x6, 0x4, 0x9}, {0x60d5, 0x7e, 0xff, 0x2}, {0x3ff, 0x8, 0x40, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e9ff01000000f40000000000000000000000000000000000ee00"], 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000001c3a000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x80, 0x7, 0xcc539c52]}, &(0x7f0000000140)=0x44) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) 6m7.068144032s ago: executing program 4 (id=3582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m7.027132712s ago: executing program 4 (id=3584): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 6m6.963118983s ago: executing program 4 (id=3587): r0 = socket(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) (fail_nth: 1) sendmsg$rds(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x8004}, 0x0) shmget$private(0x0, 0xd000, 0x10, &(0x7f0000ff0000/0xd000)=nil) stat(0x0, 0x0) stat(&(0x7f0000000780)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m6.690347204s ago: executing program 4 (id=3590): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x6]}, 0x8, 0x80000) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x7974, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x3, 0x328}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x1811d, 0x5c6, 0x200, 0x3, 0x2, 0x8010000, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0xfff9, 0xa}, {0x1, 0x400}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 6m6.474385705s ago: executing program 4 (id=3594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m6.474184855s ago: executing program 32 (id=3594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m6.180929976s ago: executing program 1 (id=3597): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 6m6.159754147s ago: executing program 33 (id=3597): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 2.350362497s ago: executing program 0 (id=10204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2.320468988s ago: executing program 0 (id=10205): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) 2.122007369s ago: executing program 3 (id=10209): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x100000}}, 0x40) 1.98361188s ago: executing program 3 (id=10210): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000314010000000000000099aa0900020073797a31000000000800410072786500140033007465616d5f736c6176655f3000000000ee778762cbdfc1ccfccce522b07aef09e7d02475b261f73306b2b749d113f70a8816993e80"], 0x38}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) remap_file_pages(&(0x7f0000916000/0x1000)=nil, 0x1000, 0x300000c, 0xffffffff7ffffff7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) write$bt_hci(r7, &(0x7f00000005c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000001140)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000009000000030000000300000070210200", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000004000000050000960700"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00f4a3e9545618e49499000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e004a0010", 0x2e}], 0x1}, 0x0) 1.89966858s ago: executing program 0 (id=10211): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 1.82397441s ago: executing program 3 (id=10214): memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x20, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r2, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0xc) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) 1.382571923s ago: executing program 6 (id=10222): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) 1.173969474s ago: executing program 6 (id=10224): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000314010000000000000099aa0900020073797a31000000000800410072786500140033007465616d5f736c6176655f3000000000ee778762cbdfc1ccfccce522b07aef09e7d02475b261f73306b2b749d113f70a8816993e80"], 0x38}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) remap_file_pages(&(0x7f0000916000/0x1000)=nil, 0x1000, 0x300000c, 0xffffffff7ffffff7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) write$bt_hci(r7, &(0x7f00000005c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000001140)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000009000000030000000300000070210200", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000004000000050000960700"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r8], 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00f4a3e9545618e49499000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e004a0010", 0x2e}], 0x1}, 0x0) 1.129156094s ago: executing program 6 (id=10225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1.109824274s ago: executing program 6 (id=10226): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x6c}, 0x1, 0xba01}, 0x20008084) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x6, [@fwd={0x7}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x8}}, @union={0x0, 0x6, 0x0, 0x5, 0x1, 0x496c, [{0x8, 0x5, 0xffffffff}, {0x10, 0x1, 0x6}, {0xa, 0x3, 0x3}, {0xa, 0x5, 0xb6c}, {0xa, 0x5, 0x9}, {0x8, 0x0, 0x7}]}, @fwd={0x8}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x10, 0x0, 0x3}, {0x5, 0x3, 0xe}, {0xa, 0x4, 0x8}, {0x9, 0x1, 0x2}, {0xb, 0x6, 0x9}, {0x5, 0x5, 0x8001}, {0x2, 0xff, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x4d}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000440)=""/168, 0x136, 0xa8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x1, 0x2180, 0xffffffffffffffff, 0x0, '\x00', r4, r5, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$netlink(0x10, 0x3, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x13, 0x9, 0xfffffe00, 0x0, 0xc8, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.032366764s ago: executing program 0 (id=10228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 998.983925ms ago: executing program 2 (id=10230): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) socket$kcm(0x2a, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x24, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x40, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r4, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252de", 0xe5}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xc) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 958.751745ms ago: executing program 3 (id=10231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 948.460155ms ago: executing program 0 (id=10232): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/31, 0x1f}}, 0x120) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = epoll_create(0x6) epoll_pwait2(r8, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380), &(0x7f00000003c0)={[0x7ff]}, 0x8) 915.587965ms ago: executing program 2 (id=10233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x68c}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x90) timer_create(0x3, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)=[0x4], 0x0, 0x4, 0x100000}}, 0x40) 810.293716ms ago: executing program 5 (id=10234): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa08000600"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) 766.876316ms ago: executing program 2 (id=10235): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a00040000000000000000000000000400048020000000000a01040000000000000000030000000900010073797a300000000030000000160a0101000000000000000003000000040003800900020073797a31000000000900010073797a30"], 0x90}}, 0x40840) 715.968926ms ago: executing program 2 (id=10236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 715.555956ms ago: executing program 2 (id=10237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000007a03000018010000846c6c2500000000002020207b1a00fe00000000bfa100000000000007010000009dffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000002e00)=""/4071, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf405, @void, @value}, 0x94) 661.277336ms ago: executing program 2 (id=10238): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 660.542906ms ago: executing program 3 (id=10239): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x2, 0x1}, 0xff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100100, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) 601.221887ms ago: executing program 6 (id=10240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 1) 357.458038ms ago: executing program 5 (id=10241): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xe7, 0x47b2, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x40, 0x8, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r7 = io_uring_setup(0x16d4, &(0x7f00000002c0)={0x0, 0x2, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x100000000000000}, 0x18) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27, 0x2, 0x1}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 330.157008ms ago: executing program 6 (id=10242): memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00'/649, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x8, 0x0, 0x9, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x20, 0xb6, 0x0, 0x8, [0x7, 0x3659022, 0x80000001, 0x4, 0x5, 0x6, 0x7]}, @noop]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="489f281bc8351f2499ad2366193b6c87602f927a547f5f90869a9446eca58e14", 0x20}, {&(0x7f0000000140)="3697caa8e67152deeb0f72c9fe296ae0400c957c786594787ca712050f8f26f570e5a672131adee4ae75563cebc46be025fe5b65", 0x34}, {&(0x7f00000002c0)="1d92b5740a5c380f927ee07c90adc862d6787091bd2402a93b72873b2ca13b56662bec1e14b7f630ef323c0ed73751fbee8e314e734ae4a873ef247eee672d89578ce822f51934c576a4901986150f42d89c35942fccb5f4ab91595d6d29eb2844b428d20c187cb02e6f448c395b0c8ac034bbe11d9f48887c223d77de5f3e2f866a5bef6ecc5c3229184e13842846f5c4b05ecf1b54b8e0a7ffa480474d5985779101bea3b50e585294f520f2b06c31dc4e1ec0efe8682b55070a28cf4ba23120d4ae22c2ba68b87839923a671f00f602a1c6", 0xd3}, {&(0x7f00000003c0)="d03a5fe71e10103a4124b1ab77fbae0ba7e96a07b7a29717409fa0fe6229697c7fae951426dc8557eb2dedbe11fe47822d859301cc5fac03e75dbc6cb85f2335a0413db83fd6e5307471d90ff2a95f639bf199111125c3d39e04df3dd52f31821e16d1ccde5a466e88901fd617a23f84e8456c65f3557471414ff6b875ddc1bcd4e4fd67a84fe345e6ecafd72529bcc579d74f2df1c789d4217477aa4a45e10cc7d5692abce22670d5e24dbedfb6f0735074ff4c756254a3c45df61fcdca9df46d68185d", 0xc4}], 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1c000000543a757d2ef59a1900080000000000000000", @ANYRES32=r2, @ANYBLOB="e00000020000000000000000d8000000000000000000000007000000440c3843ac1e0101000000060044249c5000000800000000000000000800000008000000070000000f00000000000023ad01831f7d640101027f000001ac1414aaac1414bbac1e01017f000001ac1414228644ffffffff0207e91fbb82760707a90df08b820203850008bcb1ae2a1ece060627b2024f0712695897ba66c2b46e9fd0261734b2e5ab0705f5fb6c0208a022a2b1dd72861a000000030604ed60021029a01d6aff6b0a44e292bc96e5938618000000020509e9473ea5dec80906093d28ad93f8a75900"], 0xf8}}, {{&(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000640)="5dee9c01cb9a0a51b5da3a091ea1b4c969711e81cc57c8c847e8b107c65bfc2cf106c80ac57493fbe01bee0e83e5007f02a3088b9a88214cd6e91a892957793fd50bd123d45fbc0380b8b5b74bb4f85a436e1998f6e1ab33949650cfe56b35730e8e5a33fd6b35fe0dca7e771b", 0x6d}, {&(0x7f00000006c0)="91576d908bdb3b05fdbaec232e9f1f0651ef7bc4a48ba538aa234f3f10", 0x1d}, {&(0x7f0000000700)="60e18a162106b91b23c74ed8413ae4cbba25a17b2fa08c038770cfa6c3dd21eab81b03aba13088d0be08b85bac7e9f65b98ff6d0d02b2cb4b1c1d762c32f0448bcc6a7342899d1ad4e17b3dde39b60c1c08f181b4b85cd8941ceb07885904817ef375469e9489dfa6a74663a9b73f39317ac68224026cf181c877c886b4a64bb9ffb6940abdde17ef9e7afb2dea1897120ecc47c694e1370511564e3ad6de99a55591d4992144fd2bc892f74c5f5366ee04f104720c7dcaf50c6b284f4e9b1807e1a6ab3cf02dff6fc", 0xc9}, {&(0x7f0000000800)="962feef507ea2b7eb85fc5f8f2034b9aa64e899e383916fa", 0x18}, {&(0x7f0000000840)="32d64a81861d54dd8094fd1bde0f982d3dda197e5048fa03e9877f0b65a3e64e8a0a64075be8867649f64a00469897d5d693a27fc8462b7552b17677c36b4ba18fac95615b29bafea375fae70031b6b9f248e2eae2175d2cca838813b3ab6be2e29bd874d9b170e89fb485050d9e80318b1311cc217db3c177f67375c3bc22ae7a3caa27a573f2915652d2a51928896a3fac47e6150f208d843768d24b6469e208067db1761a8e33b0acc89c87aaaa49ebc2dc7a6b48c434ab6f9b20c3514d80dbbfc34ee7cdf5ac8f79", 0xca}], 0x5}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="893c98b43bb26bd9497cbcc0560e6e1a1c364eda5394d037543dba4af85766266cf7d680280ce1a30a12f5a27b7aa50044db6f29c2aa4ec559046c1ed3df239c88b56630e50427f5a2a7a8c23ad9f558a2e0c55fe9cf42bf1c5210e1e1bab710e3f72744ca696de47265337c9f84", 0x6e}, {&(0x7f0000000a80)="742fa14aaf592b0c7ca48ed790fbe28a73db6cbcb6ac3506198137637ebaff4cb73f50a38d06ea188453733a49813e9c2614579c545262e90d5c627e7c9d98eea464482535ea0c50eb8294dc4971567e4649b159284864a39293ae8646132d39a277911d94c9dee075a51ed6ef7653fdc5217c57980375b95d07a885f43b87b66c481ed7c1a96f3bd378150c9bc6ce884b7bca3d371bf86762cb15ec058b3091c96267cd5839e761b4", 0xa9}, {&(0x7f0000000b40)="f60ad85bc7142f584d7c80e933de43bb18432ba2d646e9f179224587b880df3dd1d3c34ad7f0befc7f337d3a1efaa38cb32f34e3a97c42e036cad97a97915942b8f35f0c72e2a555e51a61d8b281fed6e8a5e28f9b56ed3cbd6db87e18b3bc1bd7bef806403bf9d421f9dbb22ad0810e6c8d16c0990c09a997d02a", 0x7b}, {&(0x7f0000000bc0)="8520ebfdc565f09e8edbaef20e46010bcabd31", 0x13}, {&(0x7f0000000c00)="34bee92e2ff7d22a2f39d1b42ff2145b5af005d8d2cb4b687aa5813851445956affd03a3a20b3246bbf0bf790ace26e1e40e5974b96d3eb892e68ebe8a757b609b4653076ba9d0963711c8207b68b04b738ef799136cd115aec5096c5f6e6be7b1d5e50ae97f020d76835899236e5d7bf6334570d4d6eb5d7c42fad027bfa76005715e1b1a", 0x85}, {&(0x7f0000000cc0)="32f712ef2bb364eff423c6c4b03c702d55ad2c6eb6ef35f6781abe658eacfad55c77e7815422b8717c5eb8f44b0f13563658e868b1d310965a4c3639261d6f9e92fd7a553d0f11da651c7ef91e6178ca73ba2f37c1d702d4756afea322e652df1e48a461320816cc27caf20dd08c73d22e104d5e15449fa62b4f875d1d6e0e6056e2ec8474417778ad7888539b1469375eacd855963c9c898afc3ab432fdd7c80c087d113333cecd311cb9ba4fd7114cc8f2533d330a1bde2035b2e67aa385c20b0520d73fc911a275f3e2a85acd92def2998f44be135755b0bcb32d8320bdbc9743a252deb5ecb230632e0e", 0xec}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x3, 0xc000005) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001040)={0x208, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9, 0x0, 0x0, 0xfffd}}}}}}}, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0xc) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) 329.194388ms ago: executing program 3 (id=10243): mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x4800) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x32, 0x62, 0x35, 0xf7, 0x64, 0x65, 0x64, 0x34, 0x35, 0x61, 0x5c, 0xa, 0x63, 0x39, 0x39, 0x39]}, &(0x7f00000005c0)={0x0, "e6d46e31eca047b3bc659c427745e67221008aa0c963fc746e75c400a1ac0a6cb1a3498650e3b4bc4508e9362aba5b2b8b50cffaf5d40a712753d2ee5ae43746", 0x30}, 0x48, 0xfffffffffffffffd) socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000006d8af8ff000000005d1164dc68bfa200000000000807020000f8050000b803000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getgroups(0x7, &(0x7f0000000640)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) keyctl$chown(0x4, r3, 0x0, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) 298.469648ms ago: executing program 0 (id=10244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008050}, 0x4800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x32, 0x62, 0x35, 0xf7, 0x64, 0x65, 0x64, 0x34, 0x35, 0x61, 0x5c, 0xa, 0x63, 0x39, 0x39, 0x39]}, &(0x7f00000005c0)={0x0, "e6d46e31eca047b3bc659c427745e67221008aa0c963fc746e75c400a1ac0a6cb1a3498650e3b4bc4508e9362aba5b2b8b50cffaf5d40a712753d2ee5ae43746", 0x30}, 0x48, 0xfffffffffffffffd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getgroups(0x7, &(0x7f0000000640)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) 249.790929ms ago: executing program 5 (id=10245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 249.318899ms ago: executing program 5 (id=10246): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007100)={0x0, 0x0, &(0x7f00000070c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18000000120a00040000000000000000000000000400048020000000000a01040000000000000000030000000900010073797a300000000030000000160a0101000000000000000003000000040003800900020073797a31000000000900010073797a30"], 0x90}}, 0x40840) 193.979589ms ago: executing program 5 (id=10247): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x6c}, 0x1, 0xba01}, 0x20008084) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x6, [@fwd={0x7}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x8}}, @union={0x0, 0x6, 0x0, 0x5, 0x1, 0x496c, [{0x8, 0x5, 0xffffffff}, {0x10, 0x1, 0x6}, {0xa, 0x3, 0x3}, {0xa, 0x5, 0xb6c}, {0xa, 0x5, 0x9}, {0x8, 0x0, 0x7}]}, @fwd={0x8}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @enum64={0x9, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x10, 0x0, 0x3}, {0x5, 0x3, 0xe}, {0xa, 0x4, 0x8}, {0x9, 0x1, 0x2}, {0xb, 0x6, 0x9}, {0x5, 0x5, 0x8001}, {0x2, 0xff, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x4d}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000440)=""/168, 0x136, 0xa8, 0x0, 0x6, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x1, 0x2180, 0xffffffffffffffff, 0x0, '\x00', r4, r5, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$netlink(0x10, 0x3, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x13, 0x9, 0xfffffe00, 0x0, 0xc8, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 5 (id=10248): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@discard}, {@bsdgroups}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5eb, &(0x7f0000000600)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) kernel console output (not intermixed with test programs): T29] kauditd_printk_skb: 732 callbacks suppressed [ 612.146745][ T29] audit: type=1326 audit(1732745324.732:60144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.194632][ T29] audit: type=1326 audit(1732745324.732:60145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.242222][ T29] audit: type=1326 audit(1732745324.822:60146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.270186][ T29] audit: type=1326 audit(1732745324.822:60147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.293898][ T29] audit: type=1326 audit(1732745324.822:60148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.322327][ T29] audit: type=1326 audit(1732745324.852:60149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28527 comm="syz.6.9530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 612.348695][ T29] audit: type=1400 audit(1732745324.902:60150): avc: denied { ioctl } for pid=28530 comm="syz.5.9531" path="socket:[101856]" dev="sockfs" ino=101856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 612.374288][ T29] audit: type=1400 audit(1732745324.902:60151): avc: denied { create } for pid=28530 comm="syz.5.9531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 612.394090][ T29] audit: type=1400 audit(1732745324.902:60152): avc: denied { setopt } for pid=28530 comm="syz.5.9531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 612.414133][ T29] audit: type=1400 audit(1732745324.932:60153): avc: denied { write } for pid=28530 comm="syz.5.9531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 612.490700][ T1044] hid-generic 0000:0000:0000.011D: unknown main item tag 0x0 [ 612.504014][ T1044] hid-generic 0000:0000:0000.011D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 612.632471][T28543] pim6reg1: entered promiscuous mode [ 612.672751][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9539'. [ 613.877331][T28608] bridge0: port 3(vlan1) entered blocking state [ 613.883736][T28608] bridge0: port 3(vlan1) entered disabled state [ 613.912090][T28608] vlan1: entered allmulticast mode [ 613.977919][T28608] vlan1: left allmulticast mode [ 615.371085][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9603'. [ 615.380065][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9603'. [ 615.395696][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.403325][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.410917][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.418386][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.425808][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.433292][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.441085][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.448609][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.456118][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.463525][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.470961][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.478556][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.486064][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.493466][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.501094][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.508599][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.516246][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.523732][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.531189][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.538719][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.546167][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.553572][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.561015][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.568608][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.576223][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.583642][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.591190][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.598638][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.606143][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.613628][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.621106][ T1044] hid-generic 0000:0000:0000.011E: unknown main item tag 0x0 [ 615.657694][ T1044] hid-generic 0000:0000:0000.011E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 615.852792][T28737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9614'. [ 616.481975][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9642'. [ 616.652363][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.660037][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.667676][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.675401][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.683147][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.690899][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.698593][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.706135][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.713705][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.721263][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.722135][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9644'. [ 616.728834][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.737595][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9644'. [ 616.754252][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.761882][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.769424][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.776921][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.784304][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.791811][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.799392][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.806921][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.814442][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.822078][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.829566][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.837083][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.844579][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.852069][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.859720][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.867333][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.874849][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.882259][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.889710][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.897139][ T9] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 616.905337][ T9] hid-generic 0000:0000:0000.011F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 617.180469][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 617.180488][ T29] audit: type=1326 audit(1732745329.762:60849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 617.210585][ T29] audit: type=1326 audit(1732745329.762:60850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 617.224236][T28842] bridge0: port 3(vlan1) entered blocking state [ 617.240710][T28842] bridge0: port 3(vlan1) entered disabled state [ 617.245529][ T29] audit: type=1326 audit(1732745329.762:60851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 617.271121][ T29] audit: type=1326 audit(1732745329.762:60852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd41b570843 code=0x7ffc0000 [ 617.294738][ T29] audit: type=1326 audit(1732745329.772:60853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd41b56f2bf code=0x7ffc0000 [ 617.298697][T28842] vlan1: entered allmulticast mode [ 617.318332][ T29] audit: type=1326 audit(1732745329.772:60854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd41b570897 code=0x7ffc0000 [ 617.318425][ T29] audit: type=1326 audit(1732745329.792:60855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd41b56f170 code=0x7ffc0000 [ 617.370892][ T29] audit: type=1326 audit(1732745329.792:60856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd41b56f46a code=0x7ffc0000 [ 617.394442][ T29] audit: type=1326 audit(1732745329.792:60857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 617.418240][ T29] audit: type=1326 audit(1732745329.792:60858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28840 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41b570809 code=0x7ffc0000 [ 617.463159][T28842] vlan1: left allmulticast mode [ 617.482233][T28846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 617.790185][T28890] bridge0: port 3(vlan1) entered blocking state [ 617.796734][T28890] bridge0: port 3(vlan1) entered disabled state [ 617.805485][T28890] vlan1: entered allmulticast mode [ 617.815021][T28890] vlan1: left allmulticast mode [ 617.874531][T28890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 619.005638][T28955] netlink: 'syz.2.9700': attribute type 10 has an invalid length. [ 619.016701][T28955] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 619.167778][T28962] bridge0: port 3(vlan1) entered blocking state [ 619.174187][T28962] bridge0: port 3(vlan1) entered disabled state [ 619.187983][T28962] vlan1: entered allmulticast mode [ 619.194033][T28962] vlan1: left allmulticast mode [ 619.222565][T28970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 619.640949][T28984] netlink: 'syz.5.9712': attribute type 10 has an invalid length. [ 619.676640][T28984] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 619.887694][T29010] bridge0: port 3(vlan1) entered blocking state [ 619.894061][T29010] bridge0: port 3(vlan1) entered disabled state [ 619.896801][T29015] netlink: 'syz.6.9725': attribute type 10 has an invalid length. [ 619.902863][T29010] vlan1: entered allmulticast mode [ 619.914071][T29010] vlan1: left allmulticast mode [ 619.923176][T29015] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 619.933320][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.940904][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.948474][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.952713][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9726'. [ 619.955942][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.964817][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9726'. [ 619.972326][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.988888][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 619.996333][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.003845][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.011372][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.018922][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.026470][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.033910][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.041427][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.047822][T29019] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 620.048851][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.048877][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.071015][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.078498][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.086005][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.093502][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.101016][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.108679][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.116144][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.123666][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.131247][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.138723][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.146244][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.153928][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.161374][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.168828][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.176330][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.183726][ T9] hid-generic 0000:0000:0000.0120: unknown main item tag 0x0 [ 620.216844][ T9] hid-generic 0000:0000:0000.0120: hidraw0: HID v0.00 Device [syz0] on syz0 [ 620.236029][T29026] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 620.236029][T29026] program syz.3.9728 not setting count and/or reply_len properly [ 620.545755][T29047] netlink: 'syz.5.9737': attribute type 10 has an invalid length. [ 620.583684][T29047] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 620.662579][T29058] bridge0: port 3(vlan1) entered blocking state [ 620.668949][T29058] bridge0: port 3(vlan1) entered disabled state [ 620.675651][T29058] vlan1: entered allmulticast mode [ 620.681624][T29058] vlan1: left allmulticast mode [ 620.719348][T29069] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 620.952953][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.960479][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.967982][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.975487][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.982954][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.990540][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 620.997969][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.005437][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.012982][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.020556][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.028081][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.035485][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.042985][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.050451][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.057959][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.065548][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.072991][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.080536][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.087959][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.095456][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.103294][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.110861][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.118304][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.125756][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.133195][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.140615][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.148204][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.155678][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.163141][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.170685][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.178133][ T9] hid-generic 0000:0000:0000.0121: unknown main item tag 0x0 [ 621.186574][ T9] hid-generic 0000:0000:0000.0121: hidraw0: HID v0.00 Device [syz0] on syz0 [ 621.657547][T29129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9771'. [ 621.678344][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.685827][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.693530][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.700994][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.708481][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.715952][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.723375][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.730864][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.739069][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.746554][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.754017][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.761483][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.769032][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.777087][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.784539][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.792059][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.799518][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.806998][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.814413][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.821923][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.829387][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.836893][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.844391][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.851867][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.859315][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.866940][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.874339][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.881786][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.889303][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.896825][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.904348][ T3398] hid-generic 0000:0000:0000.0122: unknown main item tag 0x0 [ 621.986845][ T3398] hid-generic 0000:0000:0000.0122: hidraw0: HID v0.00 Device [syz0] on syz0 [ 622.232393][T29142] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 622.232393][T29142] program syz.2.9775 not setting count and/or reply_len properly [ 622.255964][ T29] kauditd_printk_skb: 834 callbacks suppressed [ 622.255981][ T29] audit: type=1326 audit(1732745334.812:61693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.286049][ T29] audit: type=1326 audit(1732745334.812:61694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.309672][ T29] audit: type=1326 audit(1732745334.812:61695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.333345][ T29] audit: type=1326 audit(1732745334.812:61696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.356950][ T29] audit: type=1326 audit(1732745334.812:61697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.380950][ T29] audit: type=1326 audit(1732745334.812:61698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.404581][ T29] audit: type=1326 audit(1732745334.812:61699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.424897][T29149] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 622.428230][ T29] audit: type=1326 audit(1732745334.812:61700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.458580][ T29] audit: type=1326 audit(1732745334.812:61701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.482444][ T29] audit: type=1326 audit(1732745334.812:61702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29141 comm="syz.2.9775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff26aee0809 code=0x7ffc0000 [ 622.609859][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.617411][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.625016][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.632635][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.640219][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.648183][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.655645][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.663218][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.670937][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.678417][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.686016][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.693519][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.701092][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.708643][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.716068][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.723483][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.730929][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.738443][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.745931][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.753509][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.761027][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.768700][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.776261][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.783889][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.791512][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.798957][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.806487][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.814119][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.821587][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.829147][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.836669][ T1044] hid-generic 0000:0000:0000.0123: unknown main item tag 0x0 [ 622.847018][ T1044] hid-generic 0000:0000:0000.0123: hidraw0: HID v0.00 Device [syz0] on syz0 [ 622.921328][T29179] bridge0: port 3(vlan1) entered blocking state [ 622.927878][T29179] bridge0: port 3(vlan1) entered disabled state [ 622.950168][T29179] vlan1: entered allmulticast mode [ 622.968614][T29179] vlan1: left allmulticast mode [ 623.017827][T29180] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 623.308907][T29199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9797'. [ 623.336761][ T9] hid-generic 0000:0000:0000.0124: unknown main item tag 0x0 [ 623.344655][ T9] hid-generic 0000:0000:0000.0124: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.363522][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9801'. [ 623.953851][T29231] bridge0: port 3(vlan1) entered blocking state [ 623.960397][T29231] bridge0: port 3(vlan1) entered disabled state [ 623.969994][T29231] vlan1: entered allmulticast mode [ 623.977767][T29231] vlan1: left allmulticast mode [ 624.025984][T29234] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 624.045361][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.052992][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.060567][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.068074][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.075510][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.082980][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.090497][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.098026][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.105423][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.113645][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.121199][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.128635][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.136106][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.143843][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.151300][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.158816][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.166257][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.173659][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.181181][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.188644][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.196087][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.203555][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.210999][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.218535][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.226030][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.233551][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.240988][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.248498][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.255924][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.263331][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.270762][ T1044] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 624.280934][ T1044] hid-generic 0000:0000:0000.0125: hidraw0: HID v0.00 Device [syz0] on syz0 [ 624.352530][T29243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9814'. [ 624.454983][T29255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 624.638129][T29273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9827'. [ 625.264569][T29306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9837'. [ 625.322960][T29289] chnl_net:caif_netlink_parms(): no params data found [ 625.369206][T29314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9839'. [ 625.461861][T29321] bridge0: port 3(vlan1) entered blocking state [ 625.468230][T29321] bridge0: port 3(vlan1) entered disabled state [ 625.482968][T29321] vlan1: entered allmulticast mode [ 625.536808][T29321] vlan1: left allmulticast mode [ 625.554723][T29289] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.561981][T29289] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.569473][T29289] bridge_slave_0: entered allmulticast mode [ 625.576222][T29289] bridge_slave_0: entered promiscuous mode [ 625.583132][T29289] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.590498][T29289] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.597778][T29289] bridge_slave_1: entered allmulticast mode [ 625.604448][T29289] bridge_slave_1: entered promiscuous mode [ 625.640948][T29289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.651859][T29289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.674084][T29289] team0: Port device team_slave_0 added [ 625.677776][T29337] netlink: 'syz.2.9849': attribute type 10 has an invalid length. [ 625.683646][T29289] team0: Port device team_slave_1 added [ 625.707532][T29341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9850'. [ 625.721801][T29321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 625.731505][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9851'. [ 625.756138][T29289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.763202][T29289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.789230][T29289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.800710][T29289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.807852][T29289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.833865][T29289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.850747][T29347] bridge0: port 3(vlan1) entered blocking state [ 625.857215][T29347] bridge0: port 3(vlan1) entered disabled state [ 625.866925][T29347] vlan1: entered allmulticast mode [ 625.872693][T29347] vlan1: left allmulticast mode [ 625.904046][T29349] siw: device registration error -23 [ 625.909493][T29337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 625.918762][T29289] hsr_slave_0: entered promiscuous mode [ 625.925093][T29289] hsr_slave_1: entered promiscuous mode [ 625.931279][T29289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.939756][T29289] Cannot create hsr debugfs directory [ 626.003796][T29289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.159290][T29289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.248688][T29289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.299302][T29370] bridge0: port 3(vlan1) entered blocking state [ 626.305644][T29370] bridge0: port 3(vlan1) entered disabled state [ 626.312417][T29370] vlan1: entered allmulticast mode [ 626.319712][T29370] vlan1: left allmulticast mode [ 626.334089][T29289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.376173][T29375] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 626.385105][T29370] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 626.413347][T29289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.429824][T29289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.447329][T29289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.475577][T29289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.614830][T29289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.664568][T29289] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.681597][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.688747][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.708212][T29381] bridge0: port 3(vlan1) entered blocking state [ 626.714567][T29381] bridge0: port 3(vlan1) entered disabled state [ 626.721335][T29381] vlan1: entered allmulticast mode [ 626.727697][T29381] vlan1: left allmulticast mode [ 626.741218][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.748409][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.793232][T29384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 626.952401][T29289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.002809][T29396] bridge0: port 3(vlan1) entered blocking state [ 627.009276][T29396] bridge0: port 3(vlan1) entered disabled state [ 627.020879][T29396] vlan1: entered allmulticast mode [ 627.027008][T29396] vlan1: left allmulticast mode [ 627.111873][T29396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 627.171325][T29289] veth0_vlan: entered promiscuous mode [ 627.194242][T29289] veth1_vlan: entered promiscuous mode [ 627.234825][T29289] veth0_macvtap: entered promiscuous mode [ 627.253621][T29289] veth1_macvtap: entered promiscuous mode [ 627.287748][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.298254][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.308198][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.318715][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.328706][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.339284][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.343351][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 627.343368][ T29] audit: type=1326 audit(1732745339.922:62275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.349110][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.349143][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.349170][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.384402][ T29] audit: type=1326 audit(1732745339.942:62276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.389332][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.399215][ T29] audit: type=1326 audit(1732745339.942:62277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.409617][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.433174][ T29] audit: type=1326 audit(1732745339.942:62278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.443018][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.466639][ T29] audit: type=1326 audit(1732745339.942:62279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.466676][ T29] audit: type=1326 audit(1732745339.942:62280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.477186][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.477206][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.500936][ T29] audit: type=1326 audit(1732745339.942:62281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.510751][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.510770][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.510789][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.510804][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.510820][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.510889][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.510904][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.534456][ T29] audit: type=1326 audit(1732745339.942:62282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.558003][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.568426][ T29] audit: type=1326 audit(1732745339.942:62283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.624513][T29289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.633072][ T29] audit: type=1326 audit(1732745339.942:62284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.9874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 627.744305][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.773040][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.782966][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.793919][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.803865][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.814455][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.824355][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.828533][T29430] netlink: 'syz.3.9876': attribute type 10 has an invalid length. [ 627.835053][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.852782][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.863311][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.873230][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.883776][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.893845][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.904279][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.914221][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.924744][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.926670][T29433] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 627.934573][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.951752][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.961683][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.972191][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.982019][T29289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.992460][T29289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.010091][T29289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.033805][T29289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.042857][T29289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.051857][T29289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.060808][T29289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.133198][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.141194][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.148901][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.156487][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.163929][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.171411][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.178935][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.186420][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.193991][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.201624][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.209169][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.216699][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.224171][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.231655][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.239066][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.246508][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.253959][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.261522][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.269079][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.276589][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.284012][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.291639][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.299176][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.306664][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.314185][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.321640][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.329097][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.336538][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.344059][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.351558][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.358968][ T3397] hid-generic 0000:0000:0000.0126: unknown main item tag 0x0 [ 628.367129][ T3397] hid-generic 0000:0000:0000.0126: hidraw0: HID v0.00 Device [syz0] on syz0 [ 628.395667][T29444] bridge0: port 3(vlan1) entered blocking state [ 628.402141][T29444] bridge0: port 3(vlan1) entered disabled state [ 628.451474][T29444] vlan1: entered allmulticast mode [ 628.470363][T29444] vlan1: left allmulticast mode [ 628.513842][T29450] netlink: 'syz.6.9880': attribute type 10 has an invalid length. [ 628.539010][T29450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 628.740201][T29456] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 628.848711][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9890'. [ 628.902388][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.909956][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.917449][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.925044][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.932474][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.939972][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.947820][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.955231][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.962751][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.970193][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.977705][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.985157][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 628.992604][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.000050][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.007519][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.014986][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.022444][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.029959][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.037386][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.044796][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.052290][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.059843][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.067428][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.074975][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.082535][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.090114][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.097780][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.105363][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.112853][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.120285][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.127763][ T3400] hid-generic 0000:0000:0000.0127: unknown main item tag 0x0 [ 629.138679][ T3400] hid-generic 0000:0000:0000.0127: hidraw0: HID v0.00 Device [syz0] on syz0 [ 630.423930][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.431481][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.439254][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.446833][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.454275][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.462139][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.469770][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.477217][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.484876][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.492404][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.499878][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.507356][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.514830][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.522247][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.529649][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.537130][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.544588][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.552054][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.559460][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.566911][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.574299][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.581753][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.589170][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.596665][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.604122][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.611544][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.618985][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.626596][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.633987][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.641637][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.649232][ T3397] hid-generic 0000:0000:0000.0128: unknown main item tag 0x0 [ 630.657411][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9901'. [ 630.667746][ T3397] hid-generic 0000:0000:0000.0128: hidraw0: HID v0.00 Device [syz0] on syz0 [ 630.751291][ T9556] hid-generic 0000:0000:0000.0129: unknown main item tag 0x0 [ 630.764730][ T9556] hid-generic 0000:0000:0000.0129: hidraw1: HID v0.00 Device [syz1] on syz0 [ 630.891865][T29522] netlink: 'syz.3.9908': attribute type 10 has an invalid length. [ 630.900290][T29522] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 632.183317][T29545] syzkaller0: entered promiscuous mode [ 632.188958][T29545] syzkaller0: entered allmulticast mode [ 632.199666][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.207165][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.214584][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.222188][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.229612][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.237191][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.244661][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.252260][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.252949][T29561] netlink: 'syz.5.9923': attribute type 10 has an invalid length. [ 632.259866][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.275231][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.282943][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.290447][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.298141][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.306023][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.313575][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.321088][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.328669][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.336393][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.343827][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.351277][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.358720][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.366163][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.373674][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.381410][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.386096][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 632.386114][ T29] audit: type=1326 audit(1732745344.892:62511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.388884][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.395116][ T29] audit: type=1326 audit(1732745344.892:62512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.418689][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.426094][ T29] audit: type=1326 audit(1732745344.892:62513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.449773][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.457274][ T29] audit: type=1326 audit(1732745344.892:62514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.480931][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.480962][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.481045][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.481070][ T3398] hid-generic 0000:0000:0000.012A: unknown main item tag 0x0 [ 632.541750][ T29] audit: type=1326 audit(1732745344.892:62515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.565366][ T29] audit: type=1326 audit(1732745344.892:62516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7287e6f2bf code=0x7ffc0000 [ 632.571367][ T3398] hid-generic 0000:0000:0000.012A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 632.588774][ T29] audit: type=1326 audit(1732745344.892:62517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.588811][ T29] audit: type=1326 audit(1732745344.892:62518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.588873][ T29] audit: type=1326 audit(1732745344.892:62519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.669673][ T29] audit: type=1326 audit(1732745344.892:62520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29556 comm="syz.3.9922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 632.755236][T29561] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.783439][T29561] bond0: (slave team0): Enslaving as an active interface with an up link [ 632.797771][T29567] bridge0: port 3(vlan1) entered blocking state [ 632.804126][T29567] bridge0: port 3(vlan1) entered disabled state [ 632.828424][T29567] vlan1: entered allmulticast mode [ 632.876623][T29567] vlan1: left allmulticast mode [ 632.895778][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9925'. [ 632.897723][T29570] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 632.972975][ T3398] hid-generic 0000:0000:0000.012B: unknown main item tag 0x0 [ 632.987183][ T3398] hid-generic 0000:0000:0000.012B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 633.330794][T29601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9934'. [ 633.371861][T29604] netlink: 'syz.2.9936': attribute type 10 has an invalid length. [ 633.386049][T29604] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 634.422484][T29637] netlink: 'syz.3.9947': attribute type 3 has an invalid length. [ 634.457206][T29637] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 634.608190][ T3400] hid-generic 0000:0000:0000.012C: unknown main item tag 0x0 [ 634.630052][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9948'. [ 634.654186][ T3400] hid-generic 0000:0000:0000.012C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 635.194880][T29669] FAULT_INJECTION: forcing a failure. [ 635.194880][T29669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.208073][T29669] CPU: 0 UID: 0 PID: 29669 Comm: syz.0.9956 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 635.218517][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 635.228626][T29669] Call Trace: [ 635.231984][T29669] [ 635.234933][T29669] dump_stack_lvl+0xf2/0x150 [ 635.239616][T29669] dump_stack+0x15/0x20 [ 635.243798][T29669] should_fail_ex+0x223/0x230 [ 635.248580][T29669] should_fail+0xb/0x10 [ 635.252854][T29669] should_fail_usercopy+0x1a/0x20 [ 635.258010][T29669] _copy_from_user+0x1e/0xb0 [ 635.258862][T29646] chnl_net:caif_netlink_parms(): no params data found [ 635.262705][T29669] copy_msghdr_from_user+0x54/0x2a0 [ 635.274686][T29669] ? __fget_files+0x17c/0x1c0 [ 635.279391][T29669] __sys_sendmsg+0x13e/0x230 [ 635.284028][T29669] __x64_sys_sendmsg+0x46/0x50 [ 635.288853][T29669] x64_sys_call+0x2734/0x2dc0 [ 635.293546][T29669] do_syscall_64+0xc9/0x1c0 [ 635.298054][T29669] ? clear_bhb_loop+0x55/0xb0 [ 635.303139][T29669] ? clear_bhb_loop+0x55/0xb0 [ 635.307896][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.313872][T29669] RIP: 0033:0x7f5625d90809 [ 635.318313][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.338127][T29669] RSP: 002b:00007f5624407058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.346625][T29669] RAX: ffffffffffffffda RBX: 00007f5625f55fa0 RCX: 00007f5625d90809 [ 635.354604][T29669] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 635.362583][T29669] RBP: 00007f56244070a0 R08: 0000000000000000 R09: 0000000000000000 [ 635.370560][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.378603][T29669] R13: 0000000000000000 R14: 00007f5625f55fa0 R15: 00007ffce9d270c8 [ 635.386590][T29669] [ 635.634752][T29686] FAULT_INJECTION: forcing a failure. [ 635.634752][T29686] name failslab, interval 1, probability 0, space 0, times 0 [ 635.647514][T29686] CPU: 1 UID: 0 PID: 29686 Comm: syz.5.9961 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 635.658049][T29686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 635.668186][T29686] Call Trace: [ 635.671467][T29686] [ 635.674403][T29686] dump_stack_lvl+0xf2/0x150 [ 635.679018][T29686] dump_stack+0x15/0x20 [ 635.683258][T29686] should_fail_ex+0x223/0x230 [ 635.687978][T29686] should_failslab+0x8f/0xb0 [ 635.692618][T29686] __kmalloc_noprof+0xab/0x3f0 [ 635.697400][T29686] ? kernfs_fop_write_iter+0xe1/0x2c0 [ 635.702790][T29686] ? selinux_file_permission+0x22a/0x360 [ 635.708520][T29686] kernfs_fop_write_iter+0xe1/0x2c0 [ 635.713735][T29686] vfs_write+0x77f/0x920 [ 635.718033][T29686] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 635.723898][T29686] ksys_write+0xe8/0x1b0 [ 635.728346][T29686] __x64_sys_write+0x42/0x50 [ 635.732965][T29686] x64_sys_call+0x287e/0x2dc0 [ 635.737688][T29686] do_syscall_64+0xc9/0x1c0 [ 635.742373][T29686] ? clear_bhb_loop+0x55/0xb0 [ 635.747087][T29686] ? clear_bhb_loop+0x55/0xb0 [ 635.751770][T29686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.757688][T29686] RIP: 0033:0x7f2a04bf0809 [ 635.762188][T29686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.781888][T29686] RSP: 002b:00007f2a03267058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.790317][T29686] RAX: ffffffffffffffda RBX: 00007f2a04db5fa0 RCX: 00007f2a04bf0809 [ 635.798308][T29686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 635.806287][T29686] RBP: 00007f2a032670a0 R08: 0000000000000000 R09: 0000000000000000 [ 635.814265][T29686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.822307][T29686] R13: 0000000000000000 R14: 00007f2a04db5fa0 R15: 00007ffe1ebcc3f8 [ 635.830304][T29686] [ 635.841726][T29646] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.848960][T29646] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.862533][T29646] bridge_slave_0: entered allmulticast mode [ 635.869546][T29646] bridge_slave_0: entered promiscuous mode [ 635.879084][T29646] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.886283][T29646] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.893831][T29646] bridge_slave_1: entered allmulticast mode [ 635.910876][T29646] bridge_slave_1: entered promiscuous mode [ 635.994037][T29646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.019180][T29646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.060784][T29646] team0: Port device team_slave_0 added [ 636.072650][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9968'. [ 636.077134][T29646] team0: Port device team_slave_1 added [ 636.116947][T29646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.123959][T29646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.149999][T29646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.189656][T29707] FAULT_INJECTION: forcing a failure. [ 636.189656][T29707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.202809][T29707] CPU: 0 UID: 0 PID: 29707 Comm: syz.5.9970 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 636.213256][T29707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.223459][T29707] Call Trace: [ 636.226754][T29707] [ 636.229764][T29707] dump_stack_lvl+0xf2/0x150 [ 636.234425][T29707] dump_stack+0x15/0x20 [ 636.238688][T29707] should_fail_ex+0x223/0x230 [ 636.243444][T29707] should_fail+0xb/0x10 [ 636.247636][T29707] should_fail_usercopy+0x1a/0x20 [ 636.252693][T29707] _copy_from_user+0x1e/0xb0 [ 636.257320][T29707] copy_msghdr_from_user+0x54/0x2a0 [ 636.262639][T29707] ? __fget_files+0x17c/0x1c0 [ 636.267348][T29707] __sys_sendmsg+0x13e/0x230 [ 636.272012][T29707] __x64_sys_sendmsg+0x46/0x50 [ 636.276872][T29707] x64_sys_call+0x2734/0x2dc0 [ 636.281616][T29707] do_syscall_64+0xc9/0x1c0 [ 636.286171][T29707] ? clear_bhb_loop+0x55/0xb0 [ 636.290902][T29707] ? clear_bhb_loop+0x55/0xb0 [ 636.295602][T29707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.301636][T29707] RIP: 0033:0x7f2a04bf0809 [ 636.306076][T29707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.307028][T29646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.325808][T29707] RSP: 002b:00007f2a03267058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.325838][T29707] RAX: ffffffffffffffda RBX: 00007f2a04db5fa0 RCX: 00007f2a04bf0809 [ 636.325854][T29707] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 636.325878][T29707] RBP: 00007f2a032670a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.332802][T29646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.341207][T29707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.341229][T29707] R13: 0000000000000000 R14: 00007f2a04db5fa0 R15: 00007ffe1ebcc3f8 [ 636.341269][T29707] [ 636.349238][T29646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.522378][T29646] hsr_slave_0: entered promiscuous mode [ 636.538316][T29646] hsr_slave_1: entered promiscuous mode [ 636.554678][T29646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.566400][T29646] Cannot create hsr debugfs directory [ 636.666488][T29646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.749432][T29646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.777864][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9977'. [ 636.804728][T29646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.845320][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9980'. [ 636.870493][T29646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.874285][T29736] FAULT_INJECTION: forcing a failure. [ 636.874285][T29736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.894132][T29736] CPU: 1 UID: 0 PID: 29736 Comm: syz.0.9981 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 636.904641][T29736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.914770][T29736] Call Trace: [ 636.918049][T29736] [ 636.920979][T29736] dump_stack_lvl+0xf2/0x150 [ 636.925582][T29736] dump_stack+0x15/0x20 [ 636.929810][T29736] should_fail_ex+0x223/0x230 [ 636.934505][T29736] should_fail+0xb/0x10 [ 636.938692][T29736] should_fail_usercopy+0x1a/0x20 [ 636.943797][T29736] _copy_from_user+0x1e/0xb0 [ 636.948466][T29736] copy_msghdr_from_user+0x54/0x2a0 [ 636.953750][T29736] ? __fget_files+0x17c/0x1c0 [ 636.958608][T29736] __sys_sendmsg+0x13e/0x230 [ 636.963241][T29736] __x64_sys_sendmsg+0x46/0x50 [ 636.968015][T29736] x64_sys_call+0x2734/0x2dc0 [ 636.972749][T29736] do_syscall_64+0xc9/0x1c0 [ 636.977263][T29736] ? clear_bhb_loop+0x55/0xb0 [ 636.981959][T29736] ? clear_bhb_loop+0x55/0xb0 [ 636.986712][T29736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.992658][T29736] RIP: 0033:0x7f5625d90809 [ 636.997155][T29736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.016823][T29736] RSP: 002b:00007f5624407058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.025338][T29736] RAX: ffffffffffffffda RBX: 00007f5625f55fa0 RCX: 00007f5625d90809 [ 637.033328][T29736] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 637.041302][T29736] RBP: 00007f56244070a0 R08: 0000000000000000 R09: 0000000000000000 [ 637.049320][T29736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.057319][T29736] R13: 0000000000000000 R14: 00007f5625f55fa0 R15: 00007ffce9d270c8 [ 637.065310][T29736] [ 637.095046][T29743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9983'. [ 637.104424][T29743] netlink: 'syz.2.9983': attribute type 7 has an invalid length. [ 637.112336][T29743] netlink: 'syz.2.9983': attribute type 8 has an invalid length. [ 637.120170][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9983'. [ 637.147625][T29748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9984'. [ 637.157242][T29748] bridge_slave_1: left allmulticast mode [ 637.162916][T29748] bridge_slave_1: left promiscuous mode [ 637.168900][T29748] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.184933][T29748] bridge_slave_0: left allmulticast mode [ 637.190961][T29748] bridge_slave_0: left promiscuous mode [ 637.196749][T29748] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.267607][T29646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 637.279467][T29751] batadv1: entered promiscuous mode [ 637.285704][T29751] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 637.296833][T29646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 637.305613][T29646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 637.320076][T29646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 637.430635][T29646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.486544][T29646] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.503149][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.510278][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.537169][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.544338][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.607784][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9990'. [ 637.761440][T29646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.891659][T29775] syz.5.9992[29775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.891867][T29775] syz.5.9992[29775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.928221][T29775] syz.5.9992[29775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.046060][T29646] veth0_vlan: entered promiscuous mode [ 638.070082][T29646] veth1_vlan: entered promiscuous mode [ 638.090801][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 638.090816][ T29] audit: type=1326 audit(1732745350.672:62991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.122288][T29646] veth0_macvtap: entered promiscuous mode [ 638.136219][T29646] veth1_macvtap: entered promiscuous mode [ 638.158414][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.161365][ T29] audit: type=1326 audit(1732745350.712:62992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.168883][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.168902][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.192635][ T29] audit: type=1326 audit(1732745350.712:62993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.202552][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.212988][ T29] audit: type=1326 audit(1732745350.712:62994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.236901][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.246382][ T29] audit: type=1326 audit(1732745350.712:62995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.246413][ T29] audit: type=1326 audit(1732745350.712:62996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.246522][ T29] audit: type=1326 audit(1732745350.712:62997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.270012][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.270031][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.280534][ T29] audit: type=1326 audit(1732745350.712:62998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.304605][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.327719][ T29] audit: type=1326 audit(1732745350.712:62999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.351349][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.361169][ T29] audit: type=1326 audit(1732745350.712:63000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29795 comm="syz.0.9996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 638.371554][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.371573][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.477967][T29803] FAULT_INJECTION: forcing a failure. [ 638.477967][T29803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.484597][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.497769][T29803] CPU: 0 UID: 0 PID: 29803 Comm: syz.5.9997 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 638.507528][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.517922][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.517939][T29803] Call Trace: [ 638.528349][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.538379][T29803] [ 638.538392][T29803] dump_stack_lvl+0xf2/0x150 [ 638.541771][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.551548][T29803] dump_stack+0x15/0x20 [ 638.554482][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.559055][T29803] should_fail_ex+0x223/0x230 [ 638.559163][T29803] should_fail+0xb/0x10 [ 638.559196][T29803] should_fail_usercopy+0x1a/0x20 [ 638.559242][T29803] _copy_from_user+0x1e/0xb0 [ 638.559268][T29803] do_sys_poll+0x153/0xc20 [ 638.559298][T29803] ? avc_has_perm+0xd4/0x160 [ 638.559361][T29803] ? set_user_sigmask+0x83/0x190 [ 638.559455][T29803] __se_sys_ppoll+0x1af/0x1f0 [ 638.559484][T29803] ? fput+0x1c4/0x200 [ 638.569926][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.574049][T29803] __x64_sys_ppoll+0x67/0x80 [ 638.583843][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.588496][T29803] x64_sys_call+0x2acc/0x2dc0 [ 638.592660][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.597663][T29803] do_syscall_64+0xc9/0x1c0 [ 638.602249][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.606703][T29803] ? clear_bhb_loop+0x55/0xb0 [ 638.611346][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.616258][T29803] ? clear_bhb_loop+0x55/0xb0 [ 638.620929][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.624891][T29803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.635320][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.639872][T29803] RIP: 0033:0x7f2a04bf0809 [ 638.639900][T29803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.639919][T29803] RSP: 002b:00007f2a03225058 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 638.639938][T29803] RAX: ffffffffffffffda RBX: 00007f2a04db6160 RCX: 00007f2a04bf0809 [ 638.639951][T29803] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000200 [ 638.649745][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.654405][T29803] RBP: 00007f2a032250a0 R08: 0000000000000003 R09: 0000000000000000 [ 638.792202][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.800195][T29803] R13: 0000000000000000 R14: 00007f2a04db6160 R15: 00007ffe1ebcc3f8 [ 638.808346][T29803] [ 638.818920][T29646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.840026][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.850548][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.860417][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.870886][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.880802][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.891283][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.901489][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.912057][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.922160][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.932632][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.942552][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.953044][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.962949][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.973540][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.983553][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.994114][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.004092][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.014688][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.025183][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.035696][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.045585][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.056041][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.065905][T29646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.076385][T29646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.087712][T29646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.096323][T29646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.105090][T29646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.114074][T29646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.122876][T29646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.617585][T29843] netlink: 'syz.5.10008': attribute type 10 has an invalid length. [ 639.628760][T29843] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 639.793572][T29855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10014'. [ 639.890968][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10016'. [ 640.394884][T29870] bridge0: port 3(vlan2) entered blocking state [ 640.401393][T29870] bridge0: port 3(vlan2) entered disabled state [ 640.432824][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.440397][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.447843][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.455288][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.462824][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.470354][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.477789][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.485242][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.492727][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.500252][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.507717][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.515180][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.522629][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.530043][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.537590][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.544985][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.552422][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.559046][T29870] vlan2: entered allmulticast mode [ 640.559852][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.572484][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.579996][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.587445][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.594867][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.602320][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.610035][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.617488][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.625059][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.632491][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.639935][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.647560][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.654965][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.662503][ T9] hid-generic 0000:0000:0000.012D: unknown main item tag 0x0 [ 640.672097][ T9] hid-generic 0000:0000:0000.012D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 640.686045][T29870] vlan2: left allmulticast mode [ 640.754655][T29886] syz.2.10026[29886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.754817][T29886] syz.2.10026[29886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.766973][T29886] syz.2.10026[29886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.924555][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10028'. [ 640.995019][T29900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10030'. [ 641.359282][T29923] bridge0: port 3(vlan2) entered blocking state [ 641.365754][T29923] bridge0: port 3(vlan2) entered disabled state [ 641.914918][T29923] vlan2: entered allmulticast mode [ 642.242280][T29923] vlan2: left allmulticast mode [ 642.302386][T29926] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 642.328517][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10041'. [ 642.376949][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.384478][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.391991][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.399525][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.406984][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.409463][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10040'. [ 642.414392][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.423487][T29937] bridge_slave_1: left allmulticast mode [ 642.430768][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.430800][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.436445][T29937] bridge_slave_1: left promiscuous mode [ 642.443810][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.451440][T29937] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.456897][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.478888][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.486309][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.493696][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.501188][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.508704][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.516130][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.523565][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.531106][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.538700][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.546145][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.553607][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.561113][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.568552][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.576021][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.583425][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.590907][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.598528][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.606035][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.613466][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.621060][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.628589][T24776] hid-generic 0000:0000:0000.012E: unknown main item tag 0x0 [ 642.652155][T24776] hid-generic 0000:0000:0000.012E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 642.652446][T29937] bridge_slave_0: left allmulticast mode [ 642.667503][T29937] bridge_slave_0: left promiscuous mode [ 642.673200][T29937] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.743361][T29929] batadv1: entered promiscuous mode [ 642.753670][T29929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 642.830488][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10045'. [ 642.910957][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10047'. [ 642.991112][T29951] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 643.013535][T29958] netlink: 'syz.5.10050': attribute type 10 has an invalid length. [ 643.025315][T29958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 643.294120][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.301626][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.309334][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.316978][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.324388][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.332050][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.339919][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.347623][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.355027][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.362616][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.370326][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.377932][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.385761][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.393431][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.401135][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.408774][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.416437][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.423848][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.431492][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.439082][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.446925][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.454462][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.462022][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.469596][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.477322][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.484755][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.492343][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.501397][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.509180][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.516906][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.524309][ T9556] hid-generic 0000:0000:0000.012F: unknown main item tag 0x0 [ 643.539521][ T9556] hid-generic 0000:0000:0000.012F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 643.696309][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 643.696328][ T29] audit: type=1326 audit(1732745356.272:63384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.726616][ T29] audit: type=1326 audit(1732745356.272:63385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.750623][ T29] audit: type=1326 audit(1732745356.272:63386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.774852][ T29] audit: type=1326 audit(1732745356.272:63387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.799051][ T29] audit: type=1326 audit(1732745356.272:63388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.823197][ T29] audit: type=1326 audit(1732745356.272:63389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.836268][T29994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10061'. [ 643.847011][ T29] audit: type=1326 audit(1732745356.272:63390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.879933][T29994] bridge_slave_1: left allmulticast mode [ 643.879953][T29994] bridge_slave_1: left promiscuous mode [ 643.880151][T29994] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.885657][ T29] audit: type=1326 audit(1732745356.272:63391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.922624][ T29] audit: type=1326 audit(1732745356.272:63392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.947083][ T29] audit: type=1326 audit(1732745356.272:63393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 643.974100][T29994] bridge_slave_0: left allmulticast mode [ 643.979999][T29994] bridge_slave_0: left promiscuous mode [ 643.983729][T29998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10064'. [ 643.986009][T29994] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.070828][T29993] batadv1: entered promiscuous mode [ 644.077595][T29993] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 644.232398][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.240041][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.247551][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.255148][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.262831][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.270329][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.277889][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.285525][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.293018][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.300518][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.308009][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.315413][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.322831][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.330263][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.337791][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.345219][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.352966][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.360367][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.367887][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.375284][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.382821][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.390345][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.400203][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.407667][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.415062][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.422577][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.430067][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.437580][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.445033][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.452446][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.459973][ T3400] hid-generic 0000:0000:0000.0130: unknown main item tag 0x0 [ 644.468062][ T3400] hid-generic 0000:0000:0000.0130: hidraw0: HID v0.00 Device [syz0] on syz0 [ 644.568338][T30041] netlink: 'syz.6.10082': attribute type 10 has an invalid length. [ 644.590878][T30041] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.602539][T30041] bond0: (slave team0): Enslaving as an active interface with an up link [ 644.619270][T30041] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 644.803865][T30055] __nla_validate_parse: 1 callbacks suppressed [ 644.803883][T30055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10087'. [ 645.169547][T30082] Cannot find del_set index 4 as target [ 645.200226][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10101'. [ 645.246381][T30093] netlink: 'syz.2.10103': attribute type 10 has an invalid length. [ 645.254918][T30093] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 645.597974][ T3400] hid-generic 0000:0000:0000.0131: unknown main item tag 0x0 [ 645.608797][ T3400] hid-generic 0000:0000:0000.0131: hidraw0: HID v0.00 Device [syz1] on syz0 [ 645.633661][T30118] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 645.669535][T30125] bridge0: port 3(vlan1) entered blocking state [ 645.676058][T30125] bridge0: port 3(vlan1) entered disabled state [ 645.682589][T30125] vlan1: entered allmulticast mode [ 645.688568][T30125] vlan1: left allmulticast mode [ 645.727596][T30129] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 645.784441][T30131] FAULT_INJECTION: forcing a failure. [ 645.784441][T30131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.797612][T30131] CPU: 1 UID: 0 PID: 30131 Comm: syz.6.10116 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 645.808145][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 645.818222][T30131] Call Trace: [ 645.821525][T30131] [ 645.824565][T30131] dump_stack_lvl+0xf2/0x150 [ 645.829159][T30131] dump_stack+0x15/0x20 [ 645.833347][T30131] should_fail_ex+0x223/0x230 [ 645.838064][T30131] should_fail+0xb/0x10 [ 645.842259][T30131] should_fail_usercopy+0x1a/0x20 [ 645.847383][T30131] _copy_to_user+0x20/0xa0 [ 645.851905][T30131] simple_read_from_buffer+0xa0/0x110 [ 645.857362][T30131] proc_fail_nth_read+0xf9/0x140 [ 645.862335][T30131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.867951][T30131] vfs_read+0x1a2/0x700 [ 645.872170][T30131] ? __rcu_read_unlock+0x4e/0x70 [ 645.877122][T30131] ? __fget_files+0x17c/0x1c0 [ 645.881836][T30131] ksys_read+0xe8/0x1b0 [ 645.886095][T30131] __x64_sys_read+0x42/0x50 [ 645.890619][T30131] x64_sys_call+0x2874/0x2dc0 [ 645.895317][T30131] do_syscall_64+0xc9/0x1c0 [ 645.899903][T30131] ? clear_bhb_loop+0x55/0xb0 [ 645.904594][T30131] ? clear_bhb_loop+0x55/0xb0 [ 645.909295][T30131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.915284][T30131] RIP: 0033:0x7fb4cbe5f21c [ 645.919723][T30131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 645.939372][T30131] RSP: 002b:00007fb4ca4d7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.947793][T30131] RAX: ffffffffffffffda RBX: 00007fb4cc025fa0 RCX: 00007fb4cbe5f21c [ 645.955779][T30131] RDX: 000000000000000f RSI: 00007fb4ca4d70b0 RDI: 0000000000000004 [ 645.963800][T30131] RBP: 00007fb4ca4d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 645.971779][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.979762][T30131] R13: 0000000000000000 R14: 00007fb4cc025fa0 R15: 00007fffa233dbf8 [ 645.987769][T30131] [ 646.077351][T30133] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 646.124052][T30143] loop0: detected capacity change from 0 to 2048 [ 646.131334][T30143] ext3: Unknown parameter 'fsname' [ 646.329090][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10126'. [ 646.369196][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10128'. [ 646.400995][T30169] netlink: 'syz.0.10129': attribute type 11 has an invalid length. [ 646.448584][T30174] netlink: 'syz.3.10131': attribute type 10 has an invalid length. [ 646.457332][T30174] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 646.621247][T30187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10136'. [ 646.699650][T30189] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 646.915786][T30193] Cannot find del_set index 4 as target [ 646.929443][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10139'. [ 646.980703][ T3397] hid-generic 0000:0000:0000.0132: unknown main item tag 0x0 [ 646.989911][ T3397] hid-generic 0000:0000:0000.0132: hidraw0: HID v0.00 Device [syz1] on syz0 [ 646.992845][T30204] netlink: 'syz.5.10143': attribute type 10 has an invalid length. [ 647.009373][T30204] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 647.093699][T30213] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 647.136072][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.137245][T30211] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 647.143537][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.158166][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.165691][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.173175][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.180790][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.188302][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.195761][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.203268][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.210740][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.218226][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.225638][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.233105][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.240599][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.248021][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.255487][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.262952][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.270496][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.277977][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.285395][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.292921][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.300412][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.307858][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.315284][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.322745][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.330191][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.338656][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.346254][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.353671][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.361248][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.368775][ T3459] hid-generic 0000:0000:0000.0133: unknown main item tag 0x0 [ 647.379485][ T3459] hid-generic 0000:0000:0000.0133: hidraw0: HID v0.00 Device [syz0] on syz0 [ 647.403381][T30226] netlink: 'syz.0.10151': attribute type 12 has an invalid length. [ 647.411399][T30226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10151'. [ 647.423450][T30226] netlink: 'syz.0.10151': attribute type 6 has an invalid length. [ 647.431492][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10151'. [ 647.504073][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10153'. [ 647.544744][T30238] FAULT_INJECTION: forcing a failure. [ 647.544744][T30238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.558121][T30238] CPU: 1 UID: 0 PID: 30238 Comm: syz.0.10154 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 647.568684][T30238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.578753][T30238] Call Trace: [ 647.582036][T30238] [ 647.584977][T30238] dump_stack_lvl+0xf2/0x150 [ 647.589585][T30238] dump_stack+0x15/0x20 [ 647.593790][T30238] should_fail_ex+0x223/0x230 [ 647.598525][T30238] should_fail+0xb/0x10 [ 647.602787][T30238] should_fail_usercopy+0x1a/0x20 [ 647.607908][T30238] _copy_from_user+0x1e/0xb0 [ 647.612520][T30238] eventfd_write+0x73/0x370 [ 647.617096][T30238] vfs_writev+0x3fb/0x880 [ 647.621441][T30238] ? __pfx_eventfd_write+0x10/0x10 [ 647.626598][T30238] do_writev+0xf4/0x220 [ 647.630776][T30238] __x64_sys_writev+0x45/0x50 [ 647.635522][T30238] x64_sys_call+0x1fab/0x2dc0 [ 647.640222][T30238] do_syscall_64+0xc9/0x1c0 [ 647.644757][T30238] ? clear_bhb_loop+0x55/0xb0 [ 647.649505][T30238] ? clear_bhb_loop+0x55/0xb0 [ 647.654249][T30238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.660237][T30238] RIP: 0033:0x7f5625d90809 [ 647.664661][T30238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.684366][T30238] RSP: 002b:00007f5624407058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 647.692895][T30238] RAX: ffffffffffffffda RBX: 00007f5625f55fa0 RCX: 00007f5625d90809 [ 647.700880][T30238] RDX: 0000000000000001 RSI: 0000000020000400 RDI: 0000000000000003 [ 647.708868][T30238] RBP: 00007f56244070a0 R08: 0000000000000000 R09: 0000000000000000 [ 647.716866][T30238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.724855][T30238] R13: 0000000000000000 R14: 00007f5625f55fa0 R15: 00007ffce9d270c8 [ 647.732847][T30238] [ 647.883486][T30255] bridge0: port 3(vlan1) entered blocking state [ 647.890422][T30255] bridge0: port 3(vlan1) entered disabled state [ 647.897650][T30255] vlan1: entered allmulticast mode [ 647.904635][T30255] vlan1: left allmulticast mode [ 647.948118][T30255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 648.185989][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.193472][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.201029][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.208549][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.216054][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.223871][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.231497][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.239092][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.246612][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.254041][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.261735][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.269235][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.276917][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.284348][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.291857][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.299272][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.306725][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.314163][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.321594][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.329046][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.336491][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.343961][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.351401][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.358820][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.366252][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.373652][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.381324][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.388837][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.396280][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.403673][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.411124][ T3397] hid-generic 0000:0000:0000.0134: unknown main item tag 0x0 [ 648.419955][ T3397] hid-generic 0000:0000:0000.0134: hidraw0: HID v0.00 Device [syz0] on syz0 [ 648.816086][ T29] kauditd_printk_skb: 1309 callbacks suppressed [ 648.816108][ T29] audit: type=1326 audit(1732745361.332:64703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.3.10173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 648.846146][ T29] audit: type=1326 audit(1732745361.332:64704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30286 comm="syz.3.10173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7287e70809 code=0x7ffc0000 [ 649.021292][T30303] netlink: 'syz.2.10177': attribute type 10 has an invalid length. [ 649.076450][T30303] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 649.124300][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10179'. [ 649.183313][ T29] audit: type=1326 audit(1732745361.762:64705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 649.230654][T30314] loop0: detected capacity change from 0 to 512 [ 649.238575][T30314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.251818][ T29] audit: type=1326 audit(1732745361.802:64706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5625d90809 code=0x7ffc0000 [ 649.275990][ T29] audit: type=1326 audit(1732745361.802:64707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5625d90843 code=0x7ffc0000 [ 649.299649][ T29] audit: type=1326 audit(1732745361.802:64708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5625d8f2bf code=0x7ffc0000 [ 649.323300][ T29] audit: type=1326 audit(1732745361.802:64709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5625d90897 code=0x7ffc0000 [ 649.346998][ T29] audit: type=1326 audit(1732745361.802:64710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5625d8f170 code=0x7ffc0000 [ 649.358987][T30314] EXT4-fs (loop0): 1 truncate cleaned up [ 649.370771][ T29] audit: type=1326 audit(1732745361.812:64711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5625d9040b code=0x7ffc0000 [ 649.389304][T30314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.400017][ T29] audit: type=1326 audit(1732745361.822:64712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30313 comm="syz.0.10182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5625d8f46a code=0x7ffc0000 [ 649.506842][T30314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 649.598478][T26764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.610011][T30329] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 649.844648][T30349] netlink: 'syz.6.10191': attribute type 10 has an invalid length. [ 649.859208][T30349] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 650.557574][T30374] bridge0: port 3(vlan1) entered blocking state [ 650.563920][T30374] bridge0: port 3(vlan1) entered disabled state [ 650.570787][T30374] vlan1: entered allmulticast mode [ 650.577090][T30374] vlan1: left allmulticast mode [ 650.598966][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10204'. [ 650.608311][T30383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 650.789725][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.797219][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.804816][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.812257][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819709][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819737][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819759][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819786][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819814][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819865][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819893][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819921][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.819946][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820035][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820064][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820092][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820125][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820148][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820190][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820218][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820240][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820265][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820293][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820325][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820359][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820388][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820416][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820437][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820458][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820481][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.820563][ T3400] hid-generic 0000:0000:0000.0135: unknown main item tag 0x0 [ 650.832828][ T3400] hid-generic 0000:0000:0000.0135: hidraw0: HID v0.00 Device [syz0] on syz0 [ 650.988812][T30399] netlink: 'syz.3.10210': attribute type 10 has an invalid length. [ 651.042590][T30400] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 651.104612][T30406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10213'. [ 651.114264][T30406] bridge_slave_1: left allmulticast mode [ 651.120070][T30406] bridge_slave_1: left promiscuous mode [ 651.125757][T30406] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.152133][T30406] bridge_slave_0: left allmulticast mode [ 651.158076][T30406] bridge_slave_0: left promiscuous mode [ 651.164423][T30406] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.306540][T30418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10216'. [ 651.379209][T30426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10219'. [ 651.793372][T30440] netlink: 'syz.6.10224': attribute type 10 has an invalid length. [ 651.802003][T30440] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 651.805061][T30441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10223'. [ 651.864825][T30447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10227'. [ 651.913991][T30445] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 651.969123][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10228'. [ 652.017869][T30462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10231'. [ 652.018178][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.034559][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.042189][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.049721][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.057272][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.064731][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.072250][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.079719][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.087207][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.094667][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.102230][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.109647][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.117081][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.124543][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.131980][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.139424][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.146876][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.154345][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.161806][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.169295][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.176810][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.184286][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.191781][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.199213][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.206655][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.214259][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.221812][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.229375][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.236840][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.244255][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.251711][ T3400] hid-generic 0000:0000:0000.0136: unknown main item tag 0x0 [ 652.265984][ T3400] hid-generic 0000:0000:0000.0136: hidraw0: HID v0.00 Device [syz0] on syz0 [ 652.373319][T30483] FAULT_INJECTION: forcing a failure. [ 652.373319][T30483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.386489][T30483] CPU: 0 UID: 0 PID: 30483 Comm: syz.6.10240 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 652.397059][T30483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 652.407137][T30483] Call Trace: [ 652.410435][T30483] [ 652.413382][T30483] dump_stack_lvl+0xf2/0x150 [ 652.418048][T30483] dump_stack+0x15/0x20 [ 652.422285][T30483] should_fail_ex+0x223/0x230 [ 652.427069][T30483] should_fail+0xb/0x10 [ 652.431324][T30483] should_fail_usercopy+0x1a/0x20 [ 652.436382][T30483] _copy_from_user+0x1e/0xb0 [ 652.441021][T30483] __sys_bpf+0x14e/0x7a0 [ 652.445319][T30483] __x64_sys_bpf+0x43/0x50 [ 652.449749][T30483] x64_sys_call+0x2914/0x2dc0 [ 652.454534][T30483] do_syscall_64+0xc9/0x1c0 [ 652.459052][T30483] ? clear_bhb_loop+0x55/0xb0 [ 652.463859][T30483] ? clear_bhb_loop+0x55/0xb0 [ 652.468624][T30483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.474636][T30483] RIP: 0033:0x7fb4cbe60809 [ 652.479070][T30483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.498841][T30483] RSP: 002b:00007fb4ca4d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.507351][T30483] RAX: ffffffffffffffda RBX: 00007fb4cc025fa0 RCX: 00007fb4cbe60809 [ 652.515367][T30483] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 2000000000000000 [ 652.523489][T30483] RBP: 00007fb4ca4d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 652.531502][T30483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.539481][T30483] R13: 0000000000000000 R14: 00007fb4cc025fa0 R15: 00007fffa233dbf8 [ 652.547498][T30483] [ 652.559102][T30480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10239'. [ 652.746082][T30501] bridge0: port 3(vlan1) entered blocking state [ 652.752505][T30501] bridge0: port 3(vlan1) entered disabled state [ 652.759401][T30501] vlan1: entered allmulticast mode [ 652.765084][T30501] vlan1: left allmulticast mode [ 652.802830][T30503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 652.963659][T30505] ================================================================== [ 652.971873][T30505] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 652.978749][T30505] [ 652.981074][T30505] write to 0xffff8881047b7308 of 8 bytes by task 30504 on cpu 0: [ 652.988801][T30505] call_rcu+0x47/0x430 [ 652.992899][T30505] mas_wmb_replace+0xfbd/0x14d0 [ 652.997766][T30505] mas_wr_store_entry+0x1681/0x2d10 [ 653.002973][T30505] mas_store_prealloc+0x6bf/0x960 [ 653.008007][T30505] vma_complete+0x3a7/0x760 [ 653.012699][T30505] __split_vma+0x5d6/0x6a0 [ 653.017136][T30505] vma_modify+0xd3/0x1e0 [ 653.021393][T30505] vma_modify_flags+0xf1/0x120 [ 653.026259][T30505] mprotect_fixup+0x31a/0x5e0 [ 653.030953][T30505] do_mprotect_pkey+0x653/0x960 [ 653.035824][T30505] __x64_sys_mprotect+0x48/0x60 [ 653.040697][T30505] x64_sys_call+0x2770/0x2dc0 [ 653.045393][T30505] do_syscall_64+0xc9/0x1c0 [ 653.049903][T30505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.055818][T30505] [ 653.058148][T30505] read to 0xffff8881047b7308 of 8 bytes by task 30505 on cpu 1: [ 653.065784][T30505] mtree_range_walk+0x140/0x460 [ 653.070646][T30505] mas_walk+0x16e/0x320 [ 653.074810][T30505] lock_vma_under_rcu+0x95/0x260 [ 653.079850][T30505] exc_page_fault+0x150/0x650 [ 653.084544][T30505] asm_exc_page_fault+0x26/0x30 [ 653.089416][T30505] [ 653.091752][T30505] Reported by Kernel Concurrency Sanitizer on: [ 653.097907][T30505] CPU: 1 UID: 0 PID: 30505 Comm: syz.5.10248 Not tainted 6.12.0-syzkaller-10313-g7d4050728c83 #0 [ 653.108417][T30505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 653.118479][T30505] ==================================================================