last executing test programs:

5m17.641847894s ago: executing program 4 (id=6098):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfde0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800006, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040011)

5m17.608930214s ago: executing program 4 (id=6099):
ioperm(0x0, 0x5, 0x6)
r0 = memfd_create(&(0x7f0000000280)='%\x00', 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@nogrpid}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYBLOB="fd879eb4ca929f48bed276555fc2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x3000, 0x3, &(0x7f00002e2000/0x3000)=nil)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18)
close(r4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="f8ffffff0000000000000000690a7e2a37dd7145", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50)

5m17.080349901s ago: executing program 4 (id=6104):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000380), 0x1, 0x4ef, &(0x7f0000000b00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000000), 0x4)
socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5m16.844233871s ago: executing program 4 (id=6106):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000900)='./file0/../file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="917839d499e64f76104faedad61d81f37fd36bfdad83219f36b91762bf5882006f34bb0e02525605a350f031a377778e466e47d7026bf2d3fe327a56a9bb3f339f146194254bbe0b04db065583326018aa576e6a1458e2040f4d48b24904720acc8cfc49aa7acdf9a9d3203e4bb162c173293e0a1f0a", @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="c0f314c29fb6167cf7651bd83f5b1262dc85227ea82dc69cd48cafc126f8abfb0ad03833ecb6aa1fcfd72da185b96b7c31482fef9f8f7804d193a40801a7487b7bc082d4f57496e9e5c17de0505e5ba80164856de220ad", @ANYRESOCT, @ANYRES32=0x0], 0x2, 0x699, &(0x7f0000000d00)="$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") (async)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000900)='./file0/../file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="917839d499e64f76104faedad61d81f37fd36bfdad83219f36b91762bf5882006f34bb0e02525605a350f031a377778e466e47d7026bf2d3fe327a56a9bb3f339f146194254bbe0b04db065583326018aa576e6a1458e2040f4d48b24904720acc8cfc49aa7acdf9a9d3203e4bb162c173293e0a1f0a", @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="c0f314c29fb6167cf7651bd83f5b1262dc85227ea82dc69cd48cafc126f8abfb0ad03833ecb6aa1fcfd72da185b96b7c31482fef9f8f7804d193a40801a7487b7bc082d4f57496e9e5c17de0505e5ba80164856de220ad", @ANYRESOCT, @ANYRES32=0x0], 0x2, 0x699, &(0x7f0000000d00)="$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")
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000008c0), 0xc}, 0x9612, 0x2000, 0x0, 0x4, 0x6d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) (async)
r4 = perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000008c0), 0xc}, 0x9612, 0x2000, 0x0, 0x4, 0x6d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x7000000)
fcntl$setpipe(r5, 0x407, 0x100000) (async)
fcntl$setpipe(r5, 0x407, 0x100000)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x40000000, @mcast2, 0x28}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r7=>r3, {0x4}}, './file0\x00'})
bind$bt_sco(r7, &(0x7f0000000880)={0x1f, @none}, 0x8) (async)
bind$bt_sco(r7, &(0x7f0000000880)={0x1f, @none}, 0x8)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}}}}, 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x2805491, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x19901)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1081468, 0x0) (async)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1081468, 0x0)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000380)='v', 0x1}], 0x1) (async)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000380)='v', 0x1}], 0x1)
r8 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r8, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000580))
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5m16.69737859s ago: executing program 4 (id=6109):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)

5m14.768174182s ago: executing program 4 (id=6134):
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r1, r1)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090)

5m14.704986681s ago: executing program 32 (id=6134):
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r1, r1)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090)

4m47.317786547s ago: executing program 3 (id=6663):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc080)
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)

4m47.304156737s ago: executing program 3 (id=6666):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)

4m47.213341856s ago: executing program 3 (id=6668):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)

4m47.112808105s ago: executing program 3 (id=6671):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r2}, 0x18)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x40, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=@gettaction={0x160, 0x32, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52e}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x55}, 0x2)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xffffffff, 0xfffffffd, 0xfc, "0062ba7d82000000000000000000f7ffffff00"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup(r5)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
r8 = getuid()
quotactl_fd$Q_GETINFO(r7, 0xffffffff80000502, r8, &(0x7f0000000940))
fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', <r9=>0x0})
setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000280)={r9, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000f00)={@initdev, @initdev, <r10=>0x0}, &(0x7f0000000f40)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xf, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="f75a0100fcffffffb7080000000000007b8af8ff00000000b70800002b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000800004085000000a500"/24], &(0x7f0000000ac0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', r10, @fallback=0x3c, r3, 0x8, &(0x7f0000000f80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x7, 0xff, 0x3ff}, 0x10, 0x0, r0, 0xa, &(0x7f0000001040)=[r1, r3, r3], &(0x7f0000001080)=[{0x2, 0x4, 0x9}, {0x4, 0x2, 0x4, 0xc}, {0x0, 0x1, 0x2, 0x6}, {0x3, 0x5, 0x0, 0xc}, {0x4, 0x4, 0x7, 0x8}, {0x3, 0x2, 0xd, 0x6}, {0x1, 0x5, 0x8, 0x8}, {0x0, 0x3, 0x4, 0x7}, {0x1, 0x7f, 0x9, 0xb}, {0x2, 0x5, 0xd, 0x7}], 0x10, 0xfffffff9, @void, @value}, 0x94)
pipe(&(0x7f0000000080)={<r11=>0xffffffffffffffff})
r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = syz_pidfd_open(r12, 0x0)
splice(r11, 0x0, r13, 0x0, 0x5, 0xf)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)

4m46.862893862s ago: executing program 3 (id=6675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f00000004c0)=@ethtool_rxfh_indir={0x39}})
open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18)
socket$can_raw(0x1d, 0x3, 0x1)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0)

4m46.636605209s ago: executing program 3 (id=6680):
syz_open_dev$sg(&(0x7f0000000080), 0x9d, 0x408080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000007aed000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0xff, @private0, 0x81}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r7, 0x0, 0xfffffffff7fffffe}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

4m46.591123949s ago: executing program 33 (id=6680):
syz_open_dev$sg(&(0x7f0000000080), 0x9d, 0x408080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000007aed000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0xff, @private0, 0x81}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r7, 0x0, 0xfffffffff7fffffe}, 0x18)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3m36.432371046s ago: executing program 5 (id=8223):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000380), 0x1, 0x4ef, &(0x7f0000000b00)="$eJzs3c9vI1cdAPDvTOJNmqZNCpX4IaBLKSxotXbibaOqp3IBoaoSouLEIQ2JN4pix1HslCasRPZ/QKISJ/gTOCBxQNoTd25w47IckBZYLdogcTAae/KDbBx7s0lM7c9HGs28eeP5vrfWvOf9JvELYGRdj4i9iLgWER9GxEx+Psm3eLezZdc9eXR3ef/R3eUkWq0P/pG067Nzcew1mRfze05GxA++G/Hj5Om4jZ3d9aVqtbKVl0vN2mapsbN7a622tFpZrWyUywvzC3Nv336r3F9H0t6XvFb7zcPvrL33w9//7ssP/rj3rZ9mzZrO64734yJ1ul44jJMZj4j3LiPYAIzl/bk26IZwLtlj85mIeL39/M/EWPvd7M8pjzUA8CnQas1Ea+Z4GQAYdmk7B5akxTwXMB1pWix2cnivxlRarTeaN+/UtzdWOrmy2Sikd9aqlbk8VzgbhSQrz7ePj8rlE+XbEfFKRPx84oV2ubjcf54BALhYL56Y//810Zn/AYAhN9nrgsWraQcAcHV6zv8AwNAx/wPA6DH/A8DoMf8DwOgx/wPA6Mnn/7FBtwMAuBLff//9bGvt599/vfLRzvZ6/aNbK5XGerG2vVxcrm9tFlfr9dVqpbhcr/W6X7Ve35x/M7Y/LjUrjWapsbO7WKtvbzQX29/rvVgpXEmvAICzvPLa/T8nEbH3zgvtLY6t5WCuhuHWx7I5wJCS84fR5Vu4YXT5Pz7Qay3Prr8i/Mk5grV+do4XARftxhfk/2FUyf/D6JL/h9El/w+jq9VKuq35nx5eAgAMFTl+4Ep//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDYrq9JWkxXwt8OtK0WIx4KSJmo5DcWatW5iLi5Yj400RhIivPD7rRAMBzSv+W5Ot/3Zh5Y/pk7bXk3xPtfUT85Jcf/OLjpWZzaz47/8/D881P8vPlQbQfAOjlYJ4+mMcPPHl0d/lgu8r2PPx2Z3HRLO5+vnVqxmO8vZ+MQkRMPU7yckf2eWXsAuLvrUTE50/rf9LOjcx2Vj4tdFp0JIv90kXEv9dX/Jh6nP5P/LRd19ln/xaffYaYvdZ6hVFxPxt/3j3t+Uvjens/eerix5MnxoPzOhj/9p8a/9LD8W+sy/h3vd8Yb/7he13r7kV8cfy0+Mlh/KRL/Df6jP+XL33l9W51rV9F3IjT4x+PVWrWNkuNnd1ba7Wl1cpqZaNcXphfmHv79lvlUjtHXTrIVD/t7+/cfPms/k91iT/Zo/9fP7PXrYmDo1//58MfffWM+N/82unv/6tnxM8mpG+cGf/I0tRvuy7fncVf6fT/3rO+/zf7jP/gr7srfV4KAFyBxs7u+lK1Wtm60INCXPANjx0kl9RmB0N+kH0ef977fC5Pmf0fdOeyDwY9MgGX7eihH3RLAAAAAAAAAAAAAACAbi79z4nSQfcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYfbfAAAA//9vwMkV")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000000), 0x4)
r3 = socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1)
write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb6b9}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
listen(r0, 0x0)

3m36.244347274s ago: executing program 5 (id=8227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[], 0x1040}}, 0x0)

3m36.202449724s ago: executing program 5 (id=8229):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0)

3m36.127365782s ago: executing program 5 (id=8232):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = io_uring_setup(0x1ddf, &(0x7f0000000a00)={0x0, 0x7068, 0x1})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
semop(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0xa}, 0x8)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400009, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@quota}, {@data_err_abort}, {@acl}, {@nombcache}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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")
r7 = fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbfs(0x0, 0x77, 0x141341)
ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r3, 0x406, r4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r9, 0x0, 0x5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)

3m35.84371122s ago: executing program 5 (id=8241):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000380), 0x1, 0x4ef, &(0x7f0000000b00)="$eJzs3c9vI1cdAPDvTOJNmqZNCpX4IaBLKSxotXbibaOqp3IBoaoSouLEIQ2JN4pix1HslCasRPZ/QKISJ/gTOCBxQNoTd25w47IckBZYLdogcTAae/KDbBx7s0lM7c9HGs28eeP5vrfWvOf9JvELYGRdj4i9iLgWER9GxEx+Psm3eLezZdc9eXR3ef/R3eUkWq0P/pG067Nzcew1mRfze05GxA++G/Hj5Om4jZ3d9aVqtbKVl0vN2mapsbN7a622tFpZrWyUywvzC3Nv336r3F9H0t6XvFb7zcPvrL33w9//7ssP/rj3rZ9mzZrO64734yJ1ul44jJMZj4j3LiPYAIzl/bk26IZwLtlj85mIeL39/M/EWPvd7M8pjzUA8CnQas1Ea+Z4GQAYdmk7B5akxTwXMB1pWix2cnivxlRarTeaN+/UtzdWOrmy2Sikd9aqlbk8VzgbhSQrz7ePj8rlE+XbEfFKRPx84oV2ubjcf54BALhYL56Y//810Zn/AYAhN9nrgsWraQcAcHV6zv8AwNAx/wPA6DH/A8DoMf8DwOgx/wPA6Mnn/7FBtwMAuBLff//9bGvt599/vfLRzvZ6/aNbK5XGerG2vVxcrm9tFlfr9dVqpbhcr/W6X7Ve35x/M7Y/LjUrjWapsbO7WKtvbzQX29/rvVgpXEmvAICzvPLa/T8nEbH3zgvtLY6t5WCuhuHWx7I5wJCS84fR5Vu4YXT5Pz7Qay3Prr8i/Mk5grV+do4XARftxhfk/2FUyf/D6JL/h9El/w+jq9VKuq35nx5eAgAMFTl+4Ep//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDYrq9JWkxXwt8OtK0WIx4KSJmo5DcWatW5iLi5Yj400RhIivPD7rRAMBzSv+W5Ot/3Zh5Y/pk7bXk3xPtfUT85Jcf/OLjpWZzaz47/8/D881P8vPlQbQfAOjlYJ4+mMcPPHl0d/lgu8r2PPx2Z3HRLO5+vnVqxmO8vZ+MQkRMPU7yckf2eWXsAuLvrUTE50/rf9LOjcx2Vj4tdFp0JIv90kXEv9dX/Jh6nP5P/LRd19ln/xaffYaYvdZ6hVFxPxt/3j3t+Uvjens/eerix5MnxoPzOhj/9p8a/9LD8W+sy/h3vd8Yb/7he13r7kV8cfy0+Mlh/KRL/Df6jP+XL33l9W51rV9F3IjT4x+PVWrWNkuNnd1ba7Wl1cpqZaNcXphfmHv79lvlUjtHXTrIVD/t7+/cfPms/k91iT/Zo/9fP7PXrYmDo1//58MfffWM+N/82unv/6tnxM8mpG+cGf/I0tRvuy7fncVf6fT/3rO+/zf7jP/gr7srfV4KAFyBxs7u+lK1Wtm60INCXPANjx0kl9RmB0N+kH0ef977fC5Pmf0fdOeyDwY9MgGX7eihH3RLAAAAAAAAAAAAAACAbi79z4nSQfcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYfbfAAAA//9vwMkV")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000000), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1)
write$binfmt_elf32(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb6b9}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
listen(r0, 0x0)

3m35.690715488s ago: executing program 5 (id=8247):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@stripe={'stripe', 0x3d, 0x8}}, {@data_ordered}, {@nodiscard}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

3m35.652205907s ago: executing program 34 (id=8247):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@stripe={'stripe', 0x3d, 0x8}}, {@data_ordered}, {@nodiscard}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r4 = syz_open_pts(r0, 0x0)
dup3(r4, r0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')

2.783871043s ago: executing program 0 (id=14777):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x1, 0x522, &(0x7f0000000a80)="$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")
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, 0x0, 0x20000004)

2.004532804s ago: executing program 7 (id=14817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x3e0000)

1.982068713s ago: executing program 7 (id=14818):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001300050000000000000000000000000026dd4c4f373ff44c26ad5e75af91488f9699a2af03e8e2622e68db01b8cb355d012308045675b2daf5863b477ddcd5942dd74f28c1a49f08c597248067c7195ecf9aa1b7e0b60a69ce920cbe68939d3290bfe5b55a5d1fea0d39e758855515780cd8ab2bd70dd104ea02ef1cf3a6931cb575f90d27eb2dad1c0b98f9773576f9945a4702073adf9187770300911d98bff52c50bb35c62c15c6afb9fbf6cf360ec3fc7be2062d2295f2c19197cdbb48515afe1abdb7875ed764f7d148a5411a5a59451c9b41c1c913253bd351383c16bb2524348867352d5176456f251f2f76562506", @ANYRES32=0x0], 0x40}}, 0x0)

1.848610112s ago: executing program 0 (id=14821):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
r1 = add_key(&(0x7f0000000700)='cifs.spnego\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000d00), 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r1)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x2100, 0x0, 0x0, 0x0, 0x0, 0xffff24ed}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20)

1.809033222s ago: executing program 7 (id=14824):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)

1.783177301s ago: executing program 0 (id=14825):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r0}, 0x18)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
mount$9p_tcp(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d307830303030624ea4c68fabef5ea808f8065d253030303030303030346532332c70726976706f72742c6c6f6fd8289279526cc012ffaa492bfe1edbfb6a39a46709654ba0700ae99fbb355ecbcf46f716bb8540c463891319df3f26b6be633f560cb57f64e6db156e3915015a8ee9287dbce0c9cdd233bab3cb5310", @ANYRESDEC, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00'])

1.782902861s ago: executing program 7 (id=14826):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x6, &(0x7f0000000400)=[{0x2, 0x0, 0xf, 0xff}, {0x4, 0x81, 0x2, 0x8}, {0x6, 0x2, 0x0, 0x489fe4c3}, {0x9, 0x6, 0xc1, 0x4}, {0x7, 0x3, 0x7, 0x1000}, {0x7, 0xd6, 0xcc, 0x28a}]})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x3, 0x35b, &(0x7f0000000980)="$eJzs3c9rI2UYwPEn2Wx+LdvkIIqC9EEvehna6FkNsgtiwKW7EXcFYXY70ZDZpMyESkRsPXkVb/4Dgsse97ag/gO9eFsvXrz1siBoEXFkfrX5MUmaNCXt9vuBkmfyvs9k3sw0PG9g3ux/9O39VsM1GmZX0nmVlIjIgUhZ0hJLRY/pIM5Kv115/cqfT16+efvO+9Va7dqG6vXqrTcqqrqy+tPnXxaibo9zslf+ZP9p5Y+95/de3P/v1mdNV5uutjtdNfVu5/euede2dLPptgzVG7ZlupY2267lhO2dsL1hd7a2emq2N68WtxzLddVs97Rl9bTb0a7TU/NTs9lWwzD0alEulnwcXDp+Tv3BxoZZnfMF782Zh0X7x/O8Cc2OUzUviRiFkZb6g1M9LgAAcCYN1f/fxzVCWdKHBWVqYC4wWv/HcVD/+5OFo/r/4Su/dK98+Gglqv8fZ5Pq/zd/C/MH6n//1Rde//84tD1aEZ17O7N0PlH9j7NhNTvyVGpgy6//i8H8/X74j/z1xw/XgoD6HwAAAAAAAAAAAAAAAAAAAACA8+DA80qe55Xix/jv6BaCaDvemnSjMc6dcec/F60ocHg94Jl08/YdyQc37mVWROxvtuvb9fAxao87rklJ/g2uh0i44MRu0Ki+svxs70T5O9v1cBmKqoiKLZasS0nKA/lBfP292rV1DQ3mpzJFP78hzSC/IiV5Ljm/kpifldde7cs3pCS/3pOO2LIZfY7F+V+tq777QW0ovxD0S/L26Z8WAAAAAAAWylDNR9PnxPm7Yagmtftzeemfn49+P3A4v15LnJ9nSi9lljt2AAAAAAAuCjf7Rcu0bctxe2ODgkzrk4v2Nnk/yUFmls5+8CQILk/q0/8TGMfdczb6BY0ZDl5mG6lp23/lJPHNjJdwHWjKn+BdNe14/MfonJ/1FDhuevaxW4676h+PzjWcviD+2mhcH7kx757HBfH619M6v/DdD3/P9xKpaNXe/qa3HuWnjDQIUkPP7E65aJ963tTjuXyanzkAAAAAliMu+gtu/Mw7yz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuoIUukzYmWPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLPi/wAAAP//oVL41A==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000001c0)=""/184, 0xb8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000501000000000000000000b4006b000000000000285d5b3a331a5fa6a5cba181af3041c8e4a859c5b16e76c0faadfaa10cae1a16bb68be5ed9976a50dc9e1cbc4495ef470ce2a2f5aecdcef2fa18b106e549293049adf42657f34a94b09c56eac79ec1ee62d420792b08c2a22e5d781156de72cbce7e3c701a1f027d3a9f633adc76ab2247b944451ade7b0575c71769925e1bc91f2fa65fc7edd3f56fa5b49e4aa6c987f5c186be6d3220dd0337821b7d335c96390f1f7f94681f1f62b4ead29748ada5e0af44bbec8bbeeb265b16c03ab5b4e33df272353a004e00"/232, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x7, 0x6, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18c77e07dd3ca811a90000000000e0cc18110000", @ANYBLOB="50914ddc783317428ade2c67b2aa958b3d456fe78f4d63962863ba517d2f975425968ebaa75e92550e0f71349ffeb353a76caabe3f2fdad91a63db7e88ebcdb7bebfd4f65bbf0bc8eb8783490af80f4d344640b09a8860249115d7b805afd67c23da89320820a40bf37baa3bbb266c08d708e87ecad90000000000", @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = semget$private(0x0, 0x3, 0x0)
semop(r4, &(0x7f0000000240)=[{0x0, 0x8002, 0x1000}], 0x1)
semop(r4, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1)
semop(r4, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2)
semop(r4, &(0x7f0000000380)=[{0x0, 0x6}, {0x3, 0xc, 0x1000}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r5 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r6, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, &(0x7f00000003c0)={[0x8001a0fffbfffc]}, 0x8)
dup2(r6, r7)
fcntl$setown(r7, 0x8, r5)
tkill(r5, 0x13)

1.313249976s ago: executing program 1 (id=14842):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r6 = dup(r5)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
write$binfmt_aout(r4, 0x0, 0x28)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000190a01"], 0x20}}, 0x400c0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r9 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r9)
r10 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r10)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

1.292769105s ago: executing program 1 (id=14843):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
brk(0x20001000)

1.273293415s ago: executing program 1 (id=14844):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
socket$kcm(0x2, 0x3, 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, 0xffffffffffffffff, 0x2000)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
munlockall()
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000200)={0x6, &(0x7f00000002c0)=[{0x5, 0x1, 0x1, 0xa}, {0x2, 0x37, 0x81, 0x3ff}, {0xe, 0x2, 0x1, 0x401}, {0x7, 0xfb, 0x40, 0x6}, {0x2, 0x81, 0xb, 0x40}, {0x5, 0xfb, 0x10, 0x3}]})
r3 = socket$key(0xf, 0x3, 0x2)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x21000)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read(r4, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYRES16=r5, @ANYRES16=r0, @ANYRESOCT, @ANYRES8=r3, @ANYRES16=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0xaa1414ac})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
recvmmsg(r3, 0x0, 0x0, 0x10000, 0x0)
utimes(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x50)

908.655591ms ago: executing program 7 (id=14856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7fff, 0x0, 0x0, 0x200}, {0x4, 0x0, 0x0, 0xa7b}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgroups(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000932840810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x5)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'erspan0\x00', 0x0})
fcntl$notify(r3, 0x402, 0x8000002d)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)

895.861341ms ago: executing program 0 (id=14857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7fff, 0x0, 0x0, 0x200}, {0x4, 0x0, 0x0, 0xa7b}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgroups(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000932840810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x5)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'erspan0\x00', 0x0})
fcntl$notify(r3, 0x402, 0x8000002d)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)

726.252359ms ago: executing program 2 (id=14861):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x800, 0xc8, 0x0, 0x2, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000580), &(0x7f0000000600)=0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10)
prctl$PR_SET_THP_DISABLE(0x41, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xb)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8001, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa27c0c433bb4e2886dd6409a3ca00203afffc020000000000000000000000000001fe8000000000000000000000000000bb2c00000500000000830090780005b1f6fe8000000000000000000000000000aaaefde698ee32c07964e35cf9b430d2773e8f2c38a78589164f04d6e319f94911d96f6afe89000000fe034f99f2bddeb2eafbef00000000005c419879b4b8277876be3f1f0e2742e18d301219f780fb1e6ad4c382039749f296b25152527f0952c5988e5c00"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00'}, 0x18)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r9}, 0x8)
close(r10)

696.100579ms ago: executing program 2 (id=14862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

670.716818ms ago: executing program 2 (id=14863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x3}}}, 0x24}}, 0x0)

597.244257ms ago: executing program 6 (id=14866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x291c, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f2, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x0)

544.358017ms ago: executing program 2 (id=14867):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r0}, 0x10)
mknod(0x0, 0x8001420, 0x0)
mount$9p_tcp(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d307830303030624ea4c68fabef5ea808f8065d253030303030303030346532332c70726976706f72742c6c6f6fd8289279526cc012ffaa492bfe1edbfb6a39a46709654ba0700ae99fbb355ecbcf46f716bb8540c463891319df3f26b6be633f560cb57f64e6db156e3915015a8ee9287dbce0c9cdd233bab3cb5310", @ANYRESDEC, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00'])

543.825477ms ago: executing program 6 (id=14868):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
creat(&(0x7f0000000300)='./control\x00', 0xc4)
openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nouid32}]}, 0x1, 0x3e2, &(0x7f0000000c80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x3}, 0x3}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, 0x1, {[0x0, 0x3, 0x8, 0x6, 0x8, 0x3, 0x800, 0x7]}}, 0x5c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0xff}}, './file0\x00'})
recvmsg$inet_nvme(r2, &(0x7f00000003c0)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/236, 0xec}, {0x0}], 0x3, &(0x7f0000000480)=""/121, 0x79}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x41, 0x41, 0x6, [@float={0x7, 0x0, 0x0, 0x10, 0x8}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x5, 0x1}], "9b"}, @var={0x3, 0x0, 0x0, 0xe, 0x2}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x61, 0x61, 0x0]}}, &(0x7f0000000600)=""/175, 0x62, 0xaf, 0x0, 0x81, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r3}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0xfffffffa, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={0x0, r4}, 0x18)
socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x1, &(0x7f00000002c0)=@raw=[@generic={0x9d, 0x3, 0x8, 0x5, 0x8}], &(0x7f0000000880)='syzkaller\x00', 0x200, 0x49, &(0x7f00000008c0)=""/73, 0x41000, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xe, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
syz_emit_ethernet(0x112, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"/274], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x82, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

541.482457ms ago: executing program 2 (id=14869):
fsopen(0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc)
close(r0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

516.896367ms ago: executing program 2 (id=14870):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x6, &(0x7f0000000400)=[{0x2, 0x0, 0xf, 0xff}, {0x4, 0x81, 0x2, 0x8}, {0x6, 0x2, 0x0, 0x489fe4c3}, {0x9, 0x6, 0xc1, 0x4}, {0x7, 0x3, 0x7, 0x1000}, {0x7, 0xd6, 0xcc, 0x28a}]})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x3, 0x35b, &(0x7f0000000980)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000001c0)=""/184, 0xb8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000501000000000000000000b4006b000000000000285d5b3a331a5fa6a5cba181af3041c8e4a859c5b16e76c0faadfaa10cae1a16bb68be5ed9976a50dc9e1cbc4495ef470ce2a2f5aecdcef2fa18b106e549293049adf42657f34a94b09c56eac79ec1ee62d420792b08c2a22e5d781156de72cbce7e3c701a1f027d3a9f633adc76ab2247b944451ade7b0575c71769925e1bc91f2fa65fc7edd3f56fa5b49e4aa6c987f5c186be6d3220dd0337821b7d335c96390f1f7f94681f1f62b4ead29748ada5e0af44bbec8bbeeb265b16c03ab5b4e33df272353a004e00"/232, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x7, 0x6, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18c77e07dd3ca811a90000000000e0cc18110000", @ANYBLOB="50914ddc783317428ade2c67b2aa958b3d456fe78f4d63962863ba517d2f975425968ebaa75e92550e0f71349ffeb353a76caabe3f2fdad91a63db7e88ebcdb7bebfd4f65bbf0bc8eb8783490af80f4d344640b09a8860249115d7b805afd67c23da89320820a40bf37baa3bbb266c08d708e87ecad90000000000", @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = semget$private(0x0, 0x3, 0x0)
semop(r4, &(0x7f0000000240)=[{0x0, 0x8002, 0x1000}], 0x1)
semop(r4, &(0x7f0000000100)=[{0x0, 0xd5db}], 0x1)
semop(r4, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2)
semop(r4, &(0x7f0000000380)=[{0x0, 0x6}, {0x3, 0xc, 0x1000}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r5 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r6, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, &(0x7f00000003c0)={[0x8001a0fffbfffc]}, 0x8)
dup2(r6, r7)
fcntl$setown(r7, 0x8, r5)
tkill(r5, 0x13)

363.338955ms ago: executing program 6 (id=14871):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sync()

284.485794ms ago: executing program 6 (id=14872):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
accept(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b645486ec9d43c287ffb33e41b5b69", 0xe8}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x10}}], 0x50, 0x84}}], 0x4, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60)
mlockall(0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, &(0x7f00000002c0))

115.325602ms ago: executing program 1 (id=14873):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x800, 0xc8, 0x0, 0x2, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000580), &(0x7f0000000600)=0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10)
prctl$PR_SET_THP_DISABLE(0x41, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xb)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8001, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa27c0c433bb4e2886dd6409a3ca00203afffc020000000000000000000000000001fe8000000000000000000000000000bb2c00000500000000830090780005b1f6fe8000000000000000000000000000aaaefde698ee32c07964e35cf9b430d2773e8f2c38a78589164f04d6e319f94911d96f6afe89000000fe034f99f2bddeb2eafbef00000000005c419879b4b8277876be3f1f0e2742e18d301219f780fb1e6ad4c382039749f296b25152527f0952c5988e5c00"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00'}, 0x18)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0xb, &(0x7f0000000340)={r9}, 0x8)

105.608842ms ago: executing program 6 (id=14874):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xe78, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = add_key(&(0x7f0000000700)='cifs.spnego\x00', &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000d00)="e4f590bf21d71604e60135c8f4827b66f9a6316c016cd450148fd230c60983ca5f60696da6e08426e5aa098f763082075bf8", 0x32, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000080), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000680)="4bcb3e2fc88bf64a82cd2abc6273029502fd5fec038ba7c70156cdc3981dcee8dfbf568eaec6920ec050576d7ba7952855a39634ab35003f713c2d7847c06146c21c46d6d1e34a5310fa29e081e557a5a7bb74bf5afa9f039903812e9132c64b75967e330c85a26ba3678e312bfda665e6116cd6fcd045470bc70f947c", 0x7d, r2)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x2100, 0x0, 0x0, 0x0, 0x0, 0xffff24ed}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu<-0\t||')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYBLOB="761db0d242da0e645f43b9bf88b2fd6d38fb4e94a12ebb15314b9d1b543c9792d931d7ede458aec3ceadc1cf672eeef542ca7ca138ad877c3a695b2799dbdaa496d8e72a1723f509618fcea76e9f32f7c4862a1c24f1f2e4ea8b6a4cc41e84764862844914878cc299baa05abae725b643f5406098b7f9eec6dd658afc1fa34bdb6bbcfecf7eb1ece401df5c7bd679d553f41fa20664405196ec83c1dab61918b5bb39b76751f6a848d42fe6e6a373e66ba94359562253ee859d357af8", @ANYRES8=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a9a9bb95330000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f740000000c0a01080000000000000000010000000900020073797a32000000004800038044000080080003400000000238000b80200001800c000100632f756e74657200100002800c0001400000000000000008140001800a0001007103977461000000040002800900010073797a30000000001400000010000100000000000000000095190297474a42e5aa40dc54a1d5dca48745e733630467c5f4346b97e436cf6a24224e45b8a9fee978ac85b767279c548729ec845d86c3475de46928d5cba93aedaf15a428ed4ff7cf61e43d7fe7ef9987d0d2d6b2003c567da3fc5d5acb7d60c5b024934d11d338a60d39a280311a357ddd870c8b0532d8699f77652aec24ac6475"], 0xf8}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
chmod(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="95", 0x1, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x7fff, 0x0, 0x204, 0xfb7, 0xa000, 0x7ff, 0x0, 0x6}, &(0x7f0000000080)=0x20)

83.175571ms ago: executing program 1 (id=14875):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c)
r5 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2)
r6 = dup(r5)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
write$binfmt_aout(r4, 0x0, 0x28)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000190a01"], 0x20}}, 0x400c0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r9 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r9)
r10 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r10)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

38.003761ms ago: executing program 0 (id=14876):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4)
write(0xffffffffffffffff, &(0x7f0000000180)="01", 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

36.388761ms ago: executing program 1 (id=14877):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

31.509351ms ago: executing program 6 (id=14878):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_open_dev$usbfs(&(0x7f00000002c0), 0xe38, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000001}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000300))
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r2, 0x3}, 0xc)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x100000000000000)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
io_uring_enter(r5, 0x20b9, 0x9e4e, 0x2, &(0x7f00000001c0)={[0x2]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
syz_open_dev$usbfs(&(0x7f00000002c0), 0xe38, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000001}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) (async)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async)
fcntl$setlease(r1, 0x400, 0x0) (async)
fcntl$setlease(r4, 0x400, 0x1) (async)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r2, 0x3}, 0xc) (async)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x100000000000000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async)
io_uring_enter(r5, 0x20b9, 0x9e4e, 0x2, &(0x7f00000001c0)={[0x2]}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)

27.62128ms ago: executing program 7 (id=14879):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000048000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000840)='kmem_cache_free\x00', r0}, 0x10)
mknod(0x0, 0x8001420, 0x0)
mount$9p_tcp(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d307830303030624ea4c68fabef5ea808f8065d253030303030303030346532332c70726976706f72742c6c6f6fd8289279526cc012ffaa492bfe1edbfb6a39a46709654ba0700ae99fbb355ecbcf46f716bb8540c463891319df3f26b6be633f560cb57f64e6db156e3915015a8ee9287dbce0c9cdd233bab3cb5310", @ANYRESDEC, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00'])

0s ago: executing program 0 (id=14880):
fsopen(0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc)
close(r0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

faulting to 1000
[  845.557458][ T7733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7733 comm=syz.7.13006
[  845.570194][ T7733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7733 comm=syz.7.13006
[  845.756084][ T3385] tipc: Node number set to 2886997007
[  845.806280][ T7747] lo speed is unknown, defaulting to 1000
[  845.972925][   T29] kauditd_printk_skb: 1437 callbacks suppressed
[  845.972945][   T29] audit: type=1326 audit(14127169.009:115185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.003292][   T29] audit: type=1326 audit(14127169.009:115186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.026912][   T29] audit: type=1326 audit(14127169.009:115187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.050634][   T29] audit: type=1326 audit(14127169.009:115188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.074264][   T29] audit: type=1326 audit(14127169.009:115189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.098030][   T29] audit: type=1326 audit(14127169.009:115190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.121623][   T29] audit: type=1326 audit(14127169.009:115191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.145330][   T29] audit: type=1326 audit(14127169.009:115192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.169287][   T29] audit: type=1326 audit(14127169.009:115193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.193065][   T29] audit: type=1326 audit(14127169.009:115194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7754 comm="syz.1.13015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  846.415205][ T7778] FAULT_INJECTION: forcing a failure.
[  846.415205][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.428611][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.6.13024 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  846.428745][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  846.428807][ T7778] Call Trace:
[  846.428815][ T7778]  <TASK>
[  846.428822][ T7778]  dump_stack_lvl+0xf2/0x150
[  846.428855][ T7778]  dump_stack+0x15/0x1a
[  846.428881][ T7778]  should_fail_ex+0x24a/0x260
[  846.428920][ T7778]  should_fail+0xb/0x10
[  846.429001][ T7778]  should_fail_usercopy+0x1a/0x20
[  846.429191][ T7778]  _copy_from_user+0x1c/0xa0
[  846.429218][ T7778]  move_addr_to_kernel+0x82/0x120
[  846.429247][ T7778]  __sys_sendto+0x12e/0x230
[  846.429290][ T7778]  __x64_sys_sendto+0x78/0x90
[  846.429342][ T7778]  x64_sys_call+0x29fa/0x2dc0
[  846.429373][ T7778]  do_syscall_64+0xc9/0x1c0
[  846.429401][ T7778]  ? clear_bhb_loop+0x55/0xb0
[  846.429428][ T7778]  ? clear_bhb_loop+0x55/0xb0
[  846.429495][ T7778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.429561][ T7778] RIP: 0033:0x7f6456c0cda9
[  846.429596][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  846.429620][ T7778] RSP: 002b:00007f6455277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  846.429642][ T7778] RAX: ffffffffffffffda RBX: 00007f6456e25fa0 RCX: 00007f6456c0cda9
[  846.429657][ T7778] RDX: 000000000000000e RSI: 00000000200002c0 RDI: 0000000000000004
[  846.429672][ T7778] RBP: 00007f6455277090 R08: 00000000200000c0 R09: 0000000000000014
[  846.429686][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  846.429700][ T7778] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  846.429719][ T7778]  </TASK>
[  846.873958][ T7788] lo speed is unknown, defaulting to 1000
[  846.882516][ T7805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7805 comm=syz.7.13035
[  846.895251][ T7805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7805 comm=syz.7.13035
[  847.078098][ T7811] lo speed is unknown, defaulting to 1000
[  847.244831][ T7832] __nla_validate_parse: 18 callbacks suppressed
[  847.244853][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13046'.
[  847.581147][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13061'.
[  847.752281][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13067'.
[  847.826793][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13070'.
[  847.984366][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13076'.
[  848.077946][ T7909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7909 comm=syz.0.13080
[  848.090609][ T7909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7909 comm=syz.0.13080
[  848.132790][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13079'.
[  848.164397][ T7913] bridge0: port 3(batadv1) entered blocking state
[  848.171276][ T7913] bridge0: port 3(batadv1) entered disabled state
[  848.210552][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13085'.
[  848.242227][ T7913] batadv1: entered allmulticast mode
[  848.249893][ T7913] batadv1: entered promiscuous mode
[  848.268318][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13087'.
[  848.556635][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13098'.
[  848.675656][ T5524] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  848.684060][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13106'.
[  848.684892][ T5524] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  848.699069][ T7974] bridge0: port 4(batadv2) entered blocking state
[  848.709803][ T7974] bridge0: port 4(batadv2) entered disabled state
[  848.719990][ T7974] batadv2: entered allmulticast mode
[  848.727518][ T7974] batadv2: entered promiscuous mode
[  849.009095][ T8017] 9pnet_fd: p9_fd_create_tcp (8017): problem connecting socket to 127.0.0.1
[  849.126736][ T8045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8045 comm=syz.1.13132
[  849.139539][ T8045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8045 comm=syz.1.13132
[  849.205859][ T2485] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  849.215159][ T2485] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  849.233863][ T8061] .: renamed from bond0 (while UP)
[  849.241372][ T8061] cgroup: noprefix used incorrectly
[  850.060761][ T8142] 9pnet_fd: p9_fd_create_tcp (8142): problem connecting socket to 127.0.0.1
[  850.193737][ T8156] bridge0: port 4(batadv2) entered blocking state
[  850.200356][ T8156] bridge0: port 4(batadv2) entered disabled state
[  850.211303][ T8156] batadv2: entered allmulticast mode
[  850.217325][ T8156] batadv2: entered promiscuous mode
[  850.600465][ T8177] macvlan3: entered promiscuous mode
[  850.612415][ T8177] bridge0: port 3(macvlan3) entered blocking state
[  850.619220][ T8177] bridge0: port 3(macvlan3) entered disabled state
[  850.626217][ T8177] macvlan3: entered allmulticast mode
[  850.631669][ T8177] bridge0: entered allmulticast mode
[  850.646903][ T8177] macvlan3: left allmulticast mode
[  850.652077][ T8177] bridge0: left allmulticast mode
[  850.695492][ T5524] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  850.704800][ T5524] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  850.984750][   T29] kauditd_printk_skb: 1552 callbacks suppressed
[  850.984765][   T29] audit: type=1326 audit(14127174.019:116747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.6.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6456c03d67 code=0x7ffc0000
[  851.015239][   T29] audit: type=1326 audit(14127174.019:116748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.6.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6456ba8fa9 code=0x7ffc0000
[  851.039787][   T29] audit: type=1326 audit(14127174.019:116749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.6.13174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  851.063538][   T29] audit: type=1326 audit(14127174.019:116750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.087076][   T29] audit: type=1326 audit(14127174.019:116751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.111037][   T29] audit: type=1326 audit(14127174.019:116752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.134672][   T29] audit: type=1326 audit(14127174.019:116753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.158445][   T29] audit: type=1326 audit(14127174.019:116754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.182081][   T29] audit: type=1326 audit(14127174.019:116755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.205700][   T29] audit: type=1326 audit(14127174.019:116756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8209 comm="syz.1.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  851.528125][ T8249] bridge0: port 3(batadv3) entered blocking state
[  851.534618][ T8249] bridge0: port 3(batadv3) entered disabled state
[  851.558536][ T8249] batadv3: entered allmulticast mode
[  851.571119][ T8249] batadv3: entered promiscuous mode
[  851.706094][ T8264] lo speed is unknown, defaulting to 1000
[  851.901668][ T8292] bridge0: port 5(batadv3) entered blocking state
[  851.908376][ T8292] bridge0: port 5(batadv3) entered disabled state
[  851.921154][ T8292] batadv3: entered allmulticast mode
[  851.928023][ T8292] batadv3: entered promiscuous mode
[  851.954124][ T8296] bridge0: entered promiscuous mode
[  851.959705][ T8296] macvlan2: entered promiscuous mode
[  851.966655][ T8296] bridge0: port 3(macvlan2) entered blocking state
[  851.973222][ T8296] bridge0: port 3(macvlan2) entered disabled state
[  851.981289][ T8296] macvlan2: entered allmulticast mode
[  851.986858][ T8296] bridge0: entered allmulticast mode
[  852.005518][ T8296] macvlan2: left allmulticast mode
[  852.010807][ T8296] bridge0: left allmulticast mode
[  852.025353][T31613] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  852.034640][T31613] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  852.045037][ T8296] bridge0: left promiscuous mode
[  852.280982][ T8334] bond0: entered promiscuous mode
[  852.286250][ T8334] bond0: entered allmulticast mode
[  852.300554][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0
[  852.326282][ T8334] bond0 (unregistering): Released all slaves
[  852.390012][ T8349] __nla_validate_parse: 12 callbacks suppressed
[  852.390033][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13253'.
[  852.396454][T31613] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  852.414737][T31613] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  852.835394][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13273'.
[  852.850474][ T8393] bridge0: port 3(batadv2) entered blocking state
[  852.857064][ T8393] bridge0: port 3(batadv2) entered disabled state
[  852.863771][ T8393] batadv2: entered allmulticast mode
[  852.870098][ T8393] batadv2: entered promiscuous mode
[  853.167379][ T8422] netlink: 'syz.6.13285': attribute type 1 has an invalid length.
[  853.175402][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13285'.
[  853.211815][ T8426] Cannot find set identified by id 632 to match
[  853.230202][ T8426] netlink: 876 bytes leftover after parsing attributes in process `syz.1.13286'.
[  853.246661][ T8426] netlink: 876 bytes leftover after parsing attributes in process `syz.1.13286'.
[  853.262826][ T3385] IPVS: starting estimator thread 0...
[  853.296027][ T8426] netlink: 'syz.1.13286': attribute type 1 has an invalid length.
[  853.304087][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13286'.
[  853.335491][ T8440] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13289'.
[  853.355403][ T8433] IPVS: using max 2304 ests per chain, 115200 per kthread
[  853.355820][ T8432] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.13289'.
[  853.363489][T31606] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  853.381536][T31606] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  854.051783][ T8493] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  854.073731][ T8493] macvlan3: entered promiscuous mode
[  854.083177][ T8493] bridge0: port 4(macvlan3) entered blocking state
[  854.089887][ T8493] bridge0: port 4(macvlan3) entered disabled state
[  854.096668][ T8493] macvlan3: entered allmulticast mode
[  854.102136][ T8493] bridge0: entered allmulticast mode
[  854.122232][ T8493] macvlan3: left allmulticast mode
[  854.127464][ T8493] bridge0: left allmulticast mode
[  854.445203][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13328'.
[  854.764757][ T8572] FAULT_INJECTION: forcing a failure.
[  854.764757][ T8572] name failslab, interval 1, probability 0, space 0, times 0
[  854.777542][ T8572] CPU: 1 UID: 0 PID: 8572 Comm: syz.6.13342 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  854.777566][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  854.777647][ T8572] Call Trace:
[  854.777653][ T8572]  <TASK>
[  854.777661][ T8572]  dump_stack_lvl+0xf2/0x150
[  854.777694][ T8572]  dump_stack+0x15/0x1a
[  854.777718][ T8572]  should_fail_ex+0x24a/0x260
[  854.777750][ T8572]  should_failslab+0x8f/0xb0
[  854.777822][ T8572]  kmem_cache_alloc_noprof+0x52/0x320
[  854.777907][ T8572]  ? audit_log_start+0x34c/0x6b0
[  854.777945][ T8572]  audit_log_start+0x34c/0x6b0
[  854.778025][ T8572]  audit_seccomp+0x4b/0x130
[  854.778057][ T8572]  __seccomp_filter+0x6fa/0x1180
[  854.778079][ T8572]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  854.778108][ T8572]  ? vfs_write+0x644/0x920
[  854.778200][ T8572]  __secure_computing+0x9f/0x1c0
[  854.778227][ T8572]  syscall_trace_enter+0xd1/0x1f0
[  854.778256][ T8572]  ? fpregs_assert_state_consistent+0x83/0xa0
[  854.778366][ T8572]  do_syscall_64+0xaa/0x1c0
[  854.778402][ T8572]  ? clear_bhb_loop+0x55/0xb0
[  854.778433][ T8572]  ? clear_bhb_loop+0x55/0xb0
[  854.778463][ T8572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.778564][ T8572] RIP: 0033:0x7f6456c0cda9
[  854.778583][ T8572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  854.778605][ T8572] RSP: 002b:00007f6455277038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  854.778628][ T8572] RAX: ffffffffffffffda RBX: 00007f6456e25fa0 RCX: 00007f6456c0cda9
[  854.778654][ T8572] RDX: 0000000020000000 RSI: 0000000000000002 RDI: 0000000000000016
[  854.778665][ T8572] RBP: 00007f6455277090 R08: 0000000000000000 R09: 0000000000000000
[  854.778677][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  854.778688][ T8572] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  854.778710][ T8572]  </TASK>
[  855.099605][ T8580] SET target dimension over the limit!
[  855.262196][ T8602] bridge0: entered promiscuous mode
[  855.267835][ T8602] macvlan2: entered promiscuous mode
[  855.278613][ T8602] bridge0: port 6(macvlan2) entered blocking state
[  855.285193][ T8602] bridge0: port 6(macvlan2) entered disabled state
[  855.292198][ T8602] macvlan2: entered allmulticast mode
[  855.297725][ T8602] bridge0: entered allmulticast mode
[  855.312568][ T8602] macvlan2: left allmulticast mode
[  855.317878][ T8602] bridge0: left allmulticast mode
[  855.329968][ T8602] bridge0: left promiscuous mode
[  855.465442][ T8567] 9pnet_fd: p9_fd_create_tcp (8567): problem connecting socket to 127.0.0.1
[  855.477505][ T8626] xt_hashlimit: max too large, truncated to 1048576
[  855.962107][ T8699] FAULT_INJECTION: forcing a failure.
[  855.962107][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  855.975384][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.6.13394 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  855.975423][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  855.975516][ T8699] Call Trace:
[  855.975523][ T8699]  <TASK>
[  855.975529][ T8699]  dump_stack_lvl+0xf2/0x150
[  855.975579][ T8699]  dump_stack+0x15/0x1a
[  855.975600][ T8699]  should_fail_ex+0x24a/0x260
[  855.975632][ T8699]  should_fail+0xb/0x10
[  855.975670][ T8699]  should_fail_usercopy+0x1a/0x20
[  855.975719][ T8699]  _copy_from_user+0x1c/0xa0
[  855.975778][ T8699]  copy_msghdr_from_user+0x54/0x2a0
[  855.975803][ T8699]  ? __fget_files+0x17c/0x1c0
[  855.975909][ T8699]  __sys_sendmsg+0x13e/0x230
[  855.975954][ T8699]  __x64_sys_sendmsg+0x46/0x50
[  855.975994][ T8699]  x64_sys_call+0x2734/0x2dc0
[  855.976028][ T8699]  do_syscall_64+0xc9/0x1c0
[  855.976056][ T8699]  ? clear_bhb_loop+0x55/0xb0
[  855.976084][ T8699]  ? clear_bhb_loop+0x55/0xb0
[  855.976110][ T8699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.976198][ T8699] RIP: 0033:0x7f6456c0cda9
[  855.976213][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  855.976231][ T8699] RSP: 002b:00007f6455277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  855.976250][ T8699] RAX: ffffffffffffffda RBX: 00007f6456e25fa0 RCX: 00007f6456c0cda9
[  855.976262][ T8699] RDX: 0000000004000004 RSI: 0000000020000100 RDI: 0000000000000003
[  855.976274][ T8699] RBP: 00007f6455277090 R08: 0000000000000000 R09: 0000000000000000
[  855.976306][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  855.976319][ T8699] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  855.976337][ T8699]  </TASK>
[  856.020561][   T29] kauditd_printk_skb: 1920 callbacks suppressed
[  856.020649][   T29] audit: type=1326 audit(14127179.059:118675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8704 comm="syz.6.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  856.020798][   T29] audit: type=1326 audit(14127179.059:118676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8704 comm="syz.6.13398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  856.214553][   T29] audit: type=1326 audit(14127179.069:118677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.238270][   T29] audit: type=1326 audit(14127179.069:118678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.261862][   T29] audit: type=1326 audit(14127179.069:118679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.285622][   T29] audit: type=1326 audit(14127179.069:118680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.309234][   T29] audit: type=1326 audit(14127179.069:118681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.332940][   T29] audit: type=1326 audit(14127179.069:118682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.356481][   T29] audit: type=1326 audit(14127179.089:118683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.379975][   T29] audit: type=1326 audit(14127179.089:118684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.7.13396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  856.455615][ T8727] pim6reg: entered allmulticast mode
[  856.968672][ T8789] bridge0: port 4(batadv4) entered blocking state
[  856.975272][ T8789] bridge0: port 4(batadv4) entered disabled state
[  857.004444][ T8789] batadv4: entered allmulticast mode
[  857.016976][ T8789] batadv4: entered promiscuous mode
[  857.476852][T31627] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  857.486131][T31627] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  857.597597][ T8858] __nla_validate_parse: 11 callbacks suppressed
[  857.597614][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13456'.
[  857.670483][ T8867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8867 comm=syz.1.13462
[  857.683113][ T8867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8867 comm=syz.1.13462
[  857.755181][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13463'.
[  857.771430][ T8869] bridge0: port 5(batadv3) entered blocking state
[  857.778061][ T8869] bridge0: port 5(batadv3) entered disabled state
[  857.788131][ T8869] batadv3: entered allmulticast mode
[  857.805486][ T8869] batadv3: entered promiscuous mode
[  858.134325][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13473'.
[  858.280074][T31627] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  858.289542][T31627] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  858.708338][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13494'.
[  858.871909][ T8976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  859.045799][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13514'.
[  859.058970][ T9003] bridge0: port 6(batadv4) entered blocking state
[  859.065622][ T9003] bridge0: port 6(batadv4) entered disabled state
[  859.087711][ T9003] batadv4: entered allmulticast mode
[  859.105968][ T9003] batadv4: entered promiscuous mode
[  859.168892][ T9016] netlink: 'syz.1.13521': attribute type 4 has an invalid length.
[  859.185032][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13520'.
[  859.303440][ T9035] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  859.327168][ T9035] bridge0: entered promiscuous mode
[  859.332551][ T9035] macvlan2: entered promiscuous mode
[  859.340260][ T9035] bridge0: port 7(macvlan2) entered blocking state
[  859.347002][ T9035] bridge0: port 7(macvlan2) entered disabled state
[  859.353781][ T9035] macvlan2: entered allmulticast mode
[  859.359319][ T9035] bridge0: entered allmulticast mode
[  859.365577][ T9035] macvlan2: left allmulticast mode
[  859.370739][ T9035] bridge0: left allmulticast mode
[  859.376802][ T9035] bridge0: left promiscuous mode
[  859.423091][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13534'.
[  859.577214][ T1059] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  859.586498][ T1059] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  859.812953][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13550'.
[  860.215165][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13563'.
[  860.907675][ T9166] macvlan4: entered promiscuous mode
[  860.925763][ T9166] bridge0: port 3(macvlan4) entered blocking state
[  860.932363][ T9166] bridge0: port 3(macvlan4) entered disabled state
[  860.945543][ T9166] macvlan4: entered allmulticast mode
[  860.963028][ T9166] macvlan4: left allmulticast mode
[  861.032084][   T29] kauditd_printk_skb: 1282 callbacks suppressed
[  861.032101][   T29] audit: type=1326 audit(14127184.069:119967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6456c03d67 code=0x7ffc0000
[  861.071944][   T29] audit: type=1326 audit(14127184.099:119968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6456ba8fa9 code=0x7ffc0000
[  861.095689][   T29] audit: type=1326 audit(14127184.099:119969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6456c03d67 code=0x7ffc0000
[  861.119288][   T29] audit: type=1326 audit(14127184.099:119970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6456ba8fa9 code=0x7ffc0000
[  861.142909][   T29] audit: type=1326 audit(14127184.099:119971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  861.172676][   T29] audit: type=1326 audit(14127184.109:119972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6456c03d67 code=0x7ffc0000
[  861.196386][   T29] audit: type=1326 audit(14127184.109:119973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6456ba8fa9 code=0x7ffc0000
[  861.219956][   T29] audit: type=1326 audit(14127184.109:119974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  861.243550][   T29] audit: type=1326 audit(14127184.109:119975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6456c03d67 code=0x7ffc0000
[  861.267096][   T29] audit: type=1326 audit(14127184.109:119976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.6.13580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6456ba8fa9 code=0x7ffc0000
[  861.357384][ T9190] bridge0: port 3(batadv1) entered blocking state
[  861.363893][ T9190] bridge0: port 3(batadv1) entered disabled state
[  861.370579][ T9190] batadv1: entered allmulticast mode
[  861.376545][ T9190] batadv1: entered promiscuous mode
[  861.855382][T31613] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  861.864684][T31613] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  862.431872][ T9266] bridge0: port 7(batadv5) entered blocking state
[  862.438411][ T9266] bridge0: port 7(batadv5) entered disabled state
[  862.444957][ T9266] batadv5: entered allmulticast mode
[  862.450936][ T9266] batadv5: entered promiscuous mode
[  862.535013][ T9276] netlink: 'syz.7.13628': attribute type 4 has an invalid length.
[  862.545500][   T24] lo speed is unknown, defaulting to 1000
[  862.551847][ T9276] netlink: 'syz.7.13628': attribute type 4 has an invalid length.
[  862.560219][   T24] lo speed is unknown, defaulting to 1000
[  862.569203][   T24] lo speed is unknown, defaulting to 1000
[  862.585415][   T24] lo speed is unknown, defaulting to 1000
[  862.824681][ T9306] lo speed is unknown, defaulting to 1000
[  862.939793][ T2485] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  862.949103][ T2485] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  863.040136][ T9339] __nla_validate_parse: 11 callbacks suppressed
[  863.040158][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13655'.
[  863.061618][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13657'.
[  863.263696][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13669'.
[  863.482541][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13680'.
[  863.524549][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13685'.
[  863.546295][ T9400] bridge0: port 8(batadv6) entered blocking state
[  863.552791][ T9400] bridge0: port 8(batadv6) entered disabled state
[  863.573304][ T9400] batadv6: entered allmulticast mode
[  863.581937][ T9400] batadv6: entered promiscuous mode
[  863.600063][ T9405] xt_hashlimit: max too large, truncated to 1048576
[  863.625306][ T9409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13688'.
[  863.650784][ T9405] Cannot find set identified by id 0 to match
[  863.746731][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13694'.
[  863.924596][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13699'.
[  864.002004][ T9460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13709'.
[  864.022677][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13710'.
[  864.055565][ T9464] bridge0: entered promiscuous mode
[  864.060966][ T9464] macvlan2: entered promiscuous mode
[  864.070731][T31613] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[  864.080143][T31613] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[  864.091368][ T9464] bridge0: port 9(macvlan2) entered blocking state
[  864.097981][ T9464] bridge0: port 9(macvlan2) entered disabled state
[  864.110047][ T9464] macvlan2: entered allmulticast mode
[  864.115634][ T9464] bridge0: entered allmulticast mode
[  864.142057][ T9464] macvlan2: left allmulticast mode
[  864.147352][ T9464] bridge0: left allmulticast mode
[  864.159687][ T9464] bridge0: left promiscuous mode
[  864.459043][ T9509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9509 comm=syz.1.13733
[  864.711553][ T9542] bridge0: port 4(batadv3) entered blocking state
[  864.718161][ T9542] bridge0: port 4(batadv3) entered disabled state
[  864.724996][ T9542] batadv3: entered allmulticast mode
[  864.734600][ T9542] batadv3: entered promiscuous mode
[  864.786713][ T9551] xt_hashlimit: max too large, truncated to 1048576
[  864.794302][ T9551] Cannot find set identified by id 0 to match
[  864.991150][ T9580] bridge0: port 5(batadv4) entered blocking state
[  864.997742][ T9580] bridge0: port 5(batadv4) entered disabled state
[  865.007442][ T9580] batadv4: entered allmulticast mode
[  865.013480][ T9580] batadv4: entered promiscuous mode
[  865.053726][ T9586] macvlan3: entered promiscuous mode
[  865.061784][ T9586] bridge0: port 5(macvlan3) entered blocking state
[  865.068558][ T9586] bridge0: port 5(macvlan3) entered disabled state
[  865.075452][ T9586] macvlan3: entered allmulticast mode
[  865.080981][ T9586] bridge0: entered allmulticast mode
[  865.088834][ T9586] macvlan3: left allmulticast mode
[  865.094012][ T9586] bridge0: left allmulticast mode
[  865.218017][   T58] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  865.227338][   T58] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  865.263744][ T9609] bridge0: entered promiscuous mode
[  865.269254][ T9609] macvlan2: entered promiscuous mode
[  865.284006][ T9609] bridge0: port 6(macvlan2) entered blocking state
[  865.290950][ T9609] bridge0: port 6(macvlan2) entered disabled state
[  865.297806][ T9609] macvlan2: entered allmulticast mode
[  865.303469][ T9609] bridge0: entered allmulticast mode
[  865.309712][ T9609] macvlan2: left allmulticast mode
[  865.315004][ T9609] bridge0: left allmulticast mode
[  865.328911][ T9609] bridge0: left promiscuous mode
[  865.453451][ T9626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9626 comm=syz.1.13782
[  865.466086][ T9626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9626 comm=syz.1.13782
[  865.499692][T31613] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  865.509003][T31613] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  865.623729][ T9638] lo speed is unknown, defaulting to 1000
[  865.644780][ T9646] IPv6: NLM_F_CREATE should be specified when creating new route
[  866.200171][   T29] kauditd_printk_skb: 1054 callbacks suppressed
[  866.200227][   T29] audit: type=1326 audit(14127189.239:121031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.6.13808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  866.230500][   T29] audit: type=1326 audit(14127189.249:121032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.6.13808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  866.254545][   T29] audit: type=1326 audit(14127189.249:121033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.6.13808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  866.278298][   T29] audit: type=1326 audit(14127189.249:121034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.6.13808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6456c0cda9 code=0x7ffc0000
[  866.334584][ T9695] FAULT_INJECTION: forcing a failure.
[  866.334584][ T9695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  866.347847][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.6.13811 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  866.347880][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  866.347896][ T9695] Call Trace:
[  866.347903][ T9695]  <TASK>
[  866.347939][ T9695]  dump_stack_lvl+0xf2/0x150
[  866.347975][ T9695]  dump_stack+0x15/0x1a
[  866.348002][ T9695]  should_fail_ex+0x24a/0x260
[  866.348058][ T9695]  should_fail+0xb/0x10
[  866.348086][ T9695]  should_fail_usercopy+0x1a/0x20
[  866.348120][ T9695]  _copy_from_user+0x1c/0xa0
[  866.348155][ T9695]  kstrtouint_from_user+0x76/0xe0
[  866.348186][ T9695]  ? 0xffffffff81000000
[  866.348213][ T9695]  ? selinux_file_permission+0x22a/0x360
[  866.348237][ T9695]  proc_fail_nth_write+0x4f/0x150
[  866.348313][ T9695]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  866.348338][ T9695]  vfs_write+0x27d/0x920
[  866.348359][ T9695]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  866.348385][ T9695]  ? __fget_files+0x17c/0x1c0
[  866.348415][ T9695]  ksys_write+0xe8/0x1b0
[  866.348495][ T9695]  __x64_sys_write+0x42/0x50
[  866.348516][ T9695]  x64_sys_call+0x287e/0x2dc0
[  866.348543][ T9695]  do_syscall_64+0xc9/0x1c0
[  866.348634][ T9695]  ? clear_bhb_loop+0x55/0xb0
[  866.348730][ T9695]  ? clear_bhb_loop+0x55/0xb0
[  866.348816][ T9695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.348843][ T9695] RIP: 0033:0x7f6456c0b85f
[  866.348857][ T9695] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  866.348924][ T9695] RSP: 002b:00007f6455277030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  866.348943][ T9695] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6456c0b85f
[  866.348955][ T9695] RDX: 0000000000000001 RSI: 00007f64552770a0 RDI: 0000000000000004
[  866.348991][ T9695] RBP: 00007f6455277090 R08: 0000000000000000 R09: 0000000000000000
[  866.349003][ T9695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  866.349014][ T9695] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  866.349032][ T9695]  </TASK>
[  866.570970][   T29] audit: type=1326 audit(14127189.609:121035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.594604][   T29] audit: type=1326 audit(14127189.609:121036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.618232][   T29] audit: type=1326 audit(14127189.619:121037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.641785][   T29] audit: type=1326 audit(14127189.619:121038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.665771][   T29] audit: type=1326 audit(14127189.619:121039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.671658][ T9699] macvlan4: entered promiscuous mode
[  866.689450][   T29] audit: type=1326 audit(14127189.619:121040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9696 comm="syz.1.13812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f704f63cda9 code=0x7ffc0000
[  866.703233][ T9699] bridge0: port 4(macvlan4) entered blocking state
[  866.724831][ T9699] bridge0: port 4(macvlan4) entered disabled state
[  866.735154][ T9699] macvlan4: entered allmulticast mode
[  866.751247][ T9699] macvlan4: left allmulticast mode
[  867.134235][ T9726] lo speed is unknown, defaulting to 1000
[  867.269322][ T9726] chnl_net:caif_netlink_parms(): no params data found
[  867.315033][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.322398][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.329786][ T9726] bridge_slave_0: entered allmulticast mode
[  867.336315][ T9726] bridge_slave_0: entered promiscuous mode
[  867.343715][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.350893][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.358241][ T9726] bridge_slave_1: entered allmulticast mode
[  867.364778][ T9726] bridge_slave_1: entered promiscuous mode
[  867.386966][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.397979][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  867.418922][ T9726] team0: Port device team_slave_0 added
[  867.425820][ T9726] team0: Port device team_slave_1 added
[  867.450493][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.457559][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.483783][ T9726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.495417][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.502552][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.528818][ T9726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.556362][ T9726] hsr_slave_0: entered promiscuous mode
[  867.562362][ T9726] hsr_slave_1: entered promiscuous mode
[  867.568452][ T9726] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  867.576090][ T9726] Cannot create hsr debugfs directory
[  867.663288][ T9726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.718377][ T9726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.799340][ T9726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.858145][ T9726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.942719][ T9726] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  867.956451][ T9726] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  867.977385][ T9726] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  867.987120][ T9726] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  868.000692][ T9790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=9790 comm=syz.0.13841
[  868.016186][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.023458][ T9726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.030824][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.037959][ T9726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.113023][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.145647][ T9802] __nla_validate_parse: 23 callbacks suppressed
[  868.145662][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13846'.
[  868.180804][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  868.194343][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  868.213892][ T9726] 8021q: adding VLAN 0 to HW filter on device team0
[  868.224690][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.231815][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.247120][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.254288][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.363894][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  868.402968][ T9830] netlink: 'syz.6.13854': attribute type 4 has an invalid length.
[  868.454992][ T9830] netlink: 'syz.6.13854': attribute type 4 has an invalid length.
[  868.459846][ T9726] veth0_vlan: entered promiscuous mode
[  868.483117][ T9726] veth1_vlan: entered promiscuous mode
[  868.512045][ T9726] veth0_macvtap: entered promiscuous mode
[  868.527609][ T9726] veth1_macvtap: entered promiscuous mode
[  868.543061][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.553660][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.563587][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.574033][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.584014][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.594502][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.604446][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.615079][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.624957][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.635653][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.655543][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.666353][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.676966][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.687002][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.697521][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.707448][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.717940][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.727800][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.738377][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.748233][ T9726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.758843][ T9726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.769404][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.778020][ T9726] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.787006][ T9726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.795930][ T9726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.804761][ T9726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.853811][ T9854] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  868.898224][ T9854] bridge0: entered promiscuous mode
[  868.913398][ T9854] macvlan2: entered promiscuous mode
[  868.925116][ T9854] bridge0: port 6(macvlan2) entered blocking state
[  868.931774][ T9854] bridge0: port 6(macvlan2) entered disabled state
[  868.945392][ T9854] macvlan2: entered allmulticast mode
[  868.950886][ T9854] bridge0: entered allmulticast mode
[  868.971380][ T9854] macvlan2: left allmulticast mode
[  868.976603][ T9854] bridge0: left allmulticast mode
[  868.982541][ T9854] bridge0: left promiscuous mode
[  869.066633][ T9870] netlink: 'syz.1.13865': attribute type 4 has an invalid length.
[  869.083104][ T9870] netlink: 'syz.1.13865': attribute type 4 has an invalid length.
[  869.163711][ T9878] xt_hashlimit: max too large, truncated to 1048576
[  869.171315][ T9878] Cannot find set identified by id 0 to match
[  869.260383][ T9886] bond0: entered promiscuous mode
[  869.265494][ T9886] bond0: entered allmulticast mode
[  869.270874][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.289068][ T9886] bond0 (unregistering): Released all slaves
[  869.327318][ T9891] xt_hashlimit: max too large, truncated to 1048576
[  869.334629][ T9891] Cannot find set identified by id 0 to match
[  869.382247][ T9899] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  869.423140][ T9899] bridge0: entered promiscuous mode
[  869.428524][ T9899] macvlan2: entered promiscuous mode
[  869.435144][ T9899] bridge0: port 3(macvlan2) entered blocking state
[  869.442155][ T9899] bridge0: port 3(macvlan2) entered disabled state
[  869.449339][ T9899] macvlan2: entered allmulticast mode
[  869.454821][ T9899] bridge0: entered allmulticast mode
[  869.480132][ T9899] macvlan2: left allmulticast mode
[  869.485413][ T9899] bridge0: left allmulticast mode
[  869.513809][ T9911] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  869.521013][ T9899] bridge0: left promiscuous mode
[  869.629143][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13890'.
[  869.673309][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13895'.
[  869.691911][ T9934] bridge0: port 3(batadv1) entered blocking state
[  869.698641][ T9934] bridge0: port 3(batadv1) entered disabled state
[  869.706026][ T9934] batadv1: entered allmulticast mode
[  869.711893][ T9934] batadv1: entered promiscuous mode
[  869.754093][ T9943] xt_hashlimit: max too large, truncated to 1048576
[  869.761804][ T9943] Cannot find set identified by id 0 to match
[  869.904166][ T9959] Cannot find set identified by id 65534 to match
[  870.015668][ T9959] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  870.023957][ T9959] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  870.191883][ T9973] netlink: 'syz.1.13911': attribute type 4 has an invalid length.
[  870.203052][ T9973] netlink: 'syz.1.13911': attribute type 4 has an invalid length.
[  870.205715][T31613] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  870.220431][T31613] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  870.251598][ T9975] netlink: 'syz.1.13912': attribute type 4 has an invalid length.
[  870.262963][ T9975] netlink: 'syz.1.13912': attribute type 4 has an invalid length.
[  870.298488][ T9977] xt_hashlimit: max too large, truncated to 1048576
[  870.306443][ T9977] Cannot find set identified by id 0 to match
[  870.924375][T10028] FAULT_INJECTION: forcing a failure.
[  870.924375][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  870.937487][T10028] CPU: 1 UID: 0 PID: 10028 Comm: +}[@ Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  870.937517][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  870.937596][T10028] Call Trace:
[  870.937604][T10028]  <TASK>
[  870.937613][T10028]  dump_stack_lvl+0xf2/0x150
[  870.937640][T10028]  dump_stack+0x15/0x1a
[  870.937661][T10028]  should_fail_ex+0x24a/0x260
[  870.937740][T10028]  should_fail+0xb/0x10
[  870.937767][T10028]  should_fail_usercopy+0x1a/0x20
[  870.937852][T10028]  _copy_from_user+0x1c/0xa0
[  870.937876][T10028]  rfkill_fop_write+0xae/0x400
[  870.937984][T10028]  vfs_writev+0x3fa/0x880
[  870.938020][T10028]  ? __pfx_rfkill_fop_write+0x10/0x10
[  870.938148][T10028]  do_writev+0xf4/0x220
[  870.938181][T10028]  __x64_sys_writev+0x45/0x50
[  870.938204][T10028]  x64_sys_call+0x1fab/0x2dc0
[  870.938230][T10028]  do_syscall_64+0xc9/0x1c0
[  870.938264][T10028]  ? clear_bhb_loop+0x55/0xb0
[  870.938366][T10028]  ? clear_bhb_loop+0x55/0xb0
[  870.938392][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.938424][T10028] RIP: 0033:0x7f6456c0cda9
[  870.938491][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  870.938512][T10028] RSP: 002b:00007f6455277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  870.938534][T10028] RAX: ffffffffffffffda RBX: 00007f6456e25fa0 RCX: 00007f6456c0cda9
[  870.938547][T10028] RDX: 0000000000000007 RSI: 0000000020000440 RDI: 0000000000000003
[  870.938558][T10028] RBP: 00007f6455277090 R08: 0000000000000000 R09: 0000000000000000
[  870.938569][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  870.938580][T10028] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  870.938600][T10028]  </TASK>
[  871.182359][T10036] bond1: entered promiscuous mode
[  871.187628][T10036] bond1: entered allmulticast mode
[  871.193534][T10036] 8021q: adding VLAN 0 to HW filter on device bond1
[  871.225044][T10042] netlink: 'syz.2.13941': attribute type 4 has an invalid length.
[  871.234196][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13942'.
[  871.260799][T10042] netlink: 'syz.2.13941': attribute type 4 has an invalid length.
[  871.269328][   T29] kauditd_printk_skb: 580 callbacks suppressed
[  871.269346][   T29] audit: type=1326 audit(14127194.319:121621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.7.13940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.299636][   T29] audit: type=1326 audit(14127194.319:121622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.7.13940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.364377][   T29] audit: type=1326 audit(14127194.399:121623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.404529][   T29] audit: type=1326 audit(14127194.429:121624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.416698][T10054] xt_hashlimit: max too large, truncated to 1048576
[  871.428272][   T29] audit: type=1326 audit(14127194.429:121625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.444232][T10054] Cannot find set identified by id 0 to match
[  871.458435][   T29] audit: type=1326 audit(14127194.429:121626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.458471][   T29] audit: type=1326 audit(14127194.429:121627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.512103][   T29] audit: type=1326 audit(14127194.429:121628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.535734][   T29] audit: type=1326 audit(14127194.429:121629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.543811][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13948'.
[  871.559438][   T29] audit: type=1326 audit(14127194.429:121630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.7.13945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbf02cda9 code=0x7ffc0000
[  871.632785][T10063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10063 comm=syz.7.13950
[  871.645612][T10063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10063 comm=syz.7.13950
[  871.684059][T10069] xt_hashlimit: max too large, truncated to 1048576
[  871.691714][T10069] Cannot find set identified by id 0 to match
[  871.801052][T10081] xt_hashlimit: max too large, truncated to 1048576
[  872.064751][T10114] bond1: entered promiscuous mode
[  872.069991][T10114] bond1: entered allmulticast mode
[  872.075715][T10114] 8021q: adding VLAN 0 to HW filter on device bond1
[  872.086392][T10114] bond1 (unregistering): Released all slaves
[  872.590943][T10180] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  872.628942][T10180] bridge0: entered promiscuous mode
[  872.634239][T10180] macvlan2: entered promiscuous mode
[  872.641794][T10180] bridge0: port 9(macvlan2) entered blocking state
[  872.648497][T10180] bridge0: port 9(macvlan2) entered disabled state
[  872.667680][T10180] macvlan2: entered allmulticast mode
[  872.673132][T10180] bridge0: entered allmulticast mode
[  872.690805][T10180] macvlan2: left allmulticast mode
[  872.696067][T10180] bridge0: left allmulticast mode
[  872.706616][T10180] bridge0: left promiscuous mode
[  872.810837][T10204] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  872.842367][T10204] bridge0: entered promiscuous mode
[  872.847743][T10204] macvlan2: entered promiscuous mode
[  872.854493][T10204] bridge0: port 6(macvlan2) entered blocking state
[  872.861249][T10204] bridge0: port 6(macvlan2) entered disabled state
[  872.868123][T10204] macvlan2: entered allmulticast mode
[  872.873519][T10204] bridge0: entered allmulticast mode
[  872.888726][T10204] macvlan2: left allmulticast mode
[  872.894024][T10204] bridge0: left allmulticast mode
[  872.910118][T10204] bridge0: left promiscuous mode
[  873.112082][T10248] bridge0: entered promiscuous mode
[  873.121485][T10248] macvlan2: entered promiscuous mode
[  873.134053][T10248] bridge0: port 4(macvlan2) entered blocking state
[  873.140750][T10248] bridge0: port 4(macvlan2) entered disabled state
[  873.154403][T10248] macvlan2: entered allmulticast mode
[  873.159865][T10248] bridge0: entered allmulticast mode
[  873.187649][T10248] macvlan2: left allmulticast mode
[  873.192889][T10248] bridge0: left allmulticast mode
[  873.218620][T10248] bridge0: left promiscuous mode
[  873.242918][T10256] __nla_validate_parse: 2 callbacks suppressed
[  873.242952][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14039'.
[  873.269136][T10256] bridge0: port 6(batadv5) entered blocking state
[  873.276135][T10256] bridge0: port 6(batadv5) entered disabled state
[  873.294164][T10256] batadv5: entered allmulticast mode
[  873.302562][T10256] batadv5: entered promiscuous mode
[  873.330683][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14042'.
[  873.680716][T10295] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14055'.
[  873.707120][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14056'.
[  873.770136][T10305] 9pnet_fd: p9_fd_create_tcp (10305): problem connecting socket to 127.0.0.1
[  873.783484][T31613] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  873.792955][T31613] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  873.928597][T10247] 9pnet_fd: p9_fd_create_tcp (10247): problem connecting socket to 127.0.0.1
[  873.970495][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14066'.
[  873.998756][T10318] bridge0: port 9(batadv7) entered blocking state
[  874.005299][T10318] bridge0: port 9(batadv7) entered disabled state
[  874.011821][T10318] batadv7: entered allmulticast mode
[  874.017878][T10318] batadv7: entered promiscuous mode
[  874.183171][T10321] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  874.233077][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14068'.
[  874.506014][   T58] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[  874.515321][   T58] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[  874.786265][T10343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14073'.
[  874.986660][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14080'.
[  874.995733][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14080'.
[  875.383210][T10386] netlink: 72 bytes leftover after parsing attributes in process `+}[@'.
[  875.641714][T10412] bridge0: port 10(batadv8) entered blocking state
[  875.648446][T10412] bridge0: port 10(batadv8) entered disabled state
[  875.655408][T10412] batadv8: entered allmulticast mode
[  875.661428][T10412] batadv8: entered promiscuous mode
[  875.665983][T10414] FAULT_INJECTION: forcing a failure.
[  875.665983][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  875.679808][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.1.14104 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  875.679839][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  875.679879][T10414] Call Trace:
[  875.679956][T10414]  <TASK>
[  875.679963][T10414]  dump_stack_lvl+0xf2/0x150
[  875.679991][T10414]  dump_stack+0x15/0x1a
[  875.680017][T10414]  should_fail_ex+0x24a/0x260
[  875.680059][T10414]  should_fail+0xb/0x10
[  875.680086][T10414]  should_fail_usercopy+0x1a/0x20
[  875.680159][T10414]  _copy_from_user+0x1c/0xa0
[  875.680186][T10414]  memdup_user+0x64/0xc0
[  875.680215][T10414]  strndup_user+0x68/0xa0
[  875.680243][T10414]  perf_ioctl+0x516/0x1550
[  875.680273][T10414]  ? get_pid_task+0x8e/0xc0
[  875.680432][T10414]  ? ioctl_has_perm+0x2bf/0x2e0
[  875.680468][T10414]  ? do_vfs_ioctl+0x96e/0x1530
[  875.680502][T10414]  ? selinux_file_ioctl+0x2f7/0x380
[  875.680522][T10414]  ? __fget_files+0x17c/0x1c0
[  875.680581][T10414]  ? __pfx_perf_ioctl+0x10/0x10
[  875.680615][T10414]  __se_sys_ioctl+0xc9/0x140
[  875.680639][T10414]  __x64_sys_ioctl+0x43/0x50
[  875.680736][T10414]  x64_sys_call+0x1690/0x2dc0
[  875.680769][T10414]  do_syscall_64+0xc9/0x1c0
[  875.680796][T10414]  ? clear_bhb_loop+0x55/0xb0
[  875.680823][T10414]  ? clear_bhb_loop+0x55/0xb0
[  875.680892][T10414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.680921][T10414] RIP: 0033:0x7fca6671cda9
[  875.680935][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  875.680953][T10414] RSP: 002b:00007fca64d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  875.680971][T10414] RAX: ffffffffffffffda RBX: 00007fca66935fa0 RCX: 00007fca6671cda9
[  875.680986][T10414] RDX: 0000000020000000 RSI: 0000000040082406 RDI: 0000000000000003
[  875.681066][T10414] RBP: 00007fca64d81090 R08: 0000000000000000 R09: 0000000000000000
[  875.681077][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  875.681088][T10414] R13: 0000000000000000 R14: 00007fca66935fa0 R15: 00007ffd594b5718
[  875.681106][T10414]  </TASK>
[  875.966219][T10423] FAULT_INJECTION: forcing a failure.
[  875.966219][T10423] name failslab, interval 1, probability 0, space 0, times 0
[  875.979000][T10423] CPU: 0 UID: 0 PID: 10423 Comm: syz.1.14108 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  875.979037][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  875.979051][T10423] Call Trace:
[  875.979059][T10423]  <TASK>
[  875.979067][T10423]  dump_stack_lvl+0xf2/0x150
[  875.979100][T10423]  dump_stack+0x15/0x1a
[  875.979125][T10423]  should_fail_ex+0x24a/0x260
[  875.979206][T10423]  should_failslab+0x8f/0xb0
[  875.979235][T10423]  kmem_cache_alloc_node_noprof+0x59/0x320
[  875.979274][T10423]  ? __alloc_skb+0x10b/0x310
[  875.979307][T10423]  __alloc_skb+0x10b/0x310
[  875.979339][T10423]  ? audit_log_start+0x34c/0x6b0
[  875.979418][T10423]  audit_log_start+0x368/0x6b0
[  875.979460][T10423]  audit_seccomp+0x4b/0x130
[  875.979493][T10423]  __seccomp_filter+0x6fa/0x1180
[  875.979520][T10423]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  875.979623][T10423]  ? vfs_write+0x644/0x920
[  875.979649][T10423]  __secure_computing+0x9f/0x1c0
[  875.979678][T10423]  syscall_trace_enter+0xd1/0x1f0
[  875.979712][T10423]  ? fpregs_assert_state_consistent+0x83/0xa0
[  875.979817][T10423]  do_syscall_64+0xaa/0x1c0
[  875.979851][T10423]  ? clear_bhb_loop+0x55/0xb0
[  875.979879][T10423]  ? clear_bhb_loop+0x55/0xb0
[  875.979909][T10423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  875.980005][T10423] RIP: 0033:0x7fca6671cda9
[  875.980023][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  875.980041][T10423] RSP: 002b:00007fca64d81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  875.980060][T10423] RAX: ffffffffffffffda RBX: 00007fca66935fa0 RCX: 00007fca6671cda9
[  875.980072][T10423] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000006
[  875.980122][T10423] RBP: 00007fca64d81090 R08: 0000000000000000 R09: 0000000000000000
[  875.980138][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  875.980152][T10423] R13: 0000000000000000 R14: 00007fca66935fa0 R15: 00007ffd594b5718
[  875.980174][T10423]  </TASK>
[  876.199469][T31627] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled
[  876.206504][T10422] dccp_close: ABORT with 56 bytes unread
[  876.208920][T31627] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled
[  876.328959][   T29] kauditd_printk_skb: 1208 callbacks suppressed
[  876.328976][   T29] audit: type=1326 audit(14127199.369:122837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.359894][   T29] audit: type=1326 audit(14127199.369:122838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.383586][   T29] audit: type=1326 audit(14127199.369:122839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.407297][   T29] audit: type=1326 audit(14127199.369:122840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.430982][   T29] audit: type=1326 audit(14127199.369:122841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.454870][   T29] audit: type=1326 audit(14127199.369:122842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.478622][   T29] audit: type=1326 audit(14127199.369:122843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.482825][T10448] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  876.502211][   T29] audit: type=1326 audit(14127199.369:122844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.502274][   T29] audit: type=1326 audit(14127199.369:122845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.502308][   T29] audit: type=1326 audit(14127199.369:122846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10438 comm="syz.0.14113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  876.510985][T10448] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  876.591006][T10448] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  876.599825][T10448] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  876.697594][T10455] macvlan4: entered promiscuous mode
[  876.703606][T10455] bridge0: port 4(macvlan4) entered blocking state
[  876.710222][T10455] bridge0: port 4(macvlan4) entered disabled state
[  876.728101][T10455] macvlan4: entered allmulticast mode
[  876.734635][T10455] macvlan4: left allmulticast mode
[  876.833464][T10472] dummy0: entered promiscuous mode
[  876.843162][T10472] dummy0: left promiscuous mode
[  876.907685][T10483] wireguard0: entered promiscuous mode
[  876.913302][T10483] wireguard0: entered allmulticast mode
[  877.158786][T10496] xt_hashlimit: max too large, truncated to 1048576
[  877.166361][T10496] Cannot find set identified by id 0 to match
[  877.236298][T10498] bridge0: entered promiscuous mode
[  877.241688][T10498] macvlan2: entered promiscuous mode
[  877.248983][T10498] bridge0: port 4(macvlan2) entered blocking state
[  877.255629][T10498] bridge0: port 4(macvlan2) entered disabled state
[  877.294600][T10498] macvlan2: entered allmulticast mode
[  877.300082][T10498] bridge0: entered allmulticast mode
[  877.315341][T10498] macvlan2: left allmulticast mode
[  877.320645][T10498] bridge0: left allmulticast mode
[  877.333681][T10498] bridge0: left promiscuous mode
[  878.476332][T10585] xt_hashlimit: max too large, truncated to 1048576
[  878.507170][T10592] bond0: entered promiscuous mode
[  878.512257][T10592] bond0: entered allmulticast mode
[  878.523589][T10592] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.543406][T10592] bond0 (unregistering): Released all slaves
[  878.559006][T10603] __nla_validate_parse: 11 callbacks suppressed
[  878.559025][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14175'.
[  878.622271][T10603] bridge0: port 4(batadv2) entered blocking state
[  878.628937][T10603] bridge0: port 4(batadv2) entered disabled state
[  878.636313][T10608] xt_hashlimit: max too large, truncated to 1048576
[  878.643922][T10608] Cannot find set identified by id 0 to match
[  878.660844][T10611] xt_hashlimit: max too large, truncated to 1048576
[  878.669802][T10611] Cannot find set identified by id 0 to match
[  878.676292][T10603] batadv2: entered allmulticast mode
[  878.696158][T10603] batadv2: entered promiscuous mode
[  878.741657][T10617] bond1: entered promiscuous mode
[  878.746862][T10617] bond1: entered allmulticast mode
[  878.752290][T10617] 8021q: adding VLAN 0 to HW filter on device bond1
[  878.779074][T10617] bond1 (unregistering): Released all slaves
[  878.953009][T10644] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  878.961848][T10644] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  878.970692][T10644] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  878.979453][T10644] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  879.116458][   T58] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  879.125858][   T58] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  879.141638][T10664] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  879.159580][T10664] bridge0: entered promiscuous mode
[  879.164850][T10664] macvlan2: entered promiscuous mode
[  879.194560][T10664] bridge0: port 6(macvlan2) entered blocking state
[  879.201251][T10664] bridge0: port 6(macvlan2) entered disabled state
[  879.209887][T10664] macvlan2: entered allmulticast mode
[  879.215446][T10664] bridge0: entered allmulticast mode
[  879.222213][T10664] macvlan2: left allmulticast mode
[  879.227411][T10664] bridge0: left allmulticast mode
[  879.233105][T10664] bridge0: left promiscuous mode
[  879.743605][T10706] bond2: entered promiscuous mode
[  879.748781][T10706] bond2: entered allmulticast mode
[  879.761845][T10706] 8021q: adding VLAN 0 to HW filter on device bond2
[  879.774337][T10706] bond2 (unregistering): Released all slaves
[  879.790966][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14216'.
[  880.018397][T10728] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  880.068661][T10728] bridge0: entered promiscuous mode
[  880.083928][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14227'.
[  880.085944][T10728] macvlan2: entered promiscuous mode
[  880.113347][T10728] bridge0: port 7(macvlan2) entered blocking state
[  880.120112][T10728] bridge0: port 7(macvlan2) entered disabled state
[  880.140974][T10728] macvlan2: entered allmulticast mode
[  880.146503][T10728] bridge0: entered allmulticast mode
[  880.158151][T10743] xt_hashlimit: max too large, truncated to 1048576
[  880.165987][T10743] Cannot find set identified by id 0 to match
[  880.179607][T10728] macvlan2: left allmulticast mode
[  880.184802][T10728] bridge0: left allmulticast mode
[  880.203130][T10728] bridge0: left promiscuous mode
[  880.380910][T10769] x_tables: duplicate underflow at hook 1
[  880.427095][T10777] 9pnet_fd: p9_fd_create_tcp (10777): problem connecting socket to 127.0.0.1
[  880.454646][T10781] xt_hashlimit: max too large, truncated to 1048576
[  880.456505][T10783] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  880.480753][T10781] Cannot find set identified by id 0 to match
[  880.518214][T10783] bridge0: entered promiscuous mode
[  880.605436][T10783] macvlan2: entered promiscuous mode
[  880.612282][T10783] bridge0: port 7(macvlan2) entered blocking state
[  880.618945][T10783] bridge0: port 7(macvlan2) entered disabled state
[  880.633749][T10783] macvlan2: entered allmulticast mode
[  880.639220][T10783] bridge0: entered allmulticast mode
[  880.647404][T10783] macvlan2: left allmulticast mode
[  880.652628][T10783] bridge0: left allmulticast mode
[  880.658318][T10783] bridge0: left promiscuous mode
[  880.677523][T10799] IPv6: NLM_F_CREATE should be specified when creating new route
[  880.994401][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14272'.
[  881.011802][T10842] FAULT_INJECTION: forcing a failure.
[  881.011802][T10842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  881.024948][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.1.14271 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  881.025087][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  881.025117][T10842] Call Trace:
[  881.025125][T10842]  <TASK>
[  881.025133][T10842]  dump_stack_lvl+0xf2/0x150
[  881.025165][T10842]  dump_stack+0x15/0x1a
[  881.025189][T10842]  should_fail_ex+0x24a/0x260
[  881.025295][T10842]  should_fail+0xb/0x10
[  881.025330][T10842]  should_fail_usercopy+0x1a/0x20
[  881.025368][T10842]  _copy_from_user+0x1c/0xa0
[  881.025394][T10842]  copy_bpf_fprog_from_user+0xda/0x240
[  881.025470][T10842]  fanout_set_data+0x171/0x330
[  881.025511][T10842]  packet_setsockopt+0x6e7/0xfd0
[  881.025557][T10842]  ? __pfx_packet_setsockopt+0x10/0x10
[  881.025592][T10842]  __sys_setsockopt+0x187/0x200
[  881.025630][T10842]  __x64_sys_setsockopt+0x66/0x80
[  881.025721][T10842]  x64_sys_call+0x282e/0x2dc0
[  881.025750][T10842]  do_syscall_64+0xc9/0x1c0
[  881.025855][T10842]  ? clear_bhb_loop+0x55/0xb0
[  881.025885][T10842]  ? clear_bhb_loop+0x55/0xb0
[  881.025992][T10842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.026055][T10842] RIP: 0033:0x7fca6671cda9
[  881.026073][T10842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  881.026094][T10842] RSP: 002b:00007fca64d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  881.026114][T10842] RAX: ffffffffffffffda RBX: 00007fca66935fa0 RCX: 00007fca6671cda9
[  881.026176][T10842] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003
[  881.026190][T10842] RBP: 00007fca64d81090 R08: 0000000000000010 R09: 0000000000000000
[  881.026203][T10842] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  881.026277][T10842] R13: 0000000000000000 R14: 00007fca66935fa0 R15: 00007ffd594b5718
[  881.026309][T10842]  </TASK>
[  881.347366][   T29] kauditd_printk_skb: 1013 callbacks suppressed
[  881.347383][   T29] audit: type=1326 audit(14127204.389:123860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.377482][   T29] audit: type=1326 audit(14127204.389:123861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.401069][   T29] audit: type=1326 audit(14127204.389:123862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.424796][   T29] audit: type=1326 audit(14127204.389:123863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.448490][   T29] audit: type=1326 audit(14127204.389:123864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.472572][   T29] audit: type=1326 audit(14127204.389:123865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.496245][   T29] audit: type=1326 audit(14127204.389:123866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.519858][   T29] audit: type=1326 audit(14127204.389:123867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.543646][   T29] audit: type=1326 audit(14127204.389:123868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.568340][   T29] audit: type=1326 audit(14127204.419:123869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10857 comm="syz.1.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  881.654935][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14284'.
[  881.685896][T10875] netlink: 'syz.1.14286': attribute type 9 has an invalid length.
[  881.751265][T10884] xt_hashlimit: max too large, truncated to 1048576
[  881.763767][T10884] Cannot find set identified by id 0 to match
[  882.084552][T10893] lo speed is unknown, defaulting to 1000
[  882.176241][T10939] x_tables: duplicate underflow at hook 2
[  882.293297][T10893] chnl_net:caif_netlink_parms(): no params data found
[  882.385076][T10893] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.392345][T10893] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.405444][T10893] bridge_slave_0: entered allmulticast mode
[  882.422584][T10893] bridge_slave_0: entered promiscuous mode
[  882.430097][T10893] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.437241][T10893] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.451645][T10893] bridge_slave_1: entered allmulticast mode
[  882.458524][T10893] bridge_slave_1: entered promiscuous mode
[  882.541773][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  882.564961][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.593583][T10893] team0: Port device team_slave_0 added
[  882.608525][T10893] team0: Port device team_slave_1 added
[  882.657995][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.664976][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  882.691022][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.712940][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.720094][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  882.746115][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.773006][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14326'.
[  882.793322][T10893] hsr_slave_0: entered promiscuous mode
[  882.812585][T10893] hsr_slave_1: entered promiscuous mode
[  882.819725][T10990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10990 comm=syz.1.14327
[  882.832599][T10990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10990 comm=syz.1.14327
[  882.847122][T10893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  882.860569][T10893] Cannot create hsr debugfs directory
[  882.976141][T10893] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  882.986521][T10893] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.050322][T10893] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  883.061054][T10893] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.077388][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14336'.
[  883.108810][T10893] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  883.119264][T10893] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.160870][T10893] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  883.171291][T10893] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.229384][T10893] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  883.238738][T10893] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  883.249291][T10893] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  883.260815][T10893] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  883.343656][T11027] bond_slave_0: entered promiscuous mode
[  883.349379][T11027] bond_slave_1: entered promiscuous mode
[  883.358735][T11027] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  883.367669][T11027] bond_slave_0: left promiscuous mode
[  883.373098][T11027] bond_slave_1: left promiscuous mode
[  883.383218][T10893] 8021q: adding VLAN 0 to HW filter on device bond0
[  883.399759][T10893] 8021q: adding VLAN 0 to HW filter on device team0
[  883.416669][T31627] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.423789][T31627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  883.434361][T31627] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.441612][T31627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.480831][T11039] xt_hashlimit: max too large, truncated to 1048576
[  883.561334][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  883.701798][T11068] __nla_validate_parse: 3 callbacks suppressed
[  883.701819][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14356'.
[  883.814078][T10893] veth0_vlan: entered promiscuous mode
[  883.836298][T10893] veth1_vlan: entered promiscuous mode
[  883.837454][T11078] xt_hashlimit: max too large, truncated to 1048576
[  883.867802][T10893] veth0_macvtap: entered promiscuous mode
[  883.875136][T11078] Cannot find set identified by id 0 to match
[  883.884211][T10893] veth1_macvtap: entered promiscuous mode
[  883.894716][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.905424][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.915498][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.926012][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.935972][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.946517][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.956646][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.967214][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.977426][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  883.987961][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  883.997821][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  884.008284][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.027927][T10893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  884.049150][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.059659][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.069657][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.080230][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.090093][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.100627][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.110595][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.121179][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.131045][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.141539][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.151401][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  884.161944][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  884.174025][T10893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  884.183568][T10893] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.192524][T10893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  884.201339][T10893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  884.210104][T10893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  884.327683][T11094] syzkaller0: entered promiscuous mode
[  884.333339][T11094] syzkaller0: entered allmulticast mode
[  884.370697][T11094] IPv6: NLM_F_CREATE should be specified when creating new route
[  884.452705][T11100] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  884.461319][T11101] bond1: entered promiscuous mode
[  884.466674][T11101] bond1: entered allmulticast mode
[  884.472001][T11101] 8021q: adding VLAN 0 to HW filter on device bond1
[  884.481215][T11101] bond1 (unregistering): Released all slaves
[  884.496081][T11100] bridge0: entered promiscuous mode
[  884.501436][T11100] macvlan2: entered promiscuous mode
[  884.508332][T11100] bridge0: port 7(macvlan2) entered blocking state
[  884.515117][T11100] bridge0: port 7(macvlan2) entered disabled state
[  884.521939][T11100] macvlan2: entered allmulticast mode
[  884.527675][T11100] bridge0: entered allmulticast mode
[  884.558975][T11100] macvlan2: left allmulticast mode
[  884.564159][T11100] bridge0: left allmulticast mode
[  884.570038][T11100] bridge0: left promiscuous mode
[  884.767095][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14374'.
[  884.896816][T11131] bond1: entered promiscuous mode
[  884.901911][T11131] bond1: entered allmulticast mode
[  884.915434][T11131] 8021q: adding VLAN 0 to HW filter on device bond1
[  884.927531][T11131] bond1 (unregistering): Released all slaves
[  884.943934][T11142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  884.952789][T11142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  884.961622][T11142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  884.970420][T11142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  884.982968][T11143] geneve2: entered promiscuous mode
[  885.099123][T11162] xt_hashlimit: max too large, truncated to 1048576
[  885.107408][T11162] Cannot find set identified by id 0 to match
[  885.161258][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14393'.
[  885.211741][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14395'.
[  885.278507][T11175] bond1: entered promiscuous mode
[  885.283668][T11175] bond1: entered allmulticast mode
[  885.289433][T11175] 8021q: adding VLAN 0 to HW filter on device bond1
[  885.302488][T11175] bond1 (unregistering): Released all slaves
[  885.401959][T11182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11182 comm=syz.6.14400
[  885.414807][T11182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11182 comm=syz.6.14400
[  885.526112][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14404'.
[  885.558592][T11193] vlan2: entered allmulticast mode
[  885.770702][T11202] bond1: entered promiscuous mode
[  885.775917][T11202] bond1: entered allmulticast mode
[  885.781233][T11202] 8021q: adding VLAN 0 to HW filter on device bond1
[  885.792495][T11202] bond1 (unregistering): Released all slaves
[  885.877645][T11209] xt_hashlimit: max too large, truncated to 1048576
[  885.886769][T11209] Cannot find set identified by id 0 to match
[  885.918043][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14411'.
[  886.029587][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14417'.
[  886.070856][T11223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  886.078427][T11223] batman_adv: batadv0: Removing interface: batadv_slave_0
[  886.093879][T11223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  886.101589][T11223] batman_adv: batadv0: Removing interface: batadv_slave_1
[  886.266821][T11236] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  886.289201][T11236] bridge0: entered promiscuous mode
[  886.294543][T11236] macvlan2: entered promiscuous mode
[  886.318806][T11236] bridge0: port 3(macvlan2) entered blocking state
[  886.325599][T11236] bridge0: port 3(macvlan2) entered disabled state
[  886.358386][T11236] macvlan2: entered allmulticast mode
[  886.363816][T11236] bridge0: entered allmulticast mode
[  886.376098][T11236] macvlan2: left allmulticast mode
[  886.381327][T11236] bridge0: left allmulticast mode
[  886.387462][T11236] bridge0: left promiscuous mode
[  886.400043][   T29] kauditd_printk_skb: 1129 callbacks suppressed
[  886.400058][   T29] audit: type=1326 audit(14127209.439:124999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.436043][   T29] audit: type=1326 audit(14127209.439:125000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.459733][   T29] audit: type=1326 audit(14127209.439:125001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.483484][   T29] audit: type=1326 audit(14127209.439:125002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.507103][   T29] audit: type=1326 audit(14127209.439:125003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.530782][   T29] audit: type=1326 audit(14127209.439:125004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.554406][   T29] audit: type=1326 audit(14127209.439:125005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.578094][   T29] audit: type=1326 audit(14127209.439:125006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.601708][   T29] audit: type=1326 audit(14127209.439:125007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.628803][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14429'.
[  886.634752][   T29] audit: type=1326 audit(14127209.479:125008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11247 comm="syz.1.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  886.750392][T11266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11266 comm=syz.7.14434
[  886.763171][T11266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11266 comm=syz.7.14434
[  886.865062][T11286] xt_hashlimit: max too large, truncated to 1048576
[  886.874229][T11286] Cannot find set identified by id 0 to match
[  886.921924][T11288] bridge0: entered promiscuous mode
[  886.927615][T11288] macvlan2: entered promiscuous mode
[  886.934262][T11288] bridge0: port 6(macvlan2) entered blocking state
[  886.941186][T11288] bridge0: port 6(macvlan2) entered disabled state
[  886.949848][T11288] macvlan2: entered allmulticast mode
[  886.955528][T11288] bridge0: entered allmulticast mode
[  886.962613][T11288] macvlan2: left allmulticast mode
[  886.967897][T11288] bridge0: left allmulticast mode
[  886.974022][T11288] bridge0: left promiscuous mode
[  887.183766][T11329] lo speed is unknown, defaulting to 1000
[  887.696041][T11362] FAULT_INJECTION: forcing a failure.
[  887.696041][T11362] name failslab, interval 1, probability 0, space 0, times 0
[  887.708780][T11362] CPU: 1 UID: 0 PID: 11362 Comm: syz.7.14468 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  887.708868][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  887.708881][T11362] Call Trace:
[  887.708888][T11362]  <TASK>
[  887.708896][T11362]  dump_stack_lvl+0xf2/0x150
[  887.708930][T11362]  dump_stack+0x15/0x1a
[  887.708993][T11362]  should_fail_ex+0x24a/0x260
[  887.709032][T11362]  should_failslab+0x8f/0xb0
[  887.709091][T11362]  kmem_cache_alloc_noprof+0x52/0x320
[  887.709127][T11362]  ? sctp_get_port_local+0x410/0xa90
[  887.709161][T11362]  sctp_get_port_local+0x410/0xa90
[  887.709210][T11362]  sctp_do_bind+0x3a1/0x4c0
[  887.709282][T11362]  sctp_connect_new_asoc+0x15b/0x3b0
[  887.709322][T11362]  sctp_sendmsg+0xf05/0x1920
[  887.709404][T11362]  ? __pfx_sctp_sendmsg+0x10/0x10
[  887.709439][T11362]  inet_sendmsg+0xc5/0xd0
[  887.709473][T11362]  __sock_sendmsg+0x102/0x180
[  887.709497][T11362]  __sys_sendto+0x1a8/0x230
[  887.709540][T11362]  __x64_sys_sendto+0x78/0x90
[  887.709642][T11362]  x64_sys_call+0x29fa/0x2dc0
[  887.709673][T11362]  do_syscall_64+0xc9/0x1c0
[  887.709763][T11362]  ? clear_bhb_loop+0x55/0xb0
[  887.709825][T11362]  ? clear_bhb_loop+0x55/0xb0
[  887.709858][T11362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.709890][T11362] RIP: 0033:0x7ffac2e2cda9
[  887.709908][T11362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  887.709929][T11362] RSP: 002b:00007ffac1497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  887.709955][T11362] RAX: ffffffffffffffda RBX: 00007ffac3045fa0 RCX: 00007ffac2e2cda9
[  887.710014][T11362] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000003
[  887.710028][T11362] RBP: 00007ffac1497090 R08: 000000002005ffe4 R09: 000000000000001c
[  887.710043][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.710057][T11362] R13: 0000000000000000 R14: 00007ffac3045fa0 R15: 00007ffd914139b8
[  887.710080][T11362]  </TASK>
[  887.863604][T11368] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  887.984600][T11372] FAULT_INJECTION: forcing a failure.
[  887.984600][T11372] name failslab, interval 1, probability 0, space 0, times 0
[  887.997643][T11372] CPU: 0 UID: 0 PID: 11372 Comm: syz.7.14472 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  887.997674][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  887.997745][T11372] Call Trace:
[  887.997751][T11372]  <TASK>
[  887.997759][T11372]  dump_stack_lvl+0xf2/0x150
[  887.997792][T11372]  dump_stack+0x15/0x1a
[  887.997819][T11372]  should_fail_ex+0x24a/0x260
[  887.997881][T11372]  should_failslab+0x8f/0xb0
[  887.997944][T11372]  kmem_cache_alloc_noprof+0x52/0x320
[  887.997978][T11372]  ? prepare_creds+0x37/0x480
[  887.998065][T11372]  prepare_creds+0x37/0x480
[  887.998095][T11372]  copy_creds+0x90/0x3f0
[  887.998191][T11372]  copy_process+0x64b/0x1fb0
[  887.998228][T11372]  ? 0xffffffff81000000
[  887.998380][T11372]  ? selinux_file_permission+0x22a/0x360
[  887.998405][T11372]  ? __rcu_read_unlock+0x4e/0x70
[  887.998435][T11372]  kernel_clone+0x167/0x5e0
[  887.998473][T11372]  ? vfs_write+0x644/0x920
[  887.998501][T11372]  __x64_sys_clone+0xe8/0x120
[  887.998553][T11372]  x64_sys_call+0x2d7e/0x2dc0
[  887.998579][T11372]  do_syscall_64+0xc9/0x1c0
[  887.998685][T11372]  ? clear_bhb_loop+0x55/0xb0
[  887.998755][T11372]  ? clear_bhb_loop+0x55/0xb0
[  887.998789][T11372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.998823][T11372] RIP: 0033:0x7ffac2e2cda9
[  887.998876][T11372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  887.998895][T11372] RSP: 002b:00007ffac1496fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  887.998914][T11372] RAX: ffffffffffffffda RBX: 00007ffac3045fa0 RCX: 00007ffac2e2cda9
[  887.998926][T11372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  887.998937][T11372] RBP: 00007ffac1497090 R08: 0000000000000000 R09: 0000000000000000
[  887.998949][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  887.999029][T11372] R13: 0000000000000001 R14: 00007ffac3045fa0 R15: 00007ffd914139b8
[  887.999047][T11372]  </TASK>
[  888.341022][T11384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11384 comm=syz.6.14477
[  888.353803][T11384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11384 comm=syz.6.14477
[  888.512363][T11403] bridge0: entered promiscuous mode
[  888.523601][T11403] macvlan2: entered promiscuous mode
[  888.541401][T11403] bridge0: port 3(macvlan2) entered blocking state
[  888.548127][T11403] bridge0: port 3(macvlan2) entered disabled state
[  888.555170][T11403] macvlan2: entered allmulticast mode
[  888.560960][T11403] bridge0: entered allmulticast mode
[  888.575468][T11403] macvlan2: left allmulticast mode
[  888.580650][T11403] bridge0: left allmulticast mode
[  888.595405][T11403] bridge0: left promiscuous mode
[  888.837123][T11423] __nla_validate_parse: 7 callbacks suppressed
[  888.837163][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14492'.
[  889.265388][T11460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14506'.
[  889.283283][T11459] netlink: 68 bytes leftover after parsing attributes in process `syz.6.14505'.
[  889.295283][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14505'.
[  889.304345][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14505'.
[  889.355904][T11463] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  889.431140][T11463] bridge0: entered promiscuous mode
[  889.441143][T11463] macvlan2: entered promiscuous mode
[  889.466624][T11463] bridge0: port 7(macvlan2) entered blocking state
[  889.473237][T11463] bridge0: port 7(macvlan2) entered disabled state
[  889.488369][T11463] macvlan2: entered allmulticast mode
[  889.493837][T11463] bridge0: entered allmulticast mode
[  889.509647][T11463] macvlan2: left allmulticast mode
[  889.514796][T11463] bridge0: left allmulticast mode
[  889.565788][T11463] bridge0: left promiscuous mode
[  889.725414][T11488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11488 comm=syz.7.14516
[  889.738270][T11488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11488 comm=syz.7.14516
[  889.885553][T11513] FAULT_INJECTION: forcing a failure.
[  889.885553][T11513] name failslab, interval 1, probability 0, space 0, times 0
[  889.898307][T11513] CPU: 1 UID: 0 PID: 11513 Comm: syz.6.14521 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  889.898336][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  889.898351][T11513] Call Trace:
[  889.898359][T11513]  <TASK>
[  889.898368][T11513]  dump_stack_lvl+0xf2/0x150
[  889.898402][T11513]  dump_stack+0x15/0x1a
[  889.898429][T11513]  should_fail_ex+0x24a/0x260
[  889.898541][T11513]  ? alloc_pipe_info+0xb0/0x360
[  889.898573][T11513]  should_failslab+0x8f/0xb0
[  889.898601][T11513]  __kmalloc_cache_noprof+0x4e/0x320
[  889.898674][T11513]  alloc_pipe_info+0xb0/0x360
[  889.898769][T11513]  splice_direct_to_actor+0x60f/0x670
[  889.898840][T11513]  ? __pfx_direct_splice_actor+0x10/0x10
[  889.898919][T11513]  ? selinux_file_permission+0x327/0x360
[  889.898966][T11513]  do_splice_direct+0xd7/0x150
[  889.898991][T11513]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  889.899081][T11513]  do_sendfile+0x398/0x660
[  889.899114][T11513]  __x64_sys_sendfile64+0x110/0x150
[  889.899147][T11513]  x64_sys_call+0xfbd/0x2dc0
[  889.899179][T11513]  do_syscall_64+0xc9/0x1c0
[  889.899296][T11513]  ? clear_bhb_loop+0x55/0xb0
[  889.899331][T11513]  ? clear_bhb_loop+0x55/0xb0
[  889.899366][T11513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.899415][T11513] RIP: 0033:0x7f6456c0cda9
[  889.899433][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.899453][T11513] RSP: 002b:00007f6455277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  889.899476][T11513] RAX: ffffffffffffffda RBX: 00007f6456e25fa0 RCX: 00007f6456c0cda9
[  889.899520][T11513] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[  889.899535][T11513] RBP: 00007f6455277090 R08: 0000000000000000 R09: 0000000000000000
[  889.899549][T11513] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001
[  889.899564][T11513] R13: 0000000000000000 R14: 00007f6456e25fa0 R15: 00007ffce6777998
[  889.899586][T11513]  </TASK>
[  890.361001][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14525'.
[  890.942701][T11652] xt_hashlimit: max too large, truncated to 1048576
[  890.950133][T11652] Cannot find set identified by id 0 to match
[  890.979176][T11654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11654 comm=syz.7.14537
[  890.992410][T11654] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11654 comm=syz.7.14537
[  891.239407][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14545'.
[  891.291435][T11679] xt_hashlimit: max too large, truncated to 1048576
[  891.383258][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14550'.
[  891.432233][   T29] kauditd_printk_skb: 744 callbacks suppressed
[  891.432251][   T29] audit: type=1326 audit(14127214.469:125753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.466287][T11689] lo speed is unknown, defaulting to 1000
[  891.501170][T11692] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14553'.
[  891.502830][   T29] audit: type=1326 audit(14127214.519:125754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.534251][   T29] audit: type=1326 audit(14127214.519:125755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.558070][   T29] audit: type=1326 audit(14127214.519:125756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.581951][   T29] audit: type=1326 audit(14127214.519:125757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.605601][   T29] audit: type=1326 audit(14127214.519:125758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.629352][   T29] audit: type=1326 audit(14127214.519:125759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.653470][   T29] audit: type=1326 audit(14127214.519:125760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.677203][   T29] audit: type=1326 audit(14127214.519:125761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.700851][   T29] audit: type=1326 audit(14127214.519:125762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11686 comm="syz.0.14551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  891.867997][T11711] block device autoloading is deprecated and will be removed.
[  892.035255][T11725] 9pnet: Could not find request transport: fd.rfdno=s·1µ<ŽWÖÓ=0x0000000000000007
[  892.248039][T11725] 9pnet_fd: Insufficient options for proto=fd
[  892.258462][T11736] netlink: 'syz.7.14569': attribute type 1 has an invalid length.
[  892.413484][T11743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11743 comm=syz.7.14573
[  892.426418][T11743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11743 comm=syz.7.14573
[  892.487646][T11750] hsr_slave_1 (unregistering): left promiscuous mode
[  892.512128][T11754] bond0: entered promiscuous mode
[  892.517270][T11754] bond0: entered allmulticast mode
[  892.522825][T11754] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.533157][T11754] bond0 (unregistering): Released all slaves
[  892.718522][T11774] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP
[  892.718522][T11774] n'º|$@OOݱµ’-®+·el'
[  892.970610][T11794] bond1: entered promiscuous mode
[  892.975820][T11794] bond1: entered allmulticast mode
[  892.993692][T11794] 8021q: adding VLAN 0 to HW filter on device bond1
[  893.016495][T11794] bond1 (unregistering): Released all slaves
[  893.367649][T11810] bridge0: entered promiscuous mode
[  893.372975][T11810] macvlan2: entered promiscuous mode
[  893.430452][T11810] bridge0: port 3(macvlan2) entered blocking state
[  893.437226][T11810] bridge0: port 3(macvlan2) entered disabled state
[  893.454797][T11810] macvlan2: entered allmulticast mode
[  893.460233][T11810] bridge0: entered allmulticast mode
[  893.515881][T11810] macvlan2: left allmulticast mode
[  893.521057][T11810] bridge0: left allmulticast mode
[  893.527105][T11810] bridge0: left promiscuous mode
[  893.670349][T11835] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  893.723734][T11837] xt_hashlimit: max too large, truncated to 1048576
[  893.748362][T11837] Cannot find set identified by id 0 to match
[  894.065540][T11855] __nla_validate_parse: 11 callbacks suppressed
[  894.065558][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14618'.
[  894.107085][T11859] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  894.168186][T11859] bridge0: entered promiscuous mode
[  894.173603][T11859] macvlan2: entered promiscuous mode
[  894.190687][T11859] bridge0: port 4(macvlan2) entered blocking state
[  894.197295][T11859] bridge0: port 4(macvlan2) entered disabled state
[  894.221506][T11859] macvlan2: entered allmulticast mode
[  894.227129][T11859] bridge0: entered allmulticast mode
[  894.254030][T11859] macvlan2: left allmulticast mode
[  894.259261][T11859] bridge0: left allmulticast mode
[  894.289035][T11859] bridge0: left promiscuous mode
[  894.477181][T11873] xt_hashlimit: max too large, truncated to 1048576
[  894.545739][T11875] xt_hashlimit: max too large, truncated to 1048576
[  894.572838][T11875] Cannot find set identified by id 0 to match
[  894.715669][T11886] bond1: entered promiscuous mode
[  894.720768][T11886] bond1: entered allmulticast mode
[  894.759677][T11886] 8021q: adding VLAN 0 to HW filter on device bond1
[  894.811435][T11886] bond1 (unregistering): Released all slaves
[  894.874246][T11906] xt_hashlimit: max too large, truncated to 1048576
[  894.902648][T11906] Cannot find set identified by id 0 to match
[  895.910260][T12003] bond1: entered promiscuous mode
[  895.915398][T12003] bond1: entered allmulticast mode
[  895.921224][T12003] 8021q: adding VLAN 0 to HW filter on device bond1
[  895.932061][T12003] bond1 (unregistering): Released all slaves
[  896.194230][T11968] 9pnet_fd: p9_fd_create_tcp (11968): problem connecting socket to 127.0.0.1
[  896.335479][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14692'.
[  896.458004][   T29] kauditd_printk_skb: 721 callbacks suppressed
[  896.458023][   T29] audit: type=1326 audit(14127219.499:126484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.14696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d774cda9 code=0x7ffc0000
[  896.461731][T12039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14697'.
[  896.464355][   T29] audit: type=1326 audit(14127219.499:126485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.14696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d774cda9 code=0x7ffc0000
[  896.537661][   T29] audit: type=1326 audit(14127219.499:126486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.14696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f02d774cda9 code=0x7ffc0000
[  896.544368][T12041] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  896.561903][   T29] audit: type=1400 audit(14127219.569:126487): avc:  denied  { module_request } for  pid=12040 comm="syz.0.14698" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  896.593073][   T29] audit: type=1400 audit(14127219.569:126488): avc:  denied  { sys_module } for  pid=12040 comm="syz.0.14698" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  896.614996][   T29] audit: type=1400 audit(14127219.579:126489): avc:  denied  { create } for  pid=12040 comm="syz.0.14698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  896.634745][   T29] audit: type=1400 audit(14127219.579:126490): avc:  denied  { write } for  pid=12040 comm="syz.0.14698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  896.656844][   T29] audit: type=1326 audit(14127219.699:126491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.14696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d774cda9 code=0x7ffc0000
[  896.680540][   T29] audit: type=1326 audit(14127219.699:126492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12036 comm="syz.2.14696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d774cda9 code=0x7ffc0000
[  896.711514][   T29] audit: type=1326 audit(14127219.729:126493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12047 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73516dcda9 code=0x7ffc0000
[  896.805701][T12057] bond1: entered promiscuous mode
[  896.810784][T12057] bond1: entered allmulticast mode
[  896.816447][T12057] 8021q: adding VLAN 0 to HW filter on device bond1
[  896.825438][T12057] bond1 (unregistering): Released all slaves
[  897.722248][T12125] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  897.742774][T12125] bridge0: entered promiscuous mode
[  897.748195][T12125] macvlan2: entered promiscuous mode
[  897.755160][T12125] bridge0: port 6(macvlan2) entered blocking state
[  897.761843][T12125] bridge0: port 6(macvlan2) entered disabled state
[  897.770578][T12125] macvlan2: entered allmulticast mode
[  897.776108][T12125] bridge0: entered allmulticast mode
[  897.786651][T12125] macvlan2: left allmulticast mode
[  897.791847][T12125] bridge0: left allmulticast mode
[  897.805249][T12125] bridge0: left promiscuous mode
[  898.227481][T12153] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  898.264991][T12155] bond1: entered promiscuous mode
[  898.270266][T12155] bond1: entered allmulticast mode
[  898.275850][T12155] 8021q: adding VLAN 0 to HW filter on device bond1
[  898.284839][T12155] bond1 (unregistering): Released all slaves
[  898.296348][T12153] bridge0: entered promiscuous mode
[  898.301714][T12153] macvlan2: entered promiscuous mode
[  898.308603][T12153] bridge0: port 4(macvlan2) entered blocking state
[  898.315168][T12153] bridge0: port 4(macvlan2) entered disabled state
[  898.322092][T12153] macvlan2: entered allmulticast mode
[  898.327702][T12153] bridge0: entered allmulticast mode
[  898.342886][T12153] macvlan2: left allmulticast mode
[  898.348243][T12153] bridge0: left allmulticast mode
[  898.356084][T12153] bridge0: left promiscuous mode
[  898.447630][T12165] 9pnet_fd: p9_fd_create_tcp (12165): problem connecting socket to 127.0.0.1
[  898.662949][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14757'.
[  898.675009][T12188] xt_hashlimit: max too large, truncated to 1048576
[  898.677559][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14757'.
[  898.719328][T12191] 9pnet_fd: p9_fd_create_tcp (12191): problem connecting socket to 127.0.0.1
[  898.733841][T12193] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  898.742731][T12193] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  898.751571][T12193] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  898.760415][T12193] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  898.925129][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14766'.
[  899.046779][T12219] bond1: entered promiscuous mode
[  899.051869][T12219] bond1: entered allmulticast mode
[  899.057353][T12219] 8021q: adding VLAN 0 to HW filter on device bond1
[  899.069989][T12219] bond1 (unregistering): Released all slaves
[  899.533505][T12286] bond1: entered promiscuous mode
[  899.538911][T12286] bond1: entered allmulticast mode
[  899.544396][T12286] 8021q: adding VLAN 0 to HW filter on device bond1
[  899.557457][T12286] bond1 (unregistering): Released all slaves
[  899.664788][T12301] xt_hashlimit: max too large, truncated to 1048576
[  899.672297][T12301] Cannot find set identified by id 0 to match
[  899.751323][T12313] FAULT_INJECTION: forcing a failure.
[  899.751323][T12313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  899.764499][T12313] CPU: 0 UID: 0 PID: 12313 Comm: syz.1.14813 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  899.764548][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  899.764560][T12313] Call Trace:
[  899.764566][T12313]  <TASK>
[  899.764573][T12313]  dump_stack_lvl+0xf2/0x150
[  899.764607][T12313]  dump_stack+0x15/0x1a
[  899.764658][T12313]  should_fail_ex+0x24a/0x260
[  899.764695][T12313]  should_fail+0xb/0x10
[  899.764794][T12313]  should_fail_usercopy+0x1a/0x20
[  899.764852][T12313]  _copy_to_user+0x20/0xa0
[  899.764894][T12313]  simple_read_from_buffer+0xa0/0x110
[  899.764987][T12313]  proc_fail_nth_read+0xf9/0x140
[  899.765027][T12313]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  899.765056][T12313]  vfs_read+0x19b/0x6f0
[  899.765074][T12313]  ? mntput_no_expire+0x70/0x3d0
[  899.765099][T12313]  ? __rcu_read_unlock+0x4e/0x70
[  899.765119][T12313]  ? __fget_files+0x17c/0x1c0
[  899.765207][T12313]  ksys_read+0xe8/0x1b0
[  899.765283][T12313]  __x64_sys_read+0x42/0x50
[  899.765306][T12313]  x64_sys_call+0x2874/0x2dc0
[  899.765332][T12313]  do_syscall_64+0xc9/0x1c0
[  899.765369][T12313]  ? clear_bhb_loop+0x55/0xb0
[  899.765415][T12313]  ? clear_bhb_loop+0x55/0xb0
[  899.765442][T12313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.765475][T12313] RIP: 0033:0x7fca6671b7bc
[  899.765518][T12313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  899.765571][T12313] RSP: 002b:00007fca64d81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  899.765594][T12313] RAX: ffffffffffffffda RBX: 00007fca66935fa0 RCX: 00007fca6671b7bc
[  899.765609][T12313] RDX: 000000000000000f RSI: 00007fca64d810a0 RDI: 0000000000000003
[  899.765624][T12313] RBP: 00007fca64d81090 R08: 0000000000000000 R09: 0000000000000000
[  899.765639][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  899.765653][T12313] R13: 0000000000000000 R14: 00007fca66935fa0 R15: 00007ffd594b5718
[  899.765673][T12313]  </TASK>
[  899.874747][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14818'.
[  899.983066][T12321] bond0: entered promiscuous mode
[  899.988203][T12321] bond0: entered allmulticast mode
[  900.012791][T12321] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.030885][T12321] bond0 (unregistering): Released all slaves
[  900.266676][T12357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14832'.
[  900.376396][T12367] lo speed is unknown, defaulting to 1000
[  900.522533][T12379] program syz.6.14841 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  900.535394][T12379] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  900.538904][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14842'.
[  900.687265][T12396] bond0: entered promiscuous mode
[  900.692386][T12396] bond0: entered allmulticast mode
[  900.697870][T12396] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.712718][T12396] bond0 (unregistering): Released all slaves
[  900.781967][T12400] lo speed is unknown, defaulting to 1000
[  900.844339][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14853'.
[  900.935300][T12342] 9pnet_fd: p9_fd_create_tcp (12342): problem connecting socket to 127.0.0.1
[  901.083949][T12424] netem: change failed
[  901.201385][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14863'.
[  901.221701][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14864'.
[  901.233621][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14863'.
[  901.465706][   T29] kauditd_printk_skb: 2164 callbacks suppressed
[  901.465724][   T29] audit: type=1326 audit(14127224.509:128658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca66713d67 code=0x7ffc0000
[  901.501356][   T29] audit: type=1326 audit(14127224.539:128659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca666b8fa9 code=0x7ffc0000
[  901.525046][   T29] audit: type=1326 audit(14127224.539:128660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca66713d67 code=0x7ffc0000
[  901.548827][   T29] audit: type=1326 audit(14127224.539:128661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca666b8fa9 code=0x7ffc0000
[  901.572602][   T29] audit: type=1326 audit(14127224.539:128662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  901.602206][   T29] audit: type=1326 audit(14127224.569:128663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca66713d67 code=0x7ffc0000
[  901.625955][   T29] audit: type=1326 audit(14127224.569:128664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca666b8fa9 code=0x7ffc0000
[  901.649536][   T29] audit: type=1326 audit(14127224.569:128665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  901.673255][   T29] audit: type=1326 audit(14127224.569:128666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  901.697039][   T29] audit: type=1326 audit(14127224.569:128667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.1.14844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6671cda9 code=0x7ffc0000
[  901.788726][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14875'.
[  901.839874][T12468] lo: entered allmulticast mode
[  901.851129][T12468] lo: left allmulticast mode
[  901.862441][T12473] ==================================================================
[  901.870566][T12473] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[  901.877371][T12473] 
[  901.879706][T12473] write to 0xffff888104d6d600 of 8 bytes by task 12466 on cpu 1:
[  901.887537][T12473]  mas_wmb_replace+0x222/0x14d0
[  901.892476][T12473]  mas_wr_store_entry+0x1819/0x2e80
[  901.897807][T12473]  mas_store_prealloc+0x6bf/0x960
[  901.902868][T12473]  vma_complete+0x3a7/0x760
[  901.907403][T12473]  __split_vma+0x5d6/0x6a0
[  901.911844][T12473]  vma_modify+0xd3/0x1e0
[  901.916104][T12473]  vma_modify_flags+0xf1/0x120
[  901.920881][T12473]  mprotect_fixup+0x31a/0x5e0
[  901.925577][T12473]  do_mprotect_pkey+0x6cc/0x9a0
[  901.930434][T12473]  __x64_sys_mprotect+0x48/0x60
[  901.935302][T12473]  x64_sys_call+0x2770/0x2dc0
[  901.939991][T12473]  do_syscall_64+0xc9/0x1c0
[  901.944533][T12473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.950439][T12473] 
[  901.952765][T12473] read to 0xffff888104d6d600 of 8 bytes by task 12473 on cpu 0:
[  901.960402][T12473]  mas_walk+0x123/0x320
[  901.964597][T12473]  lock_vma_under_rcu+0x95/0x270
[  901.969559][T12473]  exc_page_fault+0x150/0x650
[  901.974272][T12473]  asm_exc_page_fault+0x26/0x30
[  901.979135][T12473] 
[  901.981489][T12473] value changed: 0xffff88811786b4c1 -> 0xffff888104d6d600
[  901.988684][T12473] 
[  901.991007][T12473] Reported by Kernel Concurrency Sanitizer on:
[  901.997161][T12473] CPU: 0 UID: 0 PID: 12473 Comm: syz.6.14878 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0
[  902.007667][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  902.017749][T12473] ==================================================================