ffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 666.356933][T27764] FAULT_INJECTION: forcing a failure. [ 666.356933][T27764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x600000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 666.360996][T27764] CPU: 1 PID: 27764 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 666.363609][T27764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 666.366555][T27764] Call trace: [ 666.367451][T27764] dump_backtrace+0x1b8/0x1e4 [ 666.368691][T27764] show_stack+0x2c/0x44 [ 666.369850][T27764] dump_stack_lvl+0xd0/0x124 [ 666.371098][T27764] dump_stack+0x1c/0x28 [ 666.372263][T27764] should_fail_ex+0x3f8/0x5c4 [ 666.373587][T27764] __should_fail_alloc_page+0x104/0x124 [ 666.375157][T27764] should_fail_alloc_page+0x10/0x20 [ 666.376649][T27764] prepare_alloc_pages+0x1b0/0x554 [ 666.378019][T27764] __alloc_pages+0x150/0x698 [ 666.379244][T27764] alloc_pages+0x4bc/0x7c0 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) [ 666.380456][T27764] __get_free_pages+0x18/0x84 [ 666.381780][T27764] kasan_populate_vmalloc_pte+0x50/0xf0 [ 666.383272][T27764] __apply_to_page_range+0x76c/0xc78 [ 666.384681][T27764] apply_to_page_range+0x4c/0x64 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x700000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 666.386001][T27764] kasan_populate_vmalloc+0x60/0x70 [ 666.387434][T27764] alloc_vmap_area+0x1924/0x1a54 [ 666.388704][T27764] __get_vm_area_node+0x1b8/0x38c [ 666.390071][T27764] __vmalloc_node_range+0x1dc/0xebc [ 666.391500][T27764] __vmalloc+0xb8/0xe0 [ 666.392578][T27764] bpf_prog_alloc_no_stats+0x60/0x438 [ 666.394003][T27764] bpf_prog_alloc+0x48/0x108 [ 666.395293][T27764] bpf_prog_load+0x544/0x16c8 [ 666.396524][T27764] __sys_bpf+0x2ac/0x5dc [ 666.397645][T27764] __arm64_sys_bpf+0x80/0x98 [ 666.398865][T27764] invoke_syscall+0x98/0x2b8 [ 666.400119][T27764] el0_svc_common+0x130/0x23c [ 666.401514][T27764] do_el0_svc+0x48/0x58 [ 666.402570][T27764] el0_svc+0x54/0x158 [ 666.403690][T27764] el0t_64_sync_handler+0x84/0xfc [ 666.405050][T27764] el0t_64_sync+0x190/0x194 00:11:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:06 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:06 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 47) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1f000, 0x1, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x1}, 0x48) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1f000, 0x1, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x1}, 0x48) 00:11:06 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x800000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 666.494486][T27785] warn_alloc: 45 callbacks suppressed [ 666.494502][T27785] syz-executor.5: vmalloc error: size 118784, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0x4, 0x4, 0x5, 0x8, 0x6}, @generic={0x0, 0x1, 0x0, 0x7, 0x8001}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) [ 666.507718][T27785] CPU: 1 PID: 27785 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 666.510390][T27785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 666.513052][T27785] Call trace: [ 666.513894][T27785] dump_backtrace+0x1b8/0x1e4 [ 666.515073][T27785] show_stack+0x2c/0x44 [ 666.516206][T27785] dump_stack_lvl+0xd0/0x124 [ 666.517462][T27785] dump_stack+0x1c/0x28 [ 666.518554][T27785] warn_alloc+0x220/0x400 [ 666.519743][T27785] __vmalloc_node_range+0xcbc/0xebc [ 666.521233][T27785] __vmalloc+0xb8/0xe0 [ 666.522391][T27785] bpf_prog_alloc_no_stats+0x60/0x438 [ 666.523815][T27785] bpf_prog_alloc+0x48/0x108 [ 666.525071][T27785] bpf_prog_load+0x544/0x16c8 [ 666.526442][T27785] __sys_bpf+0x2ac/0x5dc [ 666.527658][T27785] __arm64_sys_bpf+0x80/0x98 [ 666.528916][T27785] invoke_syscall+0x98/0x2b8 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x900000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 666.530149][T27785] el0_svc_common+0x130/0x23c [ 666.531478][T27785] do_el0_svc+0x48/0x58 [ 666.532592][T27785] el0_svc+0x54/0x158 [ 666.533685][T27785] el0t_64_sync_handler+0x84/0xfc [ 666.534991][T27785] el0t_64_sync+0x190/0x194 00:11:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xf, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0x4, 0x4, 0x5, 0x8, 0x6}, @generic={0x0, 0x1, 0x0, 0x7, 0x8001}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x1f000, 0x1, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x1}, 0x48) 00:11:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x70bd29, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 666.614137][T27785] Mem-Info: [ 666.615019][T27785] active_anon:7878 inactive_anon:16792 isolated_anon:0 [ 666.615019][T27785] active_file:3536 inactive_file:8181 isolated_file:0 [ 666.615019][T27785] unevictable:768 dirty:11 writeback:0 [ 666.615019][T27785] slab_reclaimable:14355 slab_unreclaimable:91729 [ 666.615019][T27785] mapped:18722 shmem:9856 pagetables:471 [ 666.615019][T27785] sec_pagetables:0 bounce:0 [ 666.615019][T27785] kernel_misc_reclaimable:0 [ 666.615019][T27785] free:1459205 free_pcp:5051 free_cma:7360 [ 666.649822][T27785] Node 0 active_anon:31512kB inactive_anon:66468kB active_file:14144kB inactive_file:32724kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:74888kB dirty:44kB writeback:0kB shmem:39424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8196kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no [ 666.664205][T27785] Node 0 DMA free:3076864kB boost:0kB min:20556kB low:25692kB high:30828kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:29440kB [ 666.673396][T27785] lowmem_reserve[]: 0 0 3584 3584 3584 [ 666.675132][T27785] Node 0 Normal free:2759956kB boost:0kB min:24496kB low:30620kB high:36744kB reserved_highatomic:0KB active_anon:31512kB inactive_anon:66468kB active_file:14144kB inactive_file:32724kB unevictable:3072kB writepending:44kB present:5242880kB managed:3674288kB mlocked:0kB bounce:0kB free_pcp:20904kB local_pcp:13224kB free_cma:0kB [ 666.684575][T27785] lowmem_reserve[]: 0 0 0 0 0 [ 666.685986][T27785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 666.690213][T27785] Node 0 Normal: 5087*4kB (UME) 1163*8kB (UME) 1044*16kB (UME) 1002*32kB (UME) 831*64kB (UME) 246*128kB (UME) 48*256kB (UME) 12*512kB (UME) 4*1024kB (M) 3*2048kB (ME) 627*4096kB (UM) = 2759956kB [ 666.695550][T27785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.698658][T27785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 666.701350][T27785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 666.703906][T27785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 666.706425][T27785] 21573 total pagecache pages [ 666.708473][T27785] 0 pages in swap cache [ 666.709546][T27785] Free swap = 124996kB [ 666.710662][T27785] Total swap = 124996kB [ 666.712019][T27785] 2097152 pages RAM [ 666.713034][T27785] 0 pages HighMem/MovableOnly [ 666.714244][T27785] 408532 pages reserved [ 666.715365][T27785] 8192 pages cma reserved [ 666.716448][T27785] 0 pages hwpoisoned 00:11:06 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 48) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x7, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0x4, 0x4, 0x5, 0x8, 0x6}, @generic={0x0, 0x1, 0x0, 0x7, 0x8001}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xa00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x95d54adccecfc4f2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000140)) 00:11:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x70bd29, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xb00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x6, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @generic={0x4, 0x4, 0x5, 0x8, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x95d54adccecfc4f2) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000140)) 00:11:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x70bd29, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 666.794749][T27818] FAULT_INJECTION: forcing a failure. [ 666.794749][T27818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:06 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 666.836136][T27818] CPU: 0 PID: 27818 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 666.838863][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 666.841523][T27818] Call trace: [ 666.842338][T27818] dump_backtrace+0x1b8/0x1e4 [ 666.843611][T27818] show_stack+0x2c/0x44 [ 666.844727][T27818] dump_stack_lvl+0xd0/0x124 [ 666.846037][T27818] dump_stack+0x1c/0x28 [ 666.847249][T27818] should_fail_ex+0x3f8/0x5c4 [ 666.848506][T27818] __should_fail_alloc_page+0x104/0x124 [ 666.850000][T27818] should_fail_alloc_page+0x10/0x20 [ 666.851345][T27818] prepare_alloc_pages+0x1b0/0x554 [ 666.852848][T27818] __alloc_pages+0x150/0x698 [ 666.854112][T27818] alloc_pages+0x4bc/0x7c0 [ 666.855354][T27818] __get_free_pages+0x18/0x84 [ 666.856608][T27818] kasan_populate_vmalloc_pte+0x50/0xf0 [ 666.858128][T27818] __apply_to_page_range+0x76c/0xc78 [ 666.859564][T27818] apply_to_page_range+0x4c/0x64 [ 666.860888][T27818] kasan_populate_vmalloc+0x60/0x70 [ 666.862250][T27818] alloc_vmap_area+0x1924/0x1a54 [ 666.863508][T27818] __get_vm_area_node+0x1b8/0x38c [ 666.864899][T27818] __vmalloc_node_range+0x1dc/0xebc [ 666.866293][T27818] __vmalloc+0xb8/0xe0 [ 666.867401][T27818] bpf_prog_alloc_no_stats+0x60/0x438 [ 666.868834][T27818] bpf_prog_alloc+0x48/0x108 [ 666.870025][T27818] bpf_prog_load+0x544/0x16c8 [ 666.871276][T27818] __sys_bpf+0x2ac/0x5dc [ 666.872428][T27818] __arm64_sys_bpf+0x80/0x98 [ 666.873644][T27818] invoke_syscall+0x98/0x2b8 [ 666.874818][T27818] el0_svc_common+0x130/0x23c [ 666.876111][T27818] do_el0_svc+0x48/0x58 [ 666.877197][T27818] el0_svc+0x54/0x158 [ 666.878233][T27818] el0t_64_sync_handler+0x84/0xfc [ 666.879600][T27818] el0t_64_sync+0x190/0x194 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 49) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xc00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000480)) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0xb, 0xd, &(0x7f0000000040)}) 00:11:06 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x95d54adccecfc4f2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000140)) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000140)) [ 666.933575][T27839] FAULT_INJECTION: forcing a failure. [ 666.933575][T27839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:06 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xd00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 666.950548][T27839] CPU: 1 PID: 27839 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 666.953290][T27839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 666.956016][T27839] Call trace: [ 666.956917][T27839] dump_backtrace+0x1b8/0x1e4 [ 666.958233][T27839] show_stack+0x2c/0x44 [ 666.959351][T27839] dump_stack_lvl+0xd0/0x124 [ 666.960659][T27839] dump_stack+0x1c/0x28 [ 666.961807][T27839] should_fail_ex+0x3f8/0x5c4 [ 666.963098][T27839] __should_fail_alloc_page+0x104/0x124 [ 666.964634][T27839] should_fail_alloc_page+0x10/0x20 [ 666.965964][T27839] prepare_alloc_pages+0x1b0/0x554 [ 666.967376][T27839] __alloc_pages+0x150/0x698 [ 666.968609][T27839] alloc_pages+0x4bc/0x7c0 [ 666.969840][T27839] __get_free_pages+0x18/0x84 [ 666.971164][T27839] kasan_populate_vmalloc_pte+0x50/0xf0 [ 666.972692][T27839] __apply_to_page_range+0x76c/0xc78 [ 666.974098][T27839] apply_to_page_range+0x4c/0x64 [ 666.975484][T27839] kasan_populate_vmalloc+0x60/0x70 [ 666.976926][T27839] alloc_vmap_area+0x1924/0x1a54 [ 666.978286][T27839] __get_vm_area_node+0x1b8/0x38c [ 666.979696][T27839] __vmalloc_node_range+0x1dc/0xebc [ 666.981108][T27839] __vmalloc+0xb8/0xe0 [ 666.982237][T27839] bpf_prog_alloc_no_stats+0x60/0x438 [ 666.983723][T27839] bpf_prog_alloc+0x48/0x108 [ 666.984927][T27839] bpf_prog_load+0x544/0x16c8 [ 666.986199][T27839] __sys_bpf+0x2ac/0x5dc [ 666.987377][T27839] __arm64_sys_bpf+0x80/0x98 [ 666.988652][T27839] invoke_syscall+0x98/0x2b8 [ 666.989874][T27839] el0_svc_common+0x130/0x23c [ 666.991106][T27839] do_el0_svc+0x48/0x58 [ 666.992233][T27839] el0_svc+0x54/0x158 [ 666.993299][T27839] el0t_64_sync_handler+0x84/0xfc [ 666.994673][T27839] el0t_64_sync+0x190/0x194 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xe00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xf00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000480)) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0xb, 0xd, &(0x7f0000000040)}) 00:11:06 executing program 1: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7f}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:06 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:11:06 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 50) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x10000, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000480)) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0xb, 0xd, &(0x7f0000000040)}) 00:11:06 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1000000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x76, &(0x7f00000000c0)=""/118, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc00}, [@alu={0x7, 0x7e5ea0a7b929f1dc, 0x5, 0x9, 0x1, 0x4, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x8, 0x8, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x1, '\x00', r3, 0x32, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x7fff, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x90) 00:11:07 executing program 1: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7f}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:07 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x7, 0xfffeffff, 0x400, 0x90, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffffffff, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x48) 00:11:07 executing program 1: ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r0, 0x0, 0x1, 0x0, 0x7f}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1100000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) [ 667.174715][T27876] FAULT_INJECTION: forcing a failure. [ 667.174715][T27876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc00}, [@alu={0x7, 0x7e5ea0a7b929f1dc, 0x5, 0x9, 0x1, 0x4, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x8, 0x8, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x1, '\x00', r3, 0x32, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x7fff, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x90) [ 667.187346][T27876] CPU: 0 PID: 27876 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 667.190039][T27876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 667.192782][T27876] Call trace: [ 667.193634][T27876] dump_backtrace+0x1b8/0x1e4 [ 667.194874][T27876] show_stack+0x2c/0x44 [ 667.195932][T27876] dump_stack_lvl+0xd0/0x124 [ 667.197171][T27876] dump_stack+0x1c/0x28 [ 667.198289][T27876] should_fail_ex+0x3f8/0x5c4 [ 667.199486][T27876] __should_fail_alloc_page+0x104/0x124 [ 667.200985][T27876] should_fail_alloc_page+0x10/0x20 [ 667.202431][T27876] prepare_alloc_pages+0x1b0/0x554 [ 667.203891][T27876] __alloc_pages+0x150/0x698 [ 667.205163][T27876] alloc_pages+0x4bc/0x7c0 [ 667.206438][T27876] __get_free_pages+0x18/0x84 [ 667.207729][T27876] kasan_populate_vmalloc_pte+0x50/0xf0 [ 667.209230][T27876] __apply_to_page_range+0x76c/0xc78 [ 667.210705][T27876] apply_to_page_range+0x4c/0x64 [ 667.212050][T27876] kasan_populate_vmalloc+0x60/0x70 [ 667.213482][T27876] alloc_vmap_area+0x1924/0x1a54 [ 667.214809][T27876] __get_vm_area_node+0x1b8/0x38c [ 667.216163][T27876] __vmalloc_node_range+0x1dc/0xebc [ 667.217688][T27876] __vmalloc+0xb8/0xe0 [ 667.218797][T27876] bpf_prog_alloc_no_stats+0x60/0x438 [ 667.220347][T27876] bpf_prog_alloc+0x48/0x108 [ 667.221646][T27876] bpf_prog_load+0x544/0x16c8 [ 667.222987][T27876] __sys_bpf+0x2ac/0x5dc [ 667.224173][T27876] __arm64_sys_bpf+0x80/0x98 [ 667.225502][T27876] invoke_syscall+0x98/0x2b8 [ 667.226754][T27876] el0_svc_common+0x130/0x23c [ 667.228030][T27876] do_el0_svc+0x48/0x58 [ 667.229130][T27876] el0_svc+0x54/0x158 [ 667.230290][T27876] el0t_64_sync_handler+0x84/0xfc [ 667.231552][T27876] el0t_64_sync+0x190/0x194 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 51) 00:11:07 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x7, 0xfffeffff, 0x400, 0x90, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffffffff, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x48) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffff4e) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1200000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc00}, [@alu={0x7, 0x7e5ea0a7b929f1dc, 0x5, 0x9, 0x1, 0x4, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x0, 0x8, 0x8, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x1, '\x00', r3, 0x32, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x7fff, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x90) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1300000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9fc84af1012f87c3, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x7, 0xfffeffff, 0x400, 0x90, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = fsmount(0xffffffffffffffff, 0x0, 0xf2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffffffff, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x7, 0xfffeffff, 0x400, 0x90, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) fsmount(0xffffffffffffffff, 0x0, 0xf2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffffffff, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x48) (async) [ 667.329311][T27896] FAULT_INJECTION: forcing a failure. [ 667.329311][T27896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffff4e) [ 667.346412][T27896] CPU: 0 PID: 27896 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 667.349224][T27896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 667.351961][T27896] Call trace: [ 667.352812][T27896] dump_backtrace+0x1b8/0x1e4 [ 667.354076][T27896] show_stack+0x2c/0x44 [ 667.355210][T27896] dump_stack_lvl+0xd0/0x124 [ 667.356542][T27896] dump_stack+0x1c/0x28 [ 667.357655][T27896] should_fail_ex+0x3f8/0x5c4 [ 667.359002][T27896] __should_fail_alloc_page+0x104/0x124 [ 667.360526][T27896] should_fail_alloc_page+0x10/0x20 [ 667.361895][T27896] prepare_alloc_pages+0x1b0/0x554 [ 667.363261][T27896] __alloc_pages+0x150/0x698 [ 667.364456][T27896] alloc_pages+0x4bc/0x7c0 [ 667.365701][T27896] __get_free_pages+0x18/0x84 [ 667.366991][T27896] kasan_populate_vmalloc_pte+0x50/0xf0 [ 667.368465][T27896] __apply_to_page_range+0x76c/0xc78 [ 667.369892][T27896] apply_to_page_range+0x4c/0x64 [ 667.371223][T27896] kasan_populate_vmalloc+0x60/0x70 [ 667.372603][T27896] alloc_vmap_area+0x1924/0x1a54 [ 667.373936][T27896] __get_vm_area_node+0x1b8/0x38c [ 667.375330][T27896] __vmalloc_node_range+0x1dc/0xebc [ 667.376773][T27896] __vmalloc+0xb8/0xe0 [ 667.377896][T27896] bpf_prog_alloc_no_stats+0x60/0x438 [ 667.379416][T27896] bpf_prog_alloc+0x48/0x108 [ 667.380708][T27896] bpf_prog_load+0x544/0x16c8 [ 667.381949][T27896] __sys_bpf+0x2ac/0x5dc [ 667.383170][T27896] __arm64_sys_bpf+0x80/0x98 [ 667.384447][T27896] invoke_syscall+0x98/0x2b8 [ 667.385691][T27896] el0_svc_common+0x130/0x23c [ 667.386936][T27896] do_el0_svc+0x48/0x58 [ 667.388049][T27896] el0_svc+0x54/0x158 [ 667.389144][T27896] el0t_64_sync_handler+0x84/0xfc [ 667.390560][T27896] el0t_64_sync+0x190/0x194 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) recvfrom$rose(r0, &(0x7f0000000040)=""/135, 0xff62, 0x0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x81, 0x2, 0x1}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 52) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1400000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffff4e) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x10, 0x5, 0xffffffcc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@delpolicy={0x120, 0x14, 0x10, 0x70bd28, 0x25dfdbfc, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0x1ff, 0x4e20, 0x400, 0xa, 0x0, 0x180, 0x2e, 0x0, 0xffffffffffffffff}, 0x6e6bb3, 0x2}, [@tfcpad={0x8, 0x16, 0xffffa089}, @algo_crypt={0xa0, 0x2, {{'ecb-aes-neon\x00'}, 0x2c0, "bc00fad19cc4665804dce7aa7a3609e018a1e403a73ab57acd55cb47481db905de5e6c64cfa9750f8938a60fc699cc323bf4448f6ef3470c97ea57bd0943a6ec481e2b01c818a7a2115560e1553a1b023145031000bf81b0"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20020080}, 0x2c051) [ 667.468955][T27918] FAULT_INJECTION: forcing a failure. [ 667.468955][T27918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 667.476169][T27918] CPU: 0 PID: 27918 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 667.478919][T27918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 667.481660][T27918] Call trace: [ 667.482576][T27918] dump_backtrace+0x1b8/0x1e4 [ 667.483916][T27918] show_stack+0x2c/0x44 [ 667.485066][T27918] dump_stack_lvl+0xd0/0x124 [ 667.486311][T27918] dump_stack+0x1c/0x28 [ 667.487442][T27918] should_fail_ex+0x3f8/0x5c4 [ 667.488639][T27918] __should_fail_alloc_page+0x104/0x124 [ 667.490101][T27918] should_fail_alloc_page+0x10/0x20 [ 667.491520][T27918] prepare_alloc_pages+0x1b0/0x554 [ 667.492916][T27918] __alloc_pages+0x150/0x698 [ 667.494166][T27918] alloc_pages+0x4bc/0x7c0 [ 667.495383][T27918] __get_free_pages+0x18/0x84 [ 667.496691][T27918] kasan_populate_vmalloc_pte+0x50/0xf0 [ 667.498136][T27918] __apply_to_page_range+0x76c/0xc78 [ 667.499590][T27918] apply_to_page_range+0x4c/0x64 [ 667.500870][T27918] kasan_populate_vmalloc+0x60/0x70 [ 667.502284][T27918] alloc_vmap_area+0x1924/0x1a54 [ 667.503642][T27918] __get_vm_area_node+0x1b8/0x38c [ 667.505051][T27918] __vmalloc_node_range+0x1dc/0xebc [ 667.506522][T27918] __vmalloc+0xb8/0xe0 [ 667.507705][T27918] bpf_prog_alloc_no_stats+0x60/0x438 [ 667.509126][T27918] bpf_prog_alloc+0x48/0x108 [ 667.510333][T27918] bpf_prog_load+0x544/0x16c8 [ 667.511578][T27918] __sys_bpf+0x2ac/0x5dc [ 667.512731][T27918] __arm64_sys_bpf+0x80/0x98 [ 667.514070][T27918] invoke_syscall+0x98/0x2b8 [ 667.515322][T27918] el0_svc_common+0x130/0x23c [ 667.516554][T27918] do_el0_svc+0x48/0x58 [ 667.517627][T27918] el0_svc+0x54/0x158 [ 667.518684][T27918] el0t_64_sync_handler+0x84/0xfc [ 667.520069][T27918] el0t_64_sync+0x190/0x194 00:11:07 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) recvfrom$rose(r0, &(0x7f0000000040)=""/135, 0xff62, 0x0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x81, 0x2, 0x1}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) recvfrom$rose(r0, &(0x7f0000000040)=""/135, 0xff62, 0x0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x81, 0x2, 0x1}) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1500000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@delpolicy={0x120, 0x14, 0x10, 0x70bd28, 0x25dfdbfc, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0x1ff, 0x4e20, 0x400, 0xa, 0x0, 0x180, 0x2e, 0x0, 0xffffffffffffffff}, 0x6e6bb3, 0x2}, [@tfcpad={0x8, 0x16, 0xffffa089}, @algo_crypt={0xa0, 0x2, {{'ecb-aes-neon\x00'}, 0x2c0, "bc00fad19cc4665804dce7aa7a3609e018a1e403a73ab57acd55cb47481db905de5e6c64cfa9750f8938a60fc699cc323bf4448f6ef3470c97ea57bd0943a6ec481e2b01c818a7a2115560e1553a1b023145031000bf81b0"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20020080}, 0x2c051) 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 53) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1600000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@delpolicy={0x120, 0x14, 0x10, 0x70bd28, 0x25dfdbfc, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0x1ff, 0x4e20, 0x400, 0xa, 0x0, 0x180, 0x2e, 0x0, 0xffffffffffffffff}, 0x6e6bb3, 0x2}, [@tfcpad={0x8, 0x16, 0xffffa089}, @algo_crypt={0xa0, 0x2, {{'ecb-aes-neon\x00'}, 0x2c0, "bc00fad19cc4665804dce7aa7a3609e018a1e403a73ab57acd55cb47481db905de5e6c64cfa9750f8938a60fc699cc323bf4448f6ef3470c97ea57bd0943a6ec481e2b01c818a7a2115560e1553a1b023145031000bf81b0"}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20020080}, 0x2c051) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000700)=[{0x5, 0x1, 0x4, 0xb}, {0x2, 0x3, 0x5}, {0x0, 0x5, 0xf, 0x1}, {0x4, 0x2, 0xd, 0x6}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0x3, 0xd}, {0x2, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1700000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 54) 00:11:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 00:11:07 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) recvfrom$rose(r0, &(0x7f0000000040)=""/135, 0xff62, 0x0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x81, 0x2, 0x1}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x5, 0x347, 0x3ff, 0x801, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x160, 0x1a, 0x4, 0x70bd25, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in=@remote, 0x4e22, 0x1, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x3b, r1, 0xee01}, {@in=@multicast2, 0x4d4, 0x33}, @in=@multicast2, {0x188b, 0x6, 0x1000, 0x2, 0x8, 0xffffffff, 0x1dd, 0xffffffffffffffff}, {0x7ff, 0x7, 0x7}, {0x2253, 0x7fff, 0x7fffffff}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x0, 0x22}, [@sec_ctx={0x65, 0x8, {0x61, 0x8, 0x0, 0x9, 0x59, "e9d9bd459c23b69f44db34289a18ddb39664dede96846c114b23d742d7a1717261bcee2eb34d8ac726f653e318d4aaede58f18e7eb08fa50581ebd0d00896ff22d42b66392e3cebf686a55d1754d657fb0e5852870fdebc775"}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) [ 667.688779][T27953] FAULT_INJECTION: forcing a failure. [ 667.688779][T27953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1800000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 667.707216][T27953] CPU: 0 PID: 27953 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 667.709985][T27953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 667.712728][T27953] Call trace: [ 667.713656][T27953] dump_backtrace+0x1b8/0x1e4 [ 667.714983][T27953] show_stack+0x2c/0x44 [ 667.716086][T27953] dump_stack_lvl+0xd0/0x124 [ 667.717402][T27953] dump_stack+0x1c/0x28 [ 667.718577][T27953] should_fail_ex+0x3f8/0x5c4 [ 667.719829][T27953] __should_fail_alloc_page+0x104/0x124 [ 667.721318][T27953] should_fail_alloc_page+0x10/0x20 [ 667.722796][T27953] prepare_alloc_pages+0x1b0/0x554 [ 667.724207][T27953] __alloc_pages+0x150/0x698 [ 667.725458][T27953] alloc_pages+0x4bc/0x7c0 [ 667.726744][T27953] __get_free_pages+0x18/0x84 [ 667.728084][T27953] kasan_populate_vmalloc_pte+0x50/0xf0 [ 667.729623][T27953] __apply_to_page_range+0x76c/0xc78 [ 667.731119][T27953] apply_to_page_range+0x4c/0x64 [ 667.732548][T27953] kasan_populate_vmalloc+0x60/0x70 [ 667.734020][T27953] alloc_vmap_area+0x1924/0x1a54 [ 667.735399][T27953] __get_vm_area_node+0x1b8/0x38c [ 667.736777][T27953] __vmalloc_node_range+0x1dc/0xebc [ 667.738166][T27953] __vmalloc+0xb8/0xe0 [ 667.739294][T27953] bpf_prog_alloc_no_stats+0x60/0x438 [ 667.740799][T27953] bpf_prog_alloc+0x48/0x108 [ 667.742058][T27953] bpf_prog_load+0x544/0x16c8 [ 667.743330][T27953] __sys_bpf+0x2ac/0x5dc [ 667.744513][T27953] __arm64_sys_bpf+0x80/0x98 [ 667.745798][T27953] invoke_syscall+0x98/0x2b8 [ 667.747013][T27953] el0_svc_common+0x130/0x23c [ 667.748299][T27953] do_el0_svc+0x48/0x58 [ 667.749405][T27953] el0_svc+0x54/0x158 [ 667.750540][T27953] el0t_64_sync_handler+0x84/0xfc [ 667.751956][T27953] el0t_64_sync+0x190/0x194 00:11:07 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xc69}, [@exit, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000280)='GPL\x00', 0x8, 0xe7, &(0x7f0000000300)=""/231, 0x40f00, 0x8, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x7f, 0x8}, 0x10, 0x20d68, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r1, r2, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x2, 0xe, 0xa}, {0x4, 0x2, 0x5}], 0x10, 0x89}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:11:07 executing program 4: syz_clone(0x0, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x5, 0x347, 0x3ff, 0x801, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x160, 0x1a, 0x4, 0x70bd25, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in=@remote, 0x4e22, 0x1, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x3b, r1, 0xee01}, {@in=@multicast2, 0x4d4, 0x33}, @in=@multicast2, {0x188b, 0x6, 0x1000, 0x2, 0x8, 0xffffffff, 0x1dd, 0xffffffffffffffff}, {0x7ff, 0x7, 0x7}, {0x2253, 0x7fff, 0x7fffffff}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x0, 0x22}, [@sec_ctx={0x65, 0x8, {0x61, 0x8, 0x0, 0x9, 0x59, "e9d9bd459c23b69f44db34289a18ddb39664dede96846c114b23d742d7a1717261bcee2eb34d8ac726f653e318d4aaede58f18e7eb08fa50581ebd0d00896ff22d42b66392e3cebf686a55d1754d657fb0e5852870fdebc775"}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1900000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 55) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x5, 0x347, 0x3ff, 0x801, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x160, 0x1a, 0x4, 0x70bd25, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in=@remote, 0x4e22, 0x1, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x3b, r1, 0xee01}, {@in=@multicast2, 0x4d4, 0x33}, @in=@multicast2, {0x188b, 0x6, 0x1000, 0x2, 0x8, 0xffffffff, 0x1dd, 0xffffffffffffffff}, {0x7ff, 0x7, 0x7}, {0x2253, 0x7fff, 0x7fffffff}, 0x70bd2b, 0x3501, 0xa, 0x3, 0x0, 0x22}, [@sec_ctx={0x65, 0x8, {0x61, 0x8, 0x0, 0x9, 0x59, "e9d9bd459c23b69f44db34289a18ddb39664dede96846c114b23d742d7a1717261bcee2eb34d8ac726f653e318d4aaede58f18e7eb08fa50581ebd0d00896ff22d42b66392e3cebf686a55d1754d657fb0e5852870fdebc775"}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1a00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 4: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0xf5, '\x00', 0x0, r0, 0x0, 0x3, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x9, 0x9, 0xd45, 0x24c0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) [ 667.889527][T27981] FAULT_INJECTION: forcing a failure. [ 667.889527][T27981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1b00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xc69}, [@exit, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000280)='GPL\x00', 0x8, 0xe7, &(0x7f0000000300)=""/231, 0x40f00, 0x8, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x7f, 0x8}, 0x10, 0x20d68, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r1, r2, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x2, 0xe, 0xa}, {0x4, 0x2, 0x5}], 0x10, 0x89}, 0x90) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) [ 667.914270][T27981] CPU: 1 PID: 27981 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 667.916919][T27981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 667.919612][T27981] Call trace: [ 667.920513][T27981] dump_backtrace+0x1b8/0x1e4 [ 667.921755][T27981] show_stack+0x2c/0x44 [ 667.922875][T27981] dump_stack_lvl+0xd0/0x124 [ 667.924087][T27981] dump_stack+0x1c/0x28 [ 667.925365][T27981] should_fail_ex+0x3f8/0x5c4 [ 667.926661][T27981] __should_fail_alloc_page+0x104/0x124 [ 667.928159][T27981] should_fail_alloc_page+0x10/0x20 [ 667.929568][T27981] prepare_alloc_pages+0x1b0/0x554 [ 667.930970][T27981] __alloc_pages+0x150/0x698 [ 667.932223][T27981] alloc_pages+0x4bc/0x7c0 [ 667.933475][T27981] __get_free_pages+0x18/0x84 [ 667.934763][T27981] kasan_populate_vmalloc_pte+0x50/0xf0 [ 667.936278][T27981] __apply_to_page_range+0x76c/0xc78 [ 667.937667][T27981] apply_to_page_range+0x4c/0x64 [ 667.939024][T27981] kasan_populate_vmalloc+0x60/0x70 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0xf5, '\x00', 0x0, r0, 0x0, 0x3, 0x5}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x9, 0x9, 0xd45, 0x24c0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) [ 667.940425][T27981] alloc_vmap_area+0x1924/0x1a54 [ 667.941762][T27981] __get_vm_area_node+0x1b8/0x38c [ 667.943098][T27981] __vmalloc_node_range+0x1dc/0xebc [ 667.944528][T27981] __vmalloc+0xb8/0xe0 [ 667.945634][T27981] bpf_prog_alloc_no_stats+0x60/0x438 [ 667.947063][T27981] bpf_prog_alloc+0x48/0x108 [ 667.948291][T27981] bpf_prog_load+0x544/0x16c8 [ 667.949616][T27981] __sys_bpf+0x2ac/0x5dc [ 667.950802][T27981] __arm64_sys_bpf+0x80/0x98 [ 667.951999][T27981] invoke_syscall+0x98/0x2b8 00:11:07 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) [ 667.953250][T27981] el0_svc_common+0x130/0x23c [ 667.954486][T27981] do_el0_svc+0x48/0x58 [ 667.955632][T27981] el0_svc+0x54/0x158 [ 667.956733][T27981] el0t_64_sync_handler+0x84/0xfc [ 667.958072][T27981] el0t_64_sync+0x190/0x194 00:11:07 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 56) 00:11:07 executing program 4: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1c00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xc69}, [@exit, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000280)='GPL\x00', 0x8, 0xe7, &(0x7f0000000300)=""/231, 0x40f00, 0x8, '\x00', 0x0, 0x1c, r0, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x7f, 0x8}, 0x10, 0x20d68, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r1, r2, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x3, 0x2, 0xe, 0xa}, {0x4, 0x2, 0x5}], 0x10, 0x89}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:11:07 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0xf5, '\x00', 0x0, r0, 0x0, 0x3, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x9, 0x9, 0xd45, 0x24c0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x9, 0x9, 0xd45, 0x24c0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 00:11:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1d00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:07 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0xf4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff44b}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf7ffba8c635b87ab}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '[/)}-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000048) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 57) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1e00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 4: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x8, 0x7fff, 0x1, 'queue0\x00', 0x80000001}) [ 668.137362][T28018] FAULT_INJECTION: forcing a failure. [ 668.137362][T28018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 668.143835][T28018] CPU: 0 PID: 28018 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 668.146501][T28018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 668.149129][T28018] Call trace: [ 668.149979][T28018] dump_backtrace+0x1b8/0x1e4 [ 668.151202][T28018] show_stack+0x2c/0x44 [ 668.152341][T28018] dump_stack_lvl+0xd0/0x124 [ 668.153593][T28018] dump_stack+0x1c/0x28 [ 668.154790][T28018] should_fail_ex+0x3f8/0x5c4 [ 668.156063][T28018] __should_fail_alloc_page+0x104/0x124 [ 668.157567][T28018] should_fail_alloc_page+0x10/0x20 [ 668.158978][T28018] prepare_alloc_pages+0x1b0/0x554 [ 668.160299][T28018] __alloc_pages+0x150/0x698 [ 668.161536][T28018] alloc_pages+0x4bc/0x7c0 [ 668.162729][T28018] __get_free_pages+0x18/0x84 [ 668.163970][T28018] kasan_populate_vmalloc_pte+0x50/0xf0 [ 668.165488][T28018] __apply_to_page_range+0x76c/0xc78 [ 668.166848][T28018] apply_to_page_range+0x4c/0x64 [ 668.168160][T28018] kasan_populate_vmalloc+0x60/0x70 [ 668.169550][T28018] alloc_vmap_area+0x1924/0x1a54 [ 668.170788][T28018] __get_vm_area_node+0x1b8/0x38c [ 668.172166][T28018] __vmalloc_node_range+0x1dc/0xebc [ 668.173477][T28018] __vmalloc+0xb8/0xe0 [ 668.174392][T28018] bpf_prog_alloc_no_stats+0x60/0x438 [ 668.175814][T28018] bpf_prog_alloc+0x48/0x108 [ 668.177044][T28018] bpf_prog_load+0x544/0x16c8 [ 668.178261][T28018] __sys_bpf+0x2ac/0x5dc [ 668.179383][T28018] __arm64_sys_bpf+0x80/0x98 [ 668.180606][T28018] invoke_syscall+0x98/0x2b8 [ 668.181815][T28018] el0_svc_common+0x130/0x23c [ 668.183109][T28018] do_el0_svc+0x48/0x58 [ 668.184310][T28018] el0_svc+0x54/0x158 [ 668.185326][T28018] el0t_64_sync_handler+0x84/0xfc [ 668.186712][T28018] el0t_64_sync+0x190/0x194 00:11:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4002) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) (async, rerun: 64) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 64) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(0xffffffffffffffff, 0x0, 0xf4) (async, rerun: 64) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async, rerun: 32) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff44b}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000000) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf7ffba8c635b87ab}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '[/)}-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000048) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (rerun: 32) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x8, 0x7fff, 0x1, 'queue0\x00', 0x80000001}) 00:11:08 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 58) [ 668.240171][T28032] FAULT_INJECTION: forcing a failure. [ 668.240171][T28032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 668.258527][T28032] CPU: 0 PID: 28032 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 668.261217][T28032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 668.263917][T28032] Call trace: [ 668.264823][T28032] dump_backtrace+0x1b8/0x1e4 [ 668.266047][T28032] show_stack+0x2c/0x44 [ 668.267162][T28032] dump_stack_lvl+0xd0/0x124 [ 668.268357][T28032] dump_stack+0x1c/0x28 [ 668.269429][T28032] should_fail_ex+0x3f8/0x5c4 [ 668.270669][T28032] __should_fail_alloc_page+0x104/0x124 [ 668.272194][T28032] should_fail_alloc_page+0x10/0x20 [ 668.273542][T28032] prepare_alloc_pages+0x1b0/0x554 [ 668.274943][T28032] __alloc_pages+0x150/0x698 [ 668.276164][T28032] alloc_pages+0x4bc/0x7c0 [ 668.277361][T28032] __get_free_pages+0x18/0x84 [ 668.278639][T28032] kasan_populate_vmalloc_pte+0x50/0xf0 [ 668.280160][T28032] __apply_to_page_range+0x76c/0xc78 [ 668.281666][T28032] apply_to_page_range+0x4c/0x64 [ 668.283065][T28032] kasan_populate_vmalloc+0x60/0x70 [ 668.284516][T28032] alloc_vmap_area+0x1924/0x1a54 [ 668.285804][T28032] __get_vm_area_node+0x1b8/0x38c [ 668.287202][T28032] __vmalloc_node_range+0x1dc/0xebc [ 668.288607][T28032] __vmalloc+0xb8/0xe0 [ 668.289668][T28032] bpf_prog_alloc_no_stats+0x60/0x438 [ 668.291120][T28032] bpf_prog_alloc+0x48/0x108 [ 668.292390][T28032] bpf_prog_load+0x544/0x16c8 [ 668.293644][T28032] __sys_bpf+0x2ac/0x5dc [ 668.294793][T28032] __arm64_sys_bpf+0x80/0x98 [ 668.296018][T28032] invoke_syscall+0x98/0x2b8 [ 668.297266][T28032] el0_svc_common+0x130/0x23c [ 668.298480][T28032] do_el0_svc+0x48/0x58 [ 668.299604][T28032] el0_svc+0x54/0x158 [ 668.300669][T28032] el0t_64_sync_handler+0x84/0xfc [ 668.302020][T28032] el0t_64_sync+0x190/0x194 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) (rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0x8, 0x7fff, 0x1, 'queue0\x00', 0x80000001}) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xba32}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4810) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x1f00000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xba32}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4810) 00:11:08 executing program 4: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 59) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x2000000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x4002) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0xf4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff44b}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000000) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf7ffba8c635b87ab}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '[/)}-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000048) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 668.416802][T28053] FAULT_INJECTION: forcing a failure. [ 668.416802][T28053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:08 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xba32}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4810) [ 668.432496][T28053] CPU: 0 PID: 28053 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 668.435136][T28053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 668.437815][T28053] Call trace: [ 668.438752][T28053] dump_backtrace+0x1b8/0x1e4 [ 668.440006][T28053] show_stack+0x2c/0x44 [ 668.441118][T28053] dump_stack_lvl+0xd0/0x124 [ 668.442363][T28053] dump_stack+0x1c/0x28 [ 668.443493][T28053] should_fail_ex+0x3f8/0x5c4 [ 668.444706][T28053] __should_fail_alloc_page+0x104/0x124 [ 668.446206][T28053] should_fail_alloc_page+0x10/0x20 [ 668.447607][T28053] prepare_alloc_pages+0x1b0/0x554 [ 668.448984][T28053] __alloc_pages+0x150/0x698 [ 668.450208][T28053] alloc_pages+0x4bc/0x7c0 [ 668.451362][T28053] __get_free_pages+0x18/0x84 [ 668.452645][T28053] kasan_populate_vmalloc_pte+0x50/0xf0 [ 668.454125][T28053] __apply_to_page_range+0x76c/0xc78 [ 668.455574][T28053] apply_to_page_range+0x4c/0x64 [ 668.456926][T28053] kasan_populate_vmalloc+0x60/0x70 [ 668.458256][T28053] alloc_vmap_area+0x1924/0x1a54 [ 668.459613][T28053] __get_vm_area_node+0x1b8/0x38c [ 668.460988][T28053] __vmalloc_node_range+0x1dc/0xebc [ 668.462378][T28053] __vmalloc+0xb8/0xe0 [ 668.463420][T28053] bpf_prog_alloc_no_stats+0x60/0x438 [ 668.464849][T28053] bpf_prog_alloc+0x48/0x108 [ 668.466123][T28053] bpf_prog_load+0x544/0x16c8 [ 668.467347][T28053] __sys_bpf+0x2ac/0x5dc [ 668.468487][T28053] __arm64_sys_bpf+0x80/0x98 [ 668.469771][T28053] invoke_syscall+0x98/0x2b8 [ 668.470997][T28053] el0_svc_common+0x130/0x23c [ 668.472290][T28053] do_el0_svc+0x48/0x58 [ 668.473439][T28053] el0_svc+0x54/0x158 [ 668.474505][T28053] el0t_64_sync_handler+0x84/0xfc [ 668.475905][T28053] el0t_64_sync+0x190/0x194 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x2100000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x2200000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x24, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="2240324d5e7fc3c363c1aa9fb141f2594f2433890f03ed0a3f2b6fbb7cef08cbab83e66972047fc12695c584643ceccd4a703849cfd168f479a95b8cb4b355ddab5961e6c2d6bc80f0efeeaf2b05ae4948fabf", &(0x7f0000000080)=""/21, 0x4}, 0x20) 00:11:08 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 60) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x2300000000000000, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 4: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x22, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='}\x00', &(0x7f0000000180)='./file0\x00', r0) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xffff800097d1ffff, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 668.580508][T28073] FAULT_INJECTION: forcing a failure. [ 668.580508][T28073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 668.594585][T28073] CPU: 1 PID: 28073 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 668.597362][T28073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 668.600097][T28073] Call trace: [ 668.600964][T28073] dump_backtrace+0x1b8/0x1e4 [ 668.602283][T28073] show_stack+0x2c/0x44 [ 668.603412][T28073] dump_stack_lvl+0xd0/0x124 [ 668.604642][T28073] dump_stack+0x1c/0x28 [ 668.605762][T28073] should_fail_ex+0x3f8/0x5c4 [ 668.607011][T28073] __should_fail_alloc_page+0x104/0x124 [ 668.608468][T28073] should_fail_alloc_page+0x10/0x20 [ 668.609901][T28073] prepare_alloc_pages+0x1b0/0x554 [ 668.611256][T28073] __alloc_pages+0x150/0x698 [ 668.612484][T28073] alloc_pages+0x4bc/0x7c0 [ 668.613704][T28073] __get_free_pages+0x18/0x84 [ 668.614964][T28073] kasan_populate_vmalloc_pte+0x50/0xf0 [ 668.616490][T28073] __apply_to_page_range+0x76c/0xc78 [ 668.617909][T28073] apply_to_page_range+0x4c/0x64 [ 668.619253][T28073] kasan_populate_vmalloc+0x60/0x70 [ 668.620642][T28073] alloc_vmap_area+0x1924/0x1a54 [ 668.622024][T28073] __get_vm_area_node+0x1b8/0x38c [ 668.623437][T28073] __vmalloc_node_range+0x1dc/0xebc 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x24, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="2240324d5e7fc3c363c1aa9fb141f2594f2433890f03ed0a3f2b6fbb7cef08cbab83e66972047fc12695c584643ceccd4a703849cfd168f479a95b8cb4b355ddab5961e6c2d6bc80f0efeeaf2b05ae4948fabf", &(0x7f0000000080)=""/21, 0x4}, 0x20) [ 668.624792][T28073] __vmalloc+0xb8/0xe0 [ 668.625851][T28073] bpf_prog_alloc_no_stats+0x60/0x438 [ 668.627286][T28073] bpf_prog_alloc+0x48/0x108 [ 668.628530][T28073] bpf_prog_load+0x544/0x16c8 [ 668.629795][T28073] __sys_bpf+0x2ac/0x5dc [ 668.630914][T28073] __arm64_sys_bpf+0x80/0x98 [ 668.632200][T28073] invoke_syscall+0x98/0x2b8 [ 668.633462][T28073] el0_svc_common+0x130/0x23c [ 668.634696][T28073] do_el0_svc+0x48/0x58 [ 668.635894][T28073] el0_svc+0x54/0x158 [ 668.637008][T28073] el0t_64_sync_handler+0x84/0xfc [ 668.638363][T28073] el0t_64_sync+0x190/0x194 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0xffffd1970080ffff, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x22, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='}\x00', &(0x7f0000000180)='./file0\x00', r0) 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x24, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="2240324d5e7fc3c363c1aa9fb141f2594f2433890f03ed0a3f2b6fbb7cef08cbab83e66972047fc12695c584643ceccd4a703849cfd168f479a95b8cb4b355ddab5961e6c2d6bc80f0efeeaf2b05ae4948fabf", &(0x7f0000000080)=""/21, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x24, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="2240324d5e7fc3c363c1aa9fb141f2594f2433890f03ed0a3f2b6fbb7cef08cbab83e66972047fc12695c584643ceccd4a703849cfd168f479a95b8cb4b355ddab5961e6c2d6bc80f0efeeaf2b05ae4948fabf", &(0x7f0000000080)=""/21, 0x4}, 0x20) (async) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x22, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='}\x00', &(0x7f0000000180)='./file0\x00', r0) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 61) 00:11:08 executing program 4: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff45) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff45) 00:11:08 executing program 4: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 62) 00:11:08 executing program 2: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") getpgid(0x0) syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) [ 668.856420][T28120] FAULT_INJECTION: forcing a failure. [ 668.856420][T28120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:08 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff45) 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x5, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 668.882795][T28120] CPU: 1 PID: 28120 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 668.885568][T28120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 668.888231][T28120] Call trace: [ 668.889079][T28120] dump_backtrace+0x1b8/0x1e4 [ 668.890351][T28120] show_stack+0x2c/0x44 [ 668.891442][T28120] dump_stack_lvl+0xd0/0x124 [ 668.892685][T28120] dump_stack+0x1c/0x28 [ 668.893815][T28120] should_fail_ex+0x3f8/0x5c4 [ 668.895092][T28120] __should_fail_alloc_page+0x104/0x124 [ 668.896593][T28120] should_fail_alloc_page+0x10/0x20 [ 668.897967][T28120] prepare_alloc_pages+0x1b0/0x554 [ 668.899362][T28120] __alloc_pages+0x150/0x698 [ 668.900563][T28120] alloc_pages+0x4bc/0x7c0 [ 668.901788][T28120] __get_free_pages+0x18/0x84 [ 668.903067][T28120] kasan_populate_vmalloc_pte+0x50/0xf0 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async, rerun: 32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fspick(r1, &(0x7f0000000040)='./file0\x00', 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) [ 668.904574][T28120] __apply_to_page_range+0x76c/0xc78 [ 668.905975][T28120] apply_to_page_range+0x4c/0x64 [ 668.907310][T28120] kasan_populate_vmalloc+0x60/0x70 [ 668.908662][T28120] alloc_vmap_area+0x1924/0x1a54 [ 668.909962][T28120] __get_vm_area_node+0x1b8/0x38c [ 668.911430][T28120] __vmalloc_node_range+0x1dc/0xebc [ 668.912850][T28120] __vmalloc+0xb8/0xe0 [ 668.913977][T28120] bpf_prog_alloc_no_stats+0x60/0x438 [ 668.915516][T28120] bpf_prog_alloc+0x48/0x108 [ 668.916801][T28120] bpf_prog_load+0x544/0x16c8 [ 668.918109][T28120] __sys_bpf+0x2ac/0x5dc [ 668.919289][T28120] __arm64_sys_bpf+0x80/0x98 [ 668.920548][T28120] invoke_syscall+0x98/0x2b8 [ 668.921800][T28120] el0_svc_common+0x130/0x23c [ 668.923090][T28120] do_el0_svc+0x48/0x58 [ 668.924245][T28120] el0_svc+0x54/0x158 [ 668.925371][T28120] el0t_64_sync_handler+0x84/0xfc [ 668.926827][T28120] el0t_64_sync+0x190/0x194 00:11:08 executing program 4: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 63) 00:11:08 executing program 2: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") getpgid(0x0) syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:08 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:08 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x80880}) getrusage(0xfffffffffffffffe, &(0x7f0000000000)) [ 669.006772][T28142] FAULT_INJECTION: forcing a failure. [ 669.006772][T28142] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.012854][T28142] CPU: 0 PID: 28142 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.015582][T28142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.018283][T28142] Call trace: [ 669.019155][T28142] dump_backtrace+0x1b8/0x1e4 [ 669.020401][T28142] show_stack+0x2c/0x44 [ 669.021559][T28142] dump_stack_lvl+0xd0/0x124 [ 669.022786][T28142] dump_stack+0x1c/0x28 [ 669.023873][T28142] should_fail_ex+0x3f8/0x5c4 [ 669.025200][T28142] __should_fail_alloc_page+0x104/0x124 [ 669.026730][T28142] should_fail_alloc_page+0x10/0x20 [ 669.028095][T28142] prepare_alloc_pages+0x1b0/0x554 [ 669.029480][T28142] __alloc_pages+0x150/0x698 [ 669.030720][T28142] alloc_pages+0x4bc/0x7c0 [ 669.031920][T28142] __get_free_pages+0x18/0x84 [ 669.033188][T28142] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.034702][T28142] __apply_to_page_range+0x76c/0xc78 [ 669.036142][T28142] apply_to_page_range+0x4c/0x64 [ 669.037433][T28142] kasan_populate_vmalloc+0x60/0x70 [ 669.038762][T28142] alloc_vmap_area+0x1924/0x1a54 [ 669.040018][T28142] __get_vm_area_node+0x1b8/0x38c [ 669.041358][T28142] __vmalloc_node_range+0x1dc/0xebc [ 669.042714][T28142] __vmalloc+0xb8/0xe0 [ 669.043788][T28142] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.045254][T28142] bpf_prog_alloc+0x48/0x108 [ 669.046502][T28142] bpf_prog_load+0x544/0x16c8 [ 669.047778][T28142] __sys_bpf+0x2ac/0x5dc [ 669.048914][T28142] __arm64_sys_bpf+0x80/0x98 [ 669.050123][T28142] invoke_syscall+0x98/0x2b8 [ 669.051380][T28142] el0_svc_common+0x130/0x23c [ 669.052628][T28142] do_el0_svc+0x48/0x58 [ 669.053761][T28142] el0_svc+0x54/0x158 [ 669.054821][T28142] el0t_64_sync_handler+0x84/0xfc [ 669.056207][T28142] el0t_64_sync+0x190/0x194 00:11:08 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001500000828bd7000fbdbdf25e0000001000000000000000000000000ff0100000000000000000000000000014e22fff94e2300070a0080200c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x58}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) 00:11:08 executing program 4: syz_clone(0x0, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x80880}) (async) getrusage(0xfffffffffffffffe, &(0x7f0000000000)) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x7, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001500000828bd7000fbdbdf25e0000001000000000000000000000000ff0100000000000000000000000000014e22fff94e2300070a0080200c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x58}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x8, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 64) 00:11:09 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x80880}) (async) getrusage(0xfffffffffffffffe, &(0x7f0000000000)) [ 669.203936][T28170] FAULT_INJECTION: forcing a failure. [ 669.203936][T28170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:09 executing program 2: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") getpgid(0x0) syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 669.215385][T28170] CPU: 0 PID: 28170 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.218040][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.220710][T28170] Call trace: [ 669.221570][T28170] dump_backtrace+0x1b8/0x1e4 [ 669.222871][T28170] show_stack+0x2c/0x44 [ 669.223991][T28170] dump_stack_lvl+0xd0/0x124 [ 669.225272][T28170] dump_stack+0x1c/0x28 [ 669.226391][T28170] should_fail_ex+0x3f8/0x5c4 [ 669.227662][T28170] __should_fail_alloc_page+0x104/0x124 [ 669.229134][T28170] should_fail_alloc_page+0x10/0x20 [ 669.230592][T28170] prepare_alloc_pages+0x1b0/0x554 [ 669.231966][T28170] __alloc_pages+0x150/0x698 [ 669.233132][T28170] alloc_pages+0x4bc/0x7c0 [ 669.234370][T28170] __get_free_pages+0x18/0x84 [ 669.235622][T28170] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.237091][T28170] __apply_to_page_range+0x76c/0xc78 [ 669.238506][T28170] apply_to_page_range+0x4c/0x64 [ 669.239777][T28170] kasan_populate_vmalloc+0x60/0x70 [ 669.241141][T28170] alloc_vmap_area+0x1924/0x1a54 [ 669.242484][T28170] __get_vm_area_node+0x1b8/0x38c [ 669.243844][T28170] __vmalloc_node_range+0x1dc/0xebc [ 669.245239][T28170] __vmalloc+0xb8/0xe0 [ 669.246317][T28170] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.247717][T28170] bpf_prog_alloc+0x48/0x108 [ 669.248940][T28170] bpf_prog_load+0x544/0x16c8 [ 669.250147][T28170] __sys_bpf+0x2ac/0x5dc [ 669.251300][T28170] __arm64_sys_bpf+0x80/0x98 [ 669.252538][T28170] invoke_syscall+0x98/0x2b8 [ 669.253727][T28170] el0_svc_common+0x130/0x23c [ 669.254949][T28170] do_el0_svc+0x48/0x58 [ 669.256053][T28170] el0_svc+0x54/0x158 [ 669.257095][T28170] el0t_64_sync_handler+0x84/0xfc [ 669.258414][T28170] el0t_64_sync+0x190/0x194 00:11:09 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001500000828bd7000fbdbdf25e0000001000000000000000000000000ff0100000000000000000000000000014e22fff94e2300070a0080200c000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x58}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) 00:11:09 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xbe8c00000000000, 0xa02) io_setup(0x8, &(0x7f00000000c0)=0x0) r2 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000140)="743393086413c8274e421624fbea66db027a18415144de39", 0x18, 0x8000000000000001, 0x0, 0x2}, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xa, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 65) 00:11:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 669.367529][T28197] FAULT_INJECTION: forcing a failure. [ 669.367529][T28197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.382625][T28197] CPU: 0 PID: 28197 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.385240][T28197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.388000][T28197] Call trace: [ 669.388852][T28197] dump_backtrace+0x1b8/0x1e4 [ 669.390200][T28197] show_stack+0x2c/0x44 [ 669.391288][T28197] dump_stack_lvl+0xd0/0x124 [ 669.392487][T28197] dump_stack+0x1c/0x28 [ 669.393702][T28197] should_fail_ex+0x3f8/0x5c4 [ 669.394948][T28197] __should_fail_alloc_page+0x104/0x124 [ 669.396397][T28197] should_fail_alloc_page+0x10/0x20 [ 669.397795][T28197] prepare_alloc_pages+0x1b0/0x554 [ 669.399132][T28197] __alloc_pages+0x150/0x698 [ 669.400326][T28197] alloc_pages+0x4bc/0x7c0 [ 669.401492][T28197] __get_free_pages+0x18/0x84 [ 669.402686][T28197] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.404203][T28197] __apply_to_page_range+0x76c/0xc78 [ 669.405664][T28197] apply_to_page_range+0x4c/0x64 [ 669.406912][T28197] kasan_populate_vmalloc+0x60/0x70 [ 669.408288][T28197] alloc_vmap_area+0x1924/0x1a54 [ 669.409591][T28197] __get_vm_area_node+0x1b8/0x38c [ 669.410928][T28197] __vmalloc_node_range+0x1dc/0xebc [ 669.412299][T28197] __vmalloc+0xb8/0xe0 [ 669.413384][T28197] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.414807][T28197] bpf_prog_alloc+0x48/0x108 [ 669.416048][T28197] bpf_prog_load+0x544/0x16c8 [ 669.417325][T28197] __sys_bpf+0x2ac/0x5dc [ 669.418454][T28197] __arm64_sys_bpf+0x80/0x98 [ 669.419681][T28197] invoke_syscall+0x98/0x2b8 [ 669.420911][T28197] el0_svc_common+0x130/0x23c [ 669.422132][T28197] do_el0_svc+0x48/0x58 [ 669.423250][T28197] el0_svc+0x54/0x158 [ 669.424316][T28197] el0t_64_sync_handler+0x84/0xfc [ 669.425651][T28197] el0t_64_sync+0x190/0x194 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xb, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xc, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 2: syz_clone(0x100080, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:09 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xbe8c00000000000, 0xa02) (rerun: 64) io_setup(0x8, &(0x7f00000000c0)=0x0) (async) r2 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000140)="743393086413c8274e421624fbea66db027a18415144de39", 0x18, 0x8000000000000001, 0x0, 0x2}, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xd, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 66) 00:11:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@local}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:09 executing program 2: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:09 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 67) 00:11:09 executing program 2: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xbe8c00000000000, 0xa02) io_setup(0x8, &(0x7f00000000c0)=0x0) r2 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000140)="743393086413c8274e421624fbea66db027a18415144de39", 0x18, 0x8000000000000001, 0x0, 0x2}, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) syz_open_dev$dri(&(0x7f0000000000), 0xbe8c00000000000, 0xa02) (async) io_setup(0x8, &(0x7f00000000c0)) (async) openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000140)="743393086413c8274e421624fbea66db027a18415144de39", 0x18, 0x8000000000000001, 0x0, 0x2}, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0xf, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 669.673644][T28240] FAULT_INJECTION: forcing a failure. [ 669.673644][T28240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 669.682509][T28240] CPU: 1 PID: 28240 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.685212][T28240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.688023][T28240] Call trace: [ 669.688877][T28240] dump_backtrace+0x1b8/0x1e4 [ 669.690174][T28240] show_stack+0x2c/0x44 [ 669.691319][T28240] dump_stack_lvl+0xd0/0x124 [ 669.692509][T28240] dump_stack+0x1c/0x28 [ 669.693630][T28240] should_fail_ex+0x3f8/0x5c4 [ 669.694884][T28240] __should_fail_alloc_page+0x104/0x124 [ 669.696430][T28240] should_fail_alloc_page+0x10/0x20 [ 669.697883][T28240] prepare_alloc_pages+0x1b0/0x554 [ 669.699271][T28240] __alloc_pages+0x150/0x698 [ 669.700495][T28240] alloc_pages+0x4bc/0x7c0 [ 669.701668][T28240] __get_free_pages+0x18/0x84 [ 669.702912][T28240] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.704532][T28240] __apply_to_page_range+0x76c/0xc78 [ 669.705911][T28240] apply_to_page_range+0x4c/0x64 [ 669.707284][T28240] kasan_populate_vmalloc+0x60/0x70 [ 669.708693][T28240] alloc_vmap_area+0x1924/0x1a54 [ 669.709995][T28240] __get_vm_area_node+0x1b8/0x38c [ 669.711334][T28240] __vmalloc_node_range+0x1dc/0xebc [ 669.712672][T28240] __vmalloc+0xb8/0xe0 [ 669.713744][T28240] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.715140][T28240] bpf_prog_alloc+0x48/0x108 [ 669.716410][T28240] bpf_prog_load+0x544/0x16c8 [ 669.717632][T28240] __sys_bpf+0x2ac/0x5dc [ 669.718846][T28240] __arm64_sys_bpf+0x80/0x98 [ 669.720060][T28240] invoke_syscall+0x98/0x2b8 [ 669.721227][T28240] el0_svc_common+0x130/0x23c [ 669.722468][T28240] do_el0_svc+0x48/0x58 [ 669.723603][T28240] el0_svc+0x54/0x158 [ 669.724666][T28240] el0t_64_sync_handler+0x84/0xfc 00:11:09 executing program 2: syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") [ 669.726016][T28240] el0t_64_sync+0x190/0x194 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 68) 00:11:09 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 669.777507][T28257] FAULT_INJECTION: forcing a failure. [ 669.777507][T28257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.781321][T28257] CPU: 1 PID: 28257 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.783968][T28257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.786812][T28257] Call trace: [ 669.787666][T28257] dump_backtrace+0x1b8/0x1e4 [ 669.788876][T28257] show_stack+0x2c/0x44 [ 669.789960][T28257] dump_stack_lvl+0xd0/0x124 [ 669.791237][T28257] dump_stack+0x1c/0x28 [ 669.792379][T28257] should_fail_ex+0x3f8/0x5c4 [ 669.793617][T28257] __should_fail_alloc_page+0x104/0x124 [ 669.795101][T28257] should_fail_alloc_page+0x10/0x20 [ 669.796523][T28257] prepare_alloc_pages+0x1b0/0x554 [ 669.797888][T28257] __alloc_pages+0x150/0x698 [ 669.799102][T28257] alloc_pages+0x4bc/0x7c0 [ 669.800341][T28257] __get_free_pages+0x18/0x84 [ 669.801591][T28257] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.803083][T28257] __apply_to_page_range+0x76c/0xc78 [ 669.804470][T28257] apply_to_page_range+0x4c/0x64 [ 669.805777][T28257] kasan_populate_vmalloc+0x60/0x70 [ 669.807163][T28257] alloc_vmap_area+0x1924/0x1a54 [ 669.808517][T28257] __get_vm_area_node+0x1b8/0x38c [ 669.809922][T28257] __vmalloc_node_range+0x1dc/0xebc 00:11:09 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000380)=r2}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x2, '\x00', 0x0, r3, 0x2, 0x4, 0x3}, 0x48) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x8, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) r5 = getpgid(0x0) syz_open_procfs$namespace(r5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x81, 0x8}, {0x8, 0xf7}, 0x9, 0x0, 0x3}) [ 669.811355][T28257] __vmalloc+0xb8/0xe0 [ 669.812402][T28257] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.813867][T28257] bpf_prog_alloc+0x48/0x108 [ 669.815121][T28257] bpf_prog_load+0x544/0x16c8 [ 669.816377][T28257] __sys_bpf+0x2ac/0x5dc [ 669.817602][T28257] __arm64_sys_bpf+0x80/0x98 [ 669.818862][T28257] invoke_syscall+0x98/0x2b8 [ 669.820065][T28257] el0_svc_common+0x130/0x23c [ 669.821269][T28257] do_el0_svc+0x48/0x58 [ 669.822374][T28257] el0_svc+0x54/0x158 [ 669.823403][T28257] el0t_64_sync_handler+0x84/0xfc [ 669.824716][T28257] el0t_64_sync+0x190/0x194 00:11:09 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x5, 0x8001, 0x401, 0xfffffffffffffff7}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000002c0)={0x80, 0x3, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f00000005c0)='GPL\x00', 0x7}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x0, 0x6, 0x0, 0x10, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41000, 0x4, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x2}, 0x10, r2, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x1, 0x4, 0xa, 0x3}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x3, 0x4}], 0x10, 0x180000}, 0x90) 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x10, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 69) 00:11:09 executing program 2: syz_clone(0x0, &(0x7f0000000000)="05f74cd42a2f613b7c058fdd0072ff6be9b76606f432c0f0c77721ed05e48ee12f3ccc117fcfab4b1c00a3f759b960f54bb3fec71151e8d16818ad59806d261736d243c819a02d99c30ad0d6ff8ff07b69fb0a922879224646536f69cce4f0bfa12c1ff97a61b32fdfb2e534cdbd31ef6c8604d7a91679d53282150603eabc91ac17f645d5c838a0132d73167101f93aa85165a6fcde3d8804f62264850f4e0ccc400c384e41eaf3b0bdfabbcce84d7326f1d71f63f79cdb4a91", 0xba, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") [ 669.911579][T28272] FAULT_INJECTION: forcing a failure. [ 669.911579][T28272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:09 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x5, 0x8001, 0x401, 0xfffffffffffffff7}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000002c0)={0x80, 0x3, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f00000005c0)='GPL\x00', 0x7}, 0x90) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x0, 0x6, 0x0, 0x10, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41000, 0x4, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x2}, 0x10, r2, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x1, 0x4, 0xa, 0x3}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x3, 0x4}], 0x10, 0x180000}, 0x90) [ 669.928986][T28272] CPU: 1 PID: 28272 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 669.931677][T28272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 669.934296][T28272] Call trace: [ 669.935156][T28272] dump_backtrace+0x1b8/0x1e4 [ 669.936447][T28272] show_stack+0x2c/0x44 [ 669.937602][T28272] dump_stack_lvl+0xd0/0x124 [ 669.938767][T28272] dump_stack+0x1c/0x28 [ 669.939842][T28272] should_fail_ex+0x3f8/0x5c4 [ 669.941050][T28272] __should_fail_alloc_page+0x104/0x124 [ 669.942584][T28272] should_fail_alloc_page+0x10/0x20 [ 669.943969][T28272] prepare_alloc_pages+0x1b0/0x554 [ 669.945384][T28272] __alloc_pages+0x150/0x698 [ 669.946592][T28272] alloc_pages+0x4bc/0x7c0 [ 669.947730][T28272] __get_free_pages+0x18/0x84 [ 669.948990][T28272] kasan_populate_vmalloc_pte+0x50/0xf0 [ 669.950499][T28272] __apply_to_page_range+0x76c/0xc78 [ 669.951896][T28272] apply_to_page_range+0x4c/0x64 [ 669.953208][T28272] kasan_populate_vmalloc+0x60/0x70 [ 669.954667][T28272] alloc_vmap_area+0x1924/0x1a54 [ 669.956039][T28272] __get_vm_area_node+0x1b8/0x38c [ 669.957404][T28272] __vmalloc_node_range+0x1dc/0xebc [ 669.958820][T28272] __vmalloc+0xb8/0xe0 [ 669.959914][T28272] bpf_prog_alloc_no_stats+0x60/0x438 [ 669.961349][T28272] bpf_prog_alloc+0x48/0x108 [ 669.962634][T28272] bpf_prog_load+0x544/0x16c8 [ 669.963933][T28272] __sys_bpf+0x2ac/0x5dc [ 669.965091][T28272] __arm64_sys_bpf+0x80/0x98 [ 669.966357][T28272] invoke_syscall+0x98/0x2b8 [ 669.967551][T28272] el0_svc_common+0x130/0x23c [ 669.968850][T28272] do_el0_svc+0x48/0x58 [ 669.969957][T28272] el0_svc+0x54/0x158 [ 669.971038][T28272] el0t_64_sync_handler+0x84/0xfc [ 669.972363][T28272] el0t_64_sync+0x190/0x194 00:11:09 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000380)=r2}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x2, '\x00', 0x0, r3, 0x2, 0x4, 0x3}, 0x48) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x8, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) r5 = getpgid(0x0) syz_open_procfs$namespace(r5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x81, 0x8}, {0x8, 0xf7}, 0x9, 0x0, 0x3}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000380)=r2}, 0x20) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x2, '\x00', 0x0, r3, 0x2, 0x4, 0x3}, 0x48) (async) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x8, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getpgid(0x0) (async) syz_open_procfs$namespace(r4, 0x0) (async) getpgid(0x0) (async) syz_open_procfs$namespace(r5, 0x0) (async) sched_rr_get_interval(r5, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x81, 0x8}, {0x8, 0xf7}, 0x9, 0x0, 0x3}) (async) 00:11:09 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x12, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:09 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000280)={0x5, 0x5, 0x8001, 0x401, 0xfffffffffffffff7}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000002c0)={0x80, 0x3, 0x3}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f00000005c0)='GPL\x00', 0x7}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x4, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x0, 0x6, 0x0, 0x10, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x22, &(0x7f0000000080)=""/34, 0x41000, 0x4, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x2}, 0x10, r2, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x1, 0x4, 0xa, 0x3}, {0x4, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x0, 0x9}, {0x0, 0x4, 0x3, 0x4}], 0x10, 0x180000}, 0x90) 00:11:09 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 70) 00:11:09 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000380)=r2}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x2, '\x00', 0x0, r3, 0x2, 0x4, 0x3}, 0x48) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x8, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpgid(0x0) (async) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) getpgid(0x0) (async) r5 = getpgid(0x0) syz_open_procfs$namespace(r5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000080)) (async) sched_rr_get_interval(r5, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x81, 0x8}, {0x8, 0xf7}, 0x9, 0x0, 0x3}) 00:11:09 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x13, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x20, 0x1, 0x8, 0x3, [], [0xffffffff, 0x2a, 0x9f53, 0x3], [0x1, 0x9, 0x7fff], [0xfffffffffffff800, 0xff, 0x4]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 71) 00:11:10 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x450002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeeb4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1c, 0xa, '/dev/infiniband/rdma_cm\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$TIOCCONS(r0, 0x541d) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x3f}}}, 0xa0) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffffe3) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x14, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.214335][T28318] FAULT_INJECTION: forcing a failure. 00:11:10 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x20, 0x1, 0x8, 0x3, [], [0xffffffff, 0x2a, 0x9f53, 0x3], [0x1, 0x9, 0x7fff], [0xfffffffffffff800, 0xff, 0x4]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 670.214335][T28318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d77ac00e9fcb9a238189b449e5") syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") [ 670.222930][T28318] CPU: 1 PID: 28318 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 670.225646][T28318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 670.228379][T28318] Call trace: [ 670.229227][T28318] dump_backtrace+0x1b8/0x1e4 [ 670.230489][T28318] show_stack+0x2c/0x44 [ 670.231568][T28318] dump_stack_lvl+0xd0/0x124 [ 670.232888][T28318] dump_stack+0x1c/0x28 [ 670.234041][T28318] should_fail_ex+0x3f8/0x5c4 [ 670.235338][T28318] __should_fail_alloc_page+0x104/0x124 [ 670.236761][T28318] should_fail_alloc_page+0x10/0x20 [ 670.238208][T28318] prepare_alloc_pages+0x1b0/0x554 [ 670.239657][T28318] __alloc_pages+0x150/0x698 [ 670.240870][T28318] alloc_pages+0x4bc/0x7c0 [ 670.242091][T28318] __get_free_pages+0x18/0x84 [ 670.243351][T28318] kasan_populate_vmalloc_pte+0x50/0xf0 [ 670.244929][T28318] __apply_to_page_range+0x76c/0xc78 [ 670.246331][T28318] apply_to_page_range+0x4c/0x64 [ 670.247715][T28318] kasan_populate_vmalloc+0x60/0x70 [ 670.249166][T28318] alloc_vmap_area+0x1924/0x1a54 [ 670.250573][T28318] __get_vm_area_node+0x1b8/0x38c [ 670.252006][T28318] __vmalloc_node_range+0x1dc/0xebc [ 670.253431][T28318] __vmalloc+0xb8/0xe0 [ 670.254547][T28318] bpf_prog_alloc_no_stats+0x60/0x438 [ 670.255977][T28318] bpf_prog_alloc+0x48/0x108 [ 670.257251][T28318] bpf_prog_load+0x544/0x16c8 [ 670.258522][T28318] __sys_bpf+0x2ac/0x5dc [ 670.259699][T28318] __arm64_sys_bpf+0x80/0x98 [ 670.260912][T28318] invoke_syscall+0x98/0x2b8 [ 670.262224][T28318] el0_svc_common+0x130/0x23c [ 670.263498][T28318] do_el0_svc+0x48/0x58 [ 670.264645][T28318] el0_svc+0x54/0x158 [ 670.265764][T28318] el0t_64_sync_handler+0x84/0xfc [ 670.267150][T28318] el0t_64_sync+0x190/0x194 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x15, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:10 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x450002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeeb4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1c, 0xa, '/dev/infiniband/rdma_cm\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeeb4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1c, 0xa, '/dev/infiniband/rdma_cm\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$TIOCCONS(r0, 0x541d) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x3f}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x3f}}}, 0xa0) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffffe3) 00:11:10 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x20, 0x1, 0x8, 0x3, [], [0xffffffff, 0x2a, 0x9f53, 0x3], [0x1, 0x9, 0x7fff], [0xfffffffffffff800, 0xff, 0x4]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x16, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:10 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x450002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeeb4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1c, 0xa, '/dev/infiniband/rdma_cm\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$TIOCCONS(r0, 0x541d) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x3f}}}, 0xa0) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffffe3) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x450002, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xeeb4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x1c, 0xa, '/dev/infiniband/rdma_cm\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) ioctl$TIOCCONS(r0, 0x541d) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x3f}}}, 0xa0) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffffe3) (async) 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 72) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4e}, @ldst={0x3, 0x3, 0x0, 0x5, 0x3, 0x80, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000f00)=""/4096, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0x1], &(0x7f00000001c0)=[{0x1, 0x2, 0x5, 0x5}], 0x10, 0x8000}, 0x90) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x17, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 1: getgid() bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x16, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.438974][T28353] FAULT_INJECTION: forcing a failure. [ 670.438974][T28353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 670.452030][T28353] CPU: 1 PID: 28353 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 670.454738][T28353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 670.457468][T28353] Call trace: [ 670.458358][T28353] dump_backtrace+0x1b8/0x1e4 [ 670.459662][T28353] show_stack+0x2c/0x44 [ 670.460767][T28353] dump_stack_lvl+0xd0/0x124 [ 670.462032][T28353] dump_stack+0x1c/0x28 [ 670.463138][T28353] should_fail_ex+0x3f8/0x5c4 [ 670.464363][T28353] __should_fail_alloc_page+0x104/0x124 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x16, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.465847][T28353] should_fail_alloc_page+0x10/0x20 [ 670.467270][T28353] prepare_alloc_pages+0x1b0/0x554 [ 670.468624][T28353] __alloc_pages+0x150/0x698 [ 670.469849][T28353] alloc_pages+0x4bc/0x7c0 [ 670.470995][T28353] __get_free_pages+0x18/0x84 [ 670.472278][T28353] kasan_populate_vmalloc_pte+0x50/0xf0 [ 670.473824][T28353] __apply_to_page_range+0x76c/0xc78 [ 670.475253][T28353] apply_to_page_range+0x4c/0x64 [ 670.476610][T28353] kasan_populate_vmalloc+0x60/0x70 [ 670.478033][T28353] alloc_vmap_area+0x1924/0x1a54 [ 670.479401][T28353] __get_vm_area_node+0x1b8/0x38c [ 670.480752][T28353] __vmalloc_node_range+0x1dc/0xebc [ 670.482226][T28353] __vmalloc+0xb8/0xe0 [ 670.483268][T28353] bpf_prog_alloc_no_stats+0x60/0x438 [ 670.484690][T28353] bpf_prog_alloc+0x48/0x108 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x16, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.485962][T28353] bpf_prog_load+0x544/0x16c8 [ 670.487138][T28353] __sys_bpf+0x2ac/0x5dc [ 670.488237][T28353] __arm64_sys_bpf+0x80/0x98 [ 670.489469][T28353] invoke_syscall+0x98/0x2b8 [ 670.490700][T28353] el0_svc_common+0x130/0x23c [ 670.492002][T28353] do_el0_svc+0x48/0x58 [ 670.493190][T28353] el0_svc+0x54/0x158 [ 670.494272][T28353] el0t_64_sync_handler+0x84/0xfc [ 670.495589][T28353] el0t_64_sync+0x190/0x194 00:11:10 executing program 1: getgid() (async) getgid() bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4e}, @ldst={0x3, 0x3, 0x0, 0x5, 0x3, 0x80, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000f00)=""/4096, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0x1], &(0x7f00000001c0)=[{0x1, 0x2, 0x5, 0x5}], 0x10, 0x8000}, 0x90) 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000200)="095830f572ee1fc4e30b3c9ef0f6d5bf2de0bed8a7100cfcdcb90c3709", 0x1d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:10 executing program 1: getgid() (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 73) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x18, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4e}, @ldst={0x3, 0x3, 0x0, 0x5, 0x3, 0x80, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000f00)=""/4096, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0x1], &(0x7f00000001c0)=[{0x1, 0x2, 0x5, 0x5}], 0x10, 0x8000}, 0x90) 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x5, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) [ 670.647964][T28389] FAULT_INJECTION: forcing a failure. [ 670.647964][T28389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.662508][T28389] CPU: 1 PID: 28389 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 670.665192][T28389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 670.667849][T28389] Call trace: [ 670.668730][T28389] dump_backtrace+0x1b8/0x1e4 [ 670.669986][T28389] show_stack+0x2c/0x44 [ 670.671094][T28389] dump_stack_lvl+0xd0/0x124 [ 670.672372][T28389] dump_stack+0x1c/0x28 00:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x5, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) [ 670.673485][T28389] should_fail_ex+0x3f8/0x5c4 [ 670.674719][T28389] __should_fail_alloc_page+0x104/0x124 [ 670.676224][T28389] should_fail_alloc_page+0x10/0x20 [ 670.677609][T28389] prepare_alloc_pages+0x1b0/0x554 [ 670.678961][T28389] __alloc_pages+0x150/0x698 [ 670.680188][T28389] alloc_pages+0x4bc/0x7c0 [ 670.681346][T28389] __get_free_pages+0x18/0x84 [ 670.682606][T28389] kasan_populate_vmalloc_pte+0x50/0xf0 [ 670.684134][T28389] __apply_to_page_range+0x76c/0xc78 [ 670.685572][T28389] apply_to_page_range+0x4c/0x64 [ 670.686964][T28389] kasan_populate_vmalloc+0x60/0x70 [ 670.688339][T28389] alloc_vmap_area+0x1924/0x1a54 [ 670.689626][T28389] __get_vm_area_node+0x1b8/0x38c 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 670.691004][T28389] __vmalloc_node_range+0x1dc/0xebc [ 670.692382][T28389] __vmalloc+0xb8/0xe0 [ 670.693468][T28389] bpf_prog_alloc_no_stats+0x60/0x438 [ 670.694956][T28389] bpf_prog_alloc+0x48/0x108 [ 670.696257][T28389] bpf_prog_load+0x544/0x16c8 [ 670.697526][T28389] __sys_bpf+0x2ac/0x5dc [ 670.698691][T28389] __arm64_sys_bpf+0x80/0x98 [ 670.699959][T28389] invoke_syscall+0x98/0x2b8 [ 670.701200][T28389] el0_svc_common+0x130/0x23c [ 670.702516][T28389] do_el0_svc+0x48/0x58 [ 670.703607][T28389] el0_svc+0x54/0x158 [ 670.704737][T28389] el0t_64_sync_handler+0x84/0xfc [ 670.706073][T28389] el0t_64_sync+0x190/0x194 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x16}, 0x48) 00:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x5, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 74) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="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") 00:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x5, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) 00:11:10 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x1a, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000340)={0x7fff, 0x4, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@ifindex=r1, 0x0, 0x0, 0x6, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x1b, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 75) 00:11:10 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) (async) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x1c, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") [ 670.944780][T28436] FAULT_INJECTION: forcing a failure. [ 670.944780][T28436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000340)={0x7fff, 0x4, 0x2}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@ifindex=r1, 0x0, 0x0, 0x6, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) [ 670.955591][T28436] CPU: 1 PID: 28436 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 670.958329][T28436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 670.961127][T28436] Call trace: [ 670.962085][T28436] dump_backtrace+0x1b8/0x1e4 [ 670.963342][T28436] show_stack+0x2c/0x44 [ 670.964535][T28436] dump_stack_lvl+0xd0/0x124 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x1d, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.965747][T28436] dump_stack+0x1c/0x28 [ 670.966873][T28436] should_fail_ex+0x3f8/0x5c4 [ 670.968154][T28436] __should_fail_alloc_page+0x104/0x124 [ 670.969647][T28436] should_fail_alloc_page+0x10/0x20 [ 670.971082][T28436] prepare_alloc_pages+0x1b0/0x554 [ 670.972459][T28436] __alloc_pages+0x150/0x698 [ 670.973684][T28436] alloc_pages+0x4bc/0x7c0 [ 670.974840][T28436] __get_free_pages+0x18/0x84 [ 670.976122][T28436] kasan_populate_vmalloc_pte+0x50/0xf0 [ 670.977617][T28436] __apply_to_page_range+0x76c/0xc78 [ 670.979083][T28436] apply_to_page_range+0x4c/0x64 [ 670.980413][T28436] kasan_populate_vmalloc+0x60/0x70 [ 670.981783][T28436] alloc_vmap_area+0x1924/0x1a54 [ 670.983124][T28436] __get_vm_area_node+0x1b8/0x38c [ 670.984443][T28436] __vmalloc_node_range+0x1dc/0xebc [ 670.985853][T28436] __vmalloc+0xb8/0xe0 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x1e, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 670.986944][T28436] bpf_prog_alloc_no_stats+0x60/0x438 [ 670.988395][T28436] bpf_prog_alloc+0x48/0x108 [ 670.989682][T28436] bpf_prog_load+0x544/0x16c8 [ 670.990967][T28436] __sys_bpf+0x2ac/0x5dc [ 670.992132][T28436] __arm64_sys_bpf+0x80/0x98 [ 670.993427][T28436] invoke_syscall+0x98/0x2b8 [ 670.994732][T28436] el0_svc_common+0x130/0x23c [ 670.996002][T28436] do_el0_svc+0x48/0x58 [ 670.997190][T28436] el0_svc+0x54/0x158 [ 670.998285][T28436] el0t_64_sync_handler+0x84/0xfc [ 670.999685][T28436] el0t_64_sync+0x190/0x194 00:11:10 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) 00:11:10 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xf8e41ccb477b43e3) 00:11:10 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 76) 00:11:10 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x4) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000340)={0x7fff, 0x4, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@ifindex=r1, 0x0, 0x0, 0x6, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:11:10 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:10 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xf8e41ccb477b43e3) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xf8e41ccb477b43e3) (async) [ 671.091455][T28458] FAULT_INJECTION: forcing a failure. [ 671.091455][T28458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="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") [ 671.103505][T28458] CPU: 1 PID: 28458 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 671.106269][T28458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 671.108896][T28458] Call trace: [ 671.109776][T28458] dump_backtrace+0x1b8/0x1e4 [ 671.111008][T28458] show_stack+0x2c/0x44 [ 671.112072][T28458] dump_stack_lvl+0xd0/0x124 [ 671.113378][T28458] dump_stack+0x1c/0x28 [ 671.114555][T28458] should_fail_ex+0x3f8/0x5c4 [ 671.115827][T28458] __should_fail_alloc_page+0x104/0x124 [ 671.117367][T28458] should_fail_alloc_page+0x10/0x20 [ 671.118798][T28458] prepare_alloc_pages+0x1b0/0x554 [ 671.120198][T28458] __alloc_pages+0x150/0x698 [ 671.121460][T28458] alloc_pages+0x4bc/0x7c0 [ 671.122619][T28458] __get_free_pages+0x18/0x84 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 671.123897][T28458] kasan_populate_vmalloc_pte+0x50/0xf0 [ 671.125373][T28458] __apply_to_page_range+0x76c/0xc78 [ 671.126833][T28458] apply_to_page_range+0x4c/0x64 [ 671.128143][T28458] kasan_populate_vmalloc+0x60/0x70 [ 671.129584][T28458] alloc_vmap_area+0x1924/0x1a54 [ 671.130933][T28458] __get_vm_area_node+0x1b8/0x38c [ 671.132310][T28458] __vmalloc_node_range+0x1dc/0xebc [ 671.133712][T28458] __vmalloc+0xb8/0xe0 [ 671.134796][T28458] bpf_prog_alloc_no_stats+0x60/0x438 [ 671.136206][T28458] bpf_prog_alloc+0x48/0x108 [ 671.137443][T28458] bpf_prog_load+0x544/0x16c8 [ 671.138648][T28458] __sys_bpf+0x2ac/0x5dc [ 671.139810][T28458] __arm64_sys_bpf+0x80/0x98 [ 671.141023][T28458] invoke_syscall+0x98/0x2b8 [ 671.142254][T28458] el0_svc_common+0x130/0x23c [ 671.143545][T28458] do_el0_svc+0x48/0x58 [ 671.144676][T28458] el0_svc+0x54/0x158 [ 671.145761][T28458] el0t_64_sync_handler+0x84/0xfc [ 671.147132][T28458] el0t_64_sync+0x190/0x194 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x3, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xf8e41ccb477b43e3) 00:11:11 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xc4505712cfc52659) 00:11:11 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0xf0, 0xfa, 0x9}) 00:11:11 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 77) [ 671.242850][T28482] FAULT_INJECTION: forcing a failure. [ 671.242850][T28482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.252950][T28482] CPU: 1 PID: 28482 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 671.255678][T28482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 671.258332][T28482] Call trace: [ 671.259238][T28482] dump_backtrace+0x1b8/0x1e4 [ 671.260477][T28482] show_stack+0x2c/0x44 [ 671.261613][T28482] dump_stack_lvl+0xd0/0x124 [ 671.262835][T28482] dump_stack+0x1c/0x28 [ 671.263977][T28482] should_fail_ex+0x3f8/0x5c4 [ 671.265284][T28482] __should_fail_alloc_page+0x104/0x124 [ 671.266759][T28482] should_fail_alloc_page+0x10/0x20 [ 671.268127][T28482] prepare_alloc_pages+0x1b0/0x554 [ 671.269511][T28482] __alloc_pages+0x150/0x698 [ 671.270715][T28482] alloc_pages+0x4bc/0x7c0 [ 671.271896][T28482] __get_free_pages+0x18/0x84 [ 671.273159][T28482] kasan_populate_vmalloc_pte+0x50/0xf0 [ 671.274699][T28482] __apply_to_page_range+0x76c/0xc78 [ 671.276077][T28482] apply_to_page_range+0x4c/0x64 [ 671.277422][T28482] kasan_populate_vmalloc+0x60/0x70 [ 671.278874][T28482] alloc_vmap_area+0x1924/0x1a54 [ 671.280164][T28482] __get_vm_area_node+0x1b8/0x38c [ 671.281512][T28482] __vmalloc_node_range+0x1dc/0xebc [ 671.282890][T28482] __vmalloc+0xb8/0xe0 [ 671.283930][T28482] bpf_prog_alloc_no_stats+0x60/0x438 [ 671.285339][T28482] bpf_prog_alloc+0x48/0x108 [ 671.286574][T28482] bpf_prog_load+0x544/0x16c8 [ 671.287828][T28482] __sys_bpf+0x2ac/0x5dc [ 671.288952][T28482] __arm64_sys_bpf+0x80/0x98 [ 671.290123][T28482] invoke_syscall+0x98/0x2b8 [ 671.291379][T28482] el0_svc_common+0x130/0x23c [ 671.292591][T28482] do_el0_svc+0x48/0x58 [ 671.293696][T28482] el0_svc+0x54/0x158 [ 671.294792][T28482] el0t_64_sync_handler+0x84/0xfc [ 671.296152][T28482] el0t_64_sync+0x190/0x194 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="8e05c950c831e1205a79b90adbc727ed735ed369eaaad3b84e78aad26335dee8d6141500449a5b43142af150826576135204a35ee5c29b442be112a16af1bba6dc8f4eedf18e1e6d493496482d1c851ff932b6c3fb294c1baeb1cf113c8d49c006b25cca056a414a1465e41ff5b5b0468258b07b27ee7725cbf7d30cb54c5521a8dca93207c6dc007d1b283a5e4680a867185326a44586eaafcc95079fc338b735a552e1df58becd312a7e468b16a21a90a556e5bb87e2df70352f9433bf9ef90960c32e69cc311a3a99f6cc370eb93b387264c99e946092bce75819952a49938680d31cecc33b4be73c2599f249bbbbea7258e51cf98f87626f1dc9") 00:11:11 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xc4505712cfc52659) 00:11:11 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0xf0, 0xfa, 0x9}) 00:11:11 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 78) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xc4505712cfc52659) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xc4505712cfc52659) (async) 00:11:11 executing program 3: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000100)}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0xf0, 0xfa, 0x9}) 00:11:11 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 79) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 671.439248][T28505] FAULT_INJECTION: forcing a failure. [ 671.439248][T28505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.449965][T28505] CPU: 0 PID: 28505 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 671.452627][T28505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 671.455293][T28505] Call trace: [ 671.456139][T28505] dump_backtrace+0x1b8/0x1e4 [ 671.457484][T28505] show_stack+0x2c/0x44 [ 671.458648][T28505] dump_stack_lvl+0xd0/0x124 [ 671.459963][T28505] dump_stack+0x1c/0x28 [ 671.461069][T28505] should_fail_ex+0x3f8/0x5c4 [ 671.462412][T28505] __should_fail_alloc_page+0x104/0x124 [ 671.463898][T28505] should_fail_alloc_page+0x10/0x20 [ 671.465316][T28505] prepare_alloc_pages+0x1b0/0x554 [ 671.466645][T28505] __alloc_pages+0x150/0x698 [ 671.467867][T28505] alloc_pages+0x4bc/0x7c0 [ 671.469095][T28505] __get_free_pages+0x18/0x84 [ 671.470318][T28505] kasan_populate_vmalloc_pte+0x50/0xf0 [ 671.471812][T28505] __apply_to_page_range+0x76c/0xc78 [ 671.473169][T28505] apply_to_page_range+0x4c/0x64 [ 671.474469][T28505] kasan_populate_vmalloc+0x60/0x70 [ 671.475877][T28505] alloc_vmap_area+0x1924/0x1a54 [ 671.477263][T28505] __get_vm_area_node+0x1b8/0x38c [ 671.478617][T28505] __vmalloc_node_range+0x1dc/0xebc [ 671.479945][T28505] __vmalloc+0xb8/0xe0 [ 671.481017][T28505] bpf_prog_alloc_no_stats+0x60/0x438 [ 671.482452][T28505] bpf_prog_alloc+0x48/0x108 [ 671.483641][T28505] bpf_prog_load+0x544/0x16c8 [ 671.484827][T28505] __sys_bpf+0x2ac/0x5dc [ 671.485987][T28505] __arm64_sys_bpf+0x80/0x98 [ 671.487174][T28505] invoke_syscall+0x98/0x2b8 [ 671.488389][T28505] el0_svc_common+0x130/0x23c [ 671.489640][T28505] do_el0_svc+0x48/0x58 [ 671.490782][T28505] el0_svc+0x54/0x158 [ 671.491844][T28505] el0t_64_sync_handler+0x84/0xfc [ 671.493212][T28505] el0t_64_sync+0x190/0x194 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:11 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_pts(r0, 0x141240) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000c40)={0x3, 0x0, 0x1f, 0x6, 0x1a0, &(0x7f0000000840)}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x9, 0xe, 0xde, &(0x7f0000000080)}) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1f}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$TIOCNOTTY(r0, 0x5422) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="81a7a22b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000018240000", @ANYRES32=0x1, @ANYBLOB="0000000003002d9e"], &(0x7f0000000540)='GPL\x00', 0x7, 0xc5, &(0x7f0000000580)=""/197, 0x40f00, 0x46, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0xa462, 0x8}, 0x10, 0x3, r2, 0x3, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x7, 0x2, 0x4}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0xf, 0xb}], 0x10, 0x4}, 0x90) 00:11:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x1, 0x1, 0xfffffffc, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x7, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 80) 00:11:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="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") 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:11 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_pts(r0, 0x141240) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000c40)={0x3, 0x0, 0x1f, 0x6, 0x1a0, &(0x7f0000000840)}) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x9, 0xe, 0xde, &(0x7f0000000080)}) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1f}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 64) ioctl$TIOCNOTTY(r0, 0x5422) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="81a7a22b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000018240000", @ANYRES32=0x1, @ANYBLOB="0000000003002d9e"], &(0x7f0000000540)='GPL\x00', 0x7, 0xc5, &(0x7f0000000580)=""/197, 0x40f00, 0x46, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0xa462, 0x8}, 0x10, 0x3, r2, 0x3, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x7, 0x2, 0x4}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0xf, 0xb}], 0x10, 0x4}, 0x90) 00:11:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x1, 0x1, 0xfffffffc, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x1, 0x1, 0xfffffffc, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 671.622128][T28525] FAULT_INJECTION: forcing a failure. [ 671.622128][T28525] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.625615][T28525] CPU: 1 PID: 28525 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 671.628334][T28525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 671.631035][T28525] Call trace: 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 671.631886][T28525] dump_backtrace+0x1b8/0x1e4 [ 671.633124][T28525] show_stack+0x2c/0x44 [ 671.634317][T28525] dump_stack_lvl+0xd0/0x124 [ 671.635526][T28525] dump_stack+0x1c/0x28 [ 671.636624][T28525] should_fail_ex+0x3f8/0x5c4 [ 671.637898][T28525] __should_fail_alloc_page+0x104/0x124 [ 671.639454][T28525] should_fail_alloc_page+0x10/0x20 00:11:11 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 671.640874][T28525] prepare_alloc_pages+0x1b0/0x554 [ 671.642237][T28525] __alloc_pages+0x150/0x698 [ 671.643474][T28525] alloc_pages+0x4bc/0x7c0 [ 671.644657][T28525] __get_free_pages+0x18/0x84 [ 671.645832][T28525] kasan_populate_vmalloc_pte+0x50/0xf0 [ 671.647325][T28525] __apply_to_page_range+0x76c/0xc78 [ 671.648800][T28525] apply_to_page_range+0x4c/0x64 [ 671.650075][T28525] kasan_populate_vmalloc+0x60/0x70 [ 671.651429][T28525] alloc_vmap_area+0x1924/0x1a54 [ 671.652755][T28525] __get_vm_area_node+0x1b8/0x38c [ 671.654076][T28525] __vmalloc_node_range+0x1dc/0xebc [ 671.655514][T28525] __vmalloc+0xb8/0xe0 [ 671.656587][T28525] bpf_prog_alloc_no_stats+0x60/0x438 [ 671.658035][T28525] bpf_prog_alloc+0x48/0x108 [ 671.659279][T28525] bpf_prog_load+0x544/0x16c8 [ 671.660575][T28525] __sys_bpf+0x2ac/0x5dc [ 671.661725][T28525] __arm64_sys_bpf+0x80/0x98 [ 671.662982][T28525] invoke_syscall+0x98/0x2b8 [ 671.664291][T28525] el0_svc_common+0x130/0x23c [ 671.665557][T28525] do_el0_svc+0x48/0x58 [ 671.666616][T28525] el0_svc+0x54/0x158 [ 671.667708][T28525] el0t_64_sync_handler+0x84/0xfc [ 671.669073][T28525] el0t_64_sync+0x190/0x194 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) 00:11:11 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x1, 0x1, 0xfffffffc, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 64) 00:11:11 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 81) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xb, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) 00:11:11 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_pts(r0, 0x141240) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000c40)={0x3, 0x0, 0x1f, 0x6, 0x1a0, &(0x7f0000000840)}) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000480)={0x3, 0x0, 0x9, 0xe, 0xde, &(0x7f0000000080)}) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1f}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$TIOCNOTTY(r0, 0x5422) (async) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="81a7a22b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000018240000", @ANYRES32=0x1, @ANYBLOB="0000000003002d9e"], &(0x7f0000000540)='GPL\x00', 0x7, 0xc5, &(0x7f0000000580)=""/197, 0x40f00, 0x46, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x10, 0xa462, 0x8}, 0x10, 0x3, r2, 0x3, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000740)=[{0x3, 0x7, 0x2, 0x4}, {0x1, 0x5, 0x6, 0x6}, {0x1, 0x1, 0xf, 0xb}], 0x10, 0x4}, 0x90) [ 671.812763][T28555] FAULT_INJECTION: forcing a failure. [ 671.812763][T28555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:11 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 671.829947][T28555] CPU: 0 PID: 28555 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 671.832694][T28555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 671.835346][T28555] Call trace: [ 671.836169][T28555] dump_backtrace+0x1b8/0x1e4 [ 671.837374][T28555] show_stack+0x2c/0x44 [ 671.838538][T28555] dump_stack_lvl+0xd0/0x124 [ 671.839736][T28555] dump_stack+0x1c/0x28 [ 671.840920][T28555] should_fail_ex+0x3f8/0x5c4 [ 671.842252][T28555] __should_fail_alloc_page+0x104/0x124 [ 671.843715][T28555] should_fail_alloc_page+0x10/0x20 [ 671.845099][T28555] prepare_alloc_pages+0x1b0/0x554 [ 671.846437][T28555] __alloc_pages+0x150/0x698 [ 671.847584][T28555] alloc_pages+0x4bc/0x7c0 [ 671.848807][T28555] __get_free_pages+0x18/0x84 [ 671.850067][T28555] kasan_populate_vmalloc_pte+0x50/0xf0 [ 671.851591][T28555] __apply_to_page_range+0x76c/0xc78 [ 671.852985][T28555] apply_to_page_range+0x4c/0x64 [ 671.854274][T28555] kasan_populate_vmalloc+0x60/0x70 [ 671.855626][T28555] alloc_vmap_area+0x1924/0x1a54 00:11:11 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer, @dead_binder_done], 0x79, 0x0, &(0x7f0000000080)="38d86e4ce820c23c82f5ffe1cf52f107c7260b220c56de05bc14ff482d034c7c3fdb24b0e5127566a936428653b9fba37340cf4c3e2f95107c2b64ad15744af7776cc2cddef67e3745ebf3ee135f1e134efbf2bcdaf8a98b2397cfdbd9f4608d406b1a310e16db9ed851ac5d85a37524900ee54e90e4a6fc39"}) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) [ 671.856882][T28555] __get_vm_area_node+0x1b8/0x38c [ 671.858210][T28555] __vmalloc_node_range+0x1dc/0xebc [ 671.859672][T28555] __vmalloc+0xb8/0xe0 [ 671.860803][T28555] bpf_prog_alloc_no_stats+0x60/0x438 [ 671.862330][T28555] bpf_prog_alloc+0x48/0x108 [ 671.863605][T28555] bpf_prog_load+0x544/0x16c8 [ 671.864884][T28555] __sys_bpf+0x2ac/0x5dc [ 671.866049][T28555] __arm64_sys_bpf+0x80/0x98 [ 671.867335][T28555] invoke_syscall+0x98/0x2b8 [ 671.868545][T28555] el0_svc_common+0x130/0x23c [ 671.869805][T28555] do_el0_svc+0x48/0x58 [ 671.871017][T28555] el0_svc+0x54/0x158 [ 671.872107][T28555] el0t_64_sync_handler+0x84/0xfc [ 671.873449][T28555] el0t_64_sync+0x190/0x194 00:11:11 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:11 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:11 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) 00:11:14 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 82) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xd, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer, @dead_binder_done], 0x79, 0x0, &(0x7f0000000080)="38d86e4ce820c23c82f5ffe1cf52f107c7260b220c56de05bc14ff482d034c7c3fdb24b0e5127566a936428653b9fba37340cf4c3e2f95107c2b64ad15744af7776cc2cddef67e3745ebf3ee135f1e134efbf2bcdaf8a98b2397cfdbd9f4608d406b1a310e16db9ed851ac5d85a37524900ee54e90e4a6fc39"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer, @dead_binder_done], 0x79, 0x0, &(0x7f0000000080)="38d86e4ce820c23c82f5ffe1cf52f107c7260b220c56de05bc14ff482d034c7c3fdb24b0e5127566a936428653b9fba37340cf4c3e2f95107c2b64ad15744af7776cc2cddef67e3745ebf3ee135f1e134efbf2bcdaf8a98b2397cfdbd9f4608d406b1a310e16db9ed851ac5d85a37524900ee54e90e4a6fc39"}) (async) 00:11:14 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:14 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer, @dead_binder_done], 0x79, 0x0, &(0x7f0000000080)="38d86e4ce820c23c82f5ffe1cf52f107c7260b220c56de05bc14ff482d034c7c3fdb24b0e5127566a936428653b9fba37340cf4c3e2f95107c2b64ad15744af7776cc2cddef67e3745ebf3ee135f1e134efbf2bcdaf8a98b2397cfdbd9f4608d406b1a310e16db9ed851ac5d85a37524900ee54e90e4a6fc39"}) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xe, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) (async, rerun: 32) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x19}, 0x48) 00:11:14 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 83) 00:11:14 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5}, 0x48) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xf, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) [ 674.728539][T28600] FAULT_INJECTION: forcing a failure. [ 674.728539][T28600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:14 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0xf5e8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 674.749038][T28600] CPU: 1 PID: 28600 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 674.751763][T28600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 674.754495][T28600] Call trace: [ 674.755371][T28600] dump_backtrace+0x1b8/0x1e4 [ 674.756635][T28600] show_stack+0x2c/0x44 [ 674.757742][T28600] dump_stack_lvl+0xd0/0x124 [ 674.758951][T28600] dump_stack+0x1c/0x28 [ 674.760050][T28600] should_fail_ex+0x3f8/0x5c4 [ 674.761311][T28600] __should_fail_alloc_page+0x104/0x124 [ 674.762805][T28600] should_fail_alloc_page+0x10/0x20 [ 674.764229][T28600] prepare_alloc_pages+0x1b0/0x554 [ 674.765618][T28600] __alloc_pages+0x150/0x698 [ 674.766816][T28600] alloc_pages+0x4bc/0x7c0 [ 674.767980][T28600] __get_free_pages+0x18/0x84 [ 674.769298][T28600] kasan_populate_vmalloc_pte+0x50/0xf0 [ 674.770761][T28600] __apply_to_page_range+0x76c/0xc78 [ 674.772224][T28600] apply_to_page_range+0x4c/0x64 [ 674.773522][T28600] kasan_populate_vmalloc+0x60/0x70 [ 674.774924][T28600] alloc_vmap_area+0x1924/0x1a54 [ 674.776209][T28600] __get_vm_area_node+0x1b8/0x38c [ 674.777512][T28600] __vmalloc_node_range+0x1dc/0xebc [ 674.778833][T28600] __vmalloc+0xb8/0xe0 [ 674.779915][T28600] bpf_prog_alloc_no_stats+0x60/0x438 [ 674.781344][T28600] bpf_prog_alloc+0x48/0x108 [ 674.782599][T28600] bpf_prog_load+0x544/0x16c8 [ 674.783875][T28600] __sys_bpf+0x2ac/0x5dc [ 674.784958][T28600] __arm64_sys_bpf+0x80/0x98 [ 674.786227][T28600] invoke_syscall+0x98/0x2b8 [ 674.787452][T28600] el0_svc_common+0x130/0x23c [ 674.788648][T28600] do_el0_svc+0x48/0x58 [ 674.789760][T28600] el0_svc+0x54/0x158 [ 674.790852][T28600] el0t_64_sync_handler+0x84/0xfc [ 674.792213][T28600] el0t_64_sync+0x190/0x194 00:11:14 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:14 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0xf5e8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0xf5e8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) (async) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:14 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 84) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:14 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x32, 0x0, 0xf5e8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) [ 674.897118][T28626] FAULT_INJECTION: forcing a failure. [ 674.897118][T28626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 674.911661][T28626] CPU: 1 PID: 28626 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 674.914387][T28626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 674.917087][T28626] Call trace: [ 674.917952][T28626] dump_backtrace+0x1b8/0x1e4 [ 674.919204][T28626] show_stack+0x2c/0x44 [ 674.920352][T28626] dump_stack_lvl+0xd0/0x124 [ 674.921606][T28626] dump_stack+0x1c/0x28 [ 674.922706][T28626] should_fail_ex+0x3f8/0x5c4 [ 674.923995][T28626] __should_fail_alloc_page+0x104/0x124 [ 674.925545][T28626] should_fail_alloc_page+0x10/0x20 [ 674.926950][T28626] prepare_alloc_pages+0x1b0/0x554 [ 674.928349][T28626] __alloc_pages+0x150/0x698 [ 674.929553][T28626] alloc_pages+0x4bc/0x7c0 [ 674.930751][T28626] __get_free_pages+0x18/0x84 [ 674.932107][T28626] kasan_populate_vmalloc_pte+0x50/0xf0 [ 674.933598][T28626] __apply_to_page_range+0x76c/0xc78 [ 674.935048][T28626] apply_to_page_range+0x4c/0x64 [ 674.936420][T28626] kasan_populate_vmalloc+0x60/0x70 [ 674.937800][T28626] alloc_vmap_area+0x1924/0x1a54 [ 674.939131][T28626] __get_vm_area_node+0x1b8/0x38c [ 674.940462][T28626] __vmalloc_node_range+0x1dc/0xebc [ 674.941798][T28626] __vmalloc+0xb8/0xe0 [ 674.942920][T28626] bpf_prog_alloc_no_stats+0x60/0x438 [ 674.944368][T28626] bpf_prog_alloc+0x48/0x108 [ 674.945595][T28626] bpf_prog_load+0x544/0x16c8 [ 674.946815][T28626] __sys_bpf+0x2ac/0x5dc [ 674.948010][T28626] __arm64_sys_bpf+0x80/0x98 [ 674.949311][T28626] invoke_syscall+0x98/0x2b8 [ 674.950596][T28626] el0_svc_common+0x130/0x23c [ 674.951819][T28626] do_el0_svc+0x48/0x58 [ 674.952912][T28626] el0_svc+0x54/0x158 [ 674.953964][T28626] el0t_64_sync_handler+0x84/0xfc [ 674.955320][T28626] el0t_64_sync+0x190/0x194 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d45565a3116bd00800000356a768135e4c7d232eef7acfa96649ed82cb0c35cef5b6813c05ee477585a1b986485ef49c992b36b181d4f5fe9d67bada6aa873c37c26538e6319b85e1c26792c3818a932c58cb0c454b8834f9f9653a1385349fecdf26be05f8907b3d5054d90ec0b097b641fa866b6aae3602a95a406bc75550e41719b296dd4c45414da84d9ba952433bbcfe7599f9728a2e70e16fc9e8e6c1d6ced046c528facfe1706697ae3f61f3748faf22943fde3c9cd1ebac207860712b6bc5b77056be2a17188ab309e6515783459000301c2c92d345aed02f47077adbeb6e32b537e7ff7a3cc0f71579d561f98f35d786a1d1730c944ac4ed52"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:14 executing program 1: pselect6(0x40, &(0x7f0000000180)={0x9, 0x54, 0x2e66, 0x3ff, 0x6, 0x0, 0x8, 0x8}, &(0x7f0000000040)={0x5, 0x7f, 0x95, 0x9, 0x7, 0x2bbc, 0xffffffff, 0x5c21}, &(0x7f0000000080)={0xfff, 0x71, 0x100000001, 0x2, 0x9, 0x9, 0xffffffffffffffff, 0xb092}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xfff, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x416080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x39b7, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x9, 0x3, 0x8, 0x2, 0x1, 0x2ec2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18064da9df0000fbd9535f15814b000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x74, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r1, r2, 0x1, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x2, 0x6}, {0x3, 0x2, 0x10, 0x9}], 0x10, 0x5}, 0x90) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 85) 00:11:14 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:14 executing program 1: pselect6(0x40, &(0x7f0000000180)={0x9, 0x54, 0x2e66, 0x3ff, 0x6, 0x0, 0x8, 0x8}, &(0x7f0000000040)={0x5, 0x7f, 0x95, 0x9, 0x7, 0x2bbc, 0xffffffff, 0x5c21}, &(0x7f0000000080)={0xfff, 0x71, 0x100000001, 0x2, 0x9, 0x9, 0xffffffffffffffff, 0xb092}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000680)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xfff, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xfff, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x416080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x39b7, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x9, 0x3, 0x8, 0x2, 0x1, 0x2ec2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18064da9df0000fbd9535f15814b000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x74, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r1, r2, 0x1, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x2, 0x6}, {0x3, 0x2, 0x10, 0x9}], 0x10, 0x5}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18064da9df0000fbd9535f15814b000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x74, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r1, r2, 0x1, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x2, 0x6}, {0x3, 0x2, 0x10, 0x9}], 0x10, 0x5}, 0x90) 00:11:14 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x7, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:14 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@generic={0x1f, 0x5, 0x3, 0x9, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x9a, &(0x7f0000000080)=""/154, 0x41100, 0x1, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xf1a, 0xac}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x2, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x90) 00:11:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x13, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 1: pselect6(0x40, &(0x7f0000000180)={0x9, 0x54, 0x2e66, 0x3ff, 0x6, 0x0, 0x8, 0x8}, &(0x7f0000000040)={0x5, 0x7f, 0x95, 0x9, 0x7, 0x2bbc, 0xffffffff, 0x5c21}, &(0x7f0000000080)={0xfff, 0x71, 0x100000001, 0x2, 0x9, 0x9, 0xffffffffffffffff, 0xb092}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xfff, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x416080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x39b7, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x9, 0x3, 0x8, 0x2, 0x1, 0x2ec2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18064da9df0000fbd9535f15814b000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x74, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r1, r2, 0x1, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x2, 0x6}, {0x3, 0x2, 0x10, 0x9}], 0x10, 0x5}, 0x90) pselect6(0x40, &(0x7f0000000180)={0x9, 0x54, 0x2e66, 0x3ff, 0x6, 0x0, 0x8, 0x8}, &(0x7f0000000040)={0x5, 0x7f, 0x95, 0x9, 0x7, 0x2bbc, 0xffffffff, 0x5c21}, &(0x7f0000000080)={0xfff, 0x71, 0x100000001, 0x2, 0x9, 0x9, 0xffffffffffffffff, 0xb092}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000680)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0xfff, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xe}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x416080, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x39b7, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x9, 0x3, 0x8, 0x2, 0x1, 0x2ec2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18064da9df0000fbd9535f15814b000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc6, &(0x7f0000000240)=""/198, 0x41000, 0x74, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x4, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r0, r1, r2, 0x1, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x2, 0x6}, {0x3, 0x2, 0x10, 0x9}], 0x10, 0x5}, 0x90) (async) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 675.106655][T28656] FAULT_INJECTION: forcing a failure. [ 675.106655][T28656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:15 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@generic={0x1f, 0x5, 0x3, 0x9, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x9a, &(0x7f0000000080)=""/154, 0x41100, 0x1, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xf1a, 0xac}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x2, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x90) [ 675.134690][T28656] CPU: 1 PID: 28656 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 675.137369][T28656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 675.140087][T28656] Call trace: [ 675.140956][T28656] dump_backtrace+0x1b8/0x1e4 [ 675.142210][T28656] show_stack+0x2c/0x44 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 675.143302][T28656] dump_stack_lvl+0xd0/0x124 [ 675.144508][T28656] dump_stack+0x1c/0x28 [ 675.145572][T28656] should_fail_ex+0x3f8/0x5c4 [ 675.146854][T28656] __should_fail_alloc_page+0x104/0x124 [ 675.148341][T28656] should_fail_alloc_page+0x10/0x20 [ 675.149780][T28656] prepare_alloc_pages+0x1b0/0x554 [ 675.151148][T28656] __alloc_pages+0x150/0x698 [ 675.152411][T28656] alloc_pages+0x4bc/0x7c0 [ 675.153602][T28656] __get_free_pages+0x18/0x84 [ 675.154811][T28656] kasan_populate_vmalloc_pte+0x50/0xf0 [ 675.156332][T28656] __apply_to_page_range+0x76c/0xc78 00:11:15 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x1, 0x110880}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d45565a3116bd00800000356a768135e4c7d232eef7acfa96649ed82cb0c35cef5b6813c05ee477585a1b986485ef49c992b36b181d4f5fe9d67bada6aa873c37c26538e6319b85e1c26792c3818a932c58cb0c454b8834f9f9653a1385349fecdf26be05f8907b3d5054d90ec0b097b641fa866b6aae3602a95a406bc75550e41719b296dd4c45414da84d9ba952433bbcfe7599f9728a2e70e16fc9e8e6c1d6ced046c528facfe1706697ae3f61f3748faf22943fde3c9cd1ebac207860712b6bc5b77056be2a17188ab309e6515783459000301c2c92d345aed02f47077adbeb6e32b537e7ff7a3cc0f71579d561f98f35d786a1d1730c944ac4ed52"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 675.157723][T28656] apply_to_page_range+0x4c/0x64 [ 675.159047][T28656] kasan_populate_vmalloc+0x60/0x70 [ 675.160482][T28656] alloc_vmap_area+0x1924/0x1a54 [ 675.161874][T28656] __get_vm_area_node+0x1b8/0x38c [ 675.163266][T28656] __vmalloc_node_range+0x1dc/0xebc [ 675.164659][T28656] __vmalloc+0xb8/0xe0 [ 675.165770][T28656] bpf_prog_alloc_no_stats+0x60/0x438 [ 675.167173][T28656] bpf_prog_alloc+0x48/0x108 [ 675.168494][T28656] bpf_prog_load+0x544/0x16c8 [ 675.169744][T28656] __sys_bpf+0x2ac/0x5dc [ 675.170872][T28656] __arm64_sys_bpf+0x80/0x98 [ 675.172101][T28656] invoke_syscall+0x98/0x2b8 [ 675.173329][T28656] el0_svc_common+0x130/0x23c [ 675.174548][T28656] do_el0_svc+0x48/0x58 [ 675.175709][T28656] el0_svc+0x54/0x158 [ 675.176734][T28656] el0t_64_sync_handler+0x84/0xfc [ 675.178111][T28656] el0t_64_sync+0x190/0x194 00:11:15 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 86) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xa) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:15 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10901, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@generic={0x1f, 0x5, 0x3, 0x9, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x9a, &(0x7f0000000080)=""/154, 0x41100, 0x1, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xf1a, 0xac}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x2, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) fsmount(0xffffffffffffffff, 0x0, 0x5) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@generic={0x1f, 0x5, 0x3, 0x9, 0x101}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x9a, &(0x7f0000000080)=""/154, 0x41100, 0x1, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xf1a, 0xac}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x2, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x90) (async) 00:11:15 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d45565a3116bd00800000356a768135e4c7d232eef7acfa96649ed82cb0c35cef5b6813c05ee477585a1b986485ef49c992b36b181d4f5fe9d67bada6aa873c37c26538e6319b85e1c26792c3818a932c58cb0c454b8834f9f9653a1385349fecdf26be05f8907b3d5054d90ec0b097b641fa866b6aae3602a95a406bc75550e41719b296dd4c45414da84d9ba952433bbcfe7599f9728a2e70e16fc9e8e6c1d6ced046c528facfe1706697ae3f61f3748faf22943fde3c9cd1ebac207860712b6bc5b77056be2a17188ab309e6515783459000301c2c92d345aed02f47077adbeb6e32b537e7ff7a3cc0f71579d561f98f35d786a1d1730c944ac4ed52"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x15, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:15 executing program 3: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x7}) r0 = fsmount(0xffffffffffffffff, 0x0, 0x85) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x8, 0x51, 0x5}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xa) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x16, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 87) 00:11:15 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d45565a3116bd00800000356a768135e4c7d232eef7acfa96649ed82cb0c35cef5b6813c05ee477585a1b986485ef49c992b36b181d4f5fe9d67bada6aa873c37c26538e6319b85e1c26792c3818a932c58cb0c454b8834f9f9653a1385349fecdf26be05f8907b3d5054d90ec0b097b641fa866b6aae3602a95a406bc75550e41719b296dd4c45414da84d9ba952433bbcfe7599f9728a2e70e16fc9e8e6c1d6ced046c528facfe1706697ae3f61f3748faf22943fde3c9cd1ebac207860712b6bc5b77056be2a17188ab309e6515783459000301c2c92d345aed02f47077adbeb6e32b537e7ff7a3cc0f71579d561f98f35d786a1d1730c944ac4ed52"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4}, 0x48) 00:11:15 executing program 3: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x7}) r0 = fsmount(0xffffffffffffffff, 0x0, 0x85) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x8, 0x51, 0x5}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xa) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x17, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 675.403262][T28703] FAULT_INJECTION: forcing a failure. [ 675.403262][T28703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 675.423126][T28703] CPU: 0 PID: 28703 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 675.425902][T28703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 675.428586][T28703] Call trace: [ 675.429461][T28703] dump_backtrace+0x1b8/0x1e4 [ 675.430692][T28703] show_stack+0x2c/0x44 [ 675.431837][T28703] dump_stack_lvl+0xd0/0x124 [ 675.433108][T28703] dump_stack+0x1c/0x28 [ 675.434229][T28703] should_fail_ex+0x3f8/0x5c4 [ 675.435436][T28703] __should_fail_alloc_page+0x104/0x124 [ 675.436888][T28703] should_fail_alloc_page+0x10/0x20 [ 675.438307][T28703] prepare_alloc_pages+0x1b0/0x554 [ 675.439693][T28703] __alloc_pages+0x150/0x698 [ 675.440954][T28703] alloc_pages+0x4bc/0x7c0 [ 675.442168][T28703] __get_free_pages+0x18/0x84 [ 675.443462][T28703] kasan_populate_vmalloc_pte+0x50/0xf0 [ 675.445039][T28703] __apply_to_page_range+0x76c/0xc78 [ 675.446513][T28703] apply_to_page_range+0x4c/0x64 [ 675.447934][T28703] kasan_populate_vmalloc+0x60/0x70 [ 675.449370][T28703] alloc_vmap_area+0x1924/0x1a54 [ 675.450744][T28703] __get_vm_area_node+0x1b8/0x38c [ 675.452078][T28703] __vmalloc_node_range+0x1dc/0xebc [ 675.453499][T28703] __vmalloc+0xb8/0xe0 [ 675.454564][T28703] bpf_prog_alloc_no_stats+0x60/0x438 [ 675.455999][T28703] bpf_prog_alloc+0x48/0x108 [ 675.457237][T28703] bpf_prog_load+0x544/0x16c8 [ 675.458492][T28703] __sys_bpf+0x2ac/0x5dc [ 675.459640][T28703] __arm64_sys_bpf+0x80/0x98 [ 675.460879][T28703] invoke_syscall+0x98/0x2b8 [ 675.462130][T28703] el0_svc_common+0x130/0x23c [ 675.463411][T28703] do_el0_svc+0x48/0x58 [ 675.464517][T28703] el0_svc+0x54/0x158 [ 675.465615][T28703] el0t_64_sync_handler+0x84/0xfc [ 675.466958][T28703] el0t_64_sync+0x190/0x194 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4}, 0x48) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4005) 00:11:15 executing program 3: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x7}) fsmount(0xffffffffffffffff, 0x0, 0x85) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x85) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x8, 0x51, 0x5}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:11:15 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 88) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4005) 00:11:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0xf) r1 = fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\x00\x00\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4}, 0x48) 00:11:15 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4005) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4005) (async) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x19, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0xf) r1 = fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\x00\x00\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4}, 0x48) [ 675.602286][T28731] FAULT_INJECTION: forcing a failure. [ 675.602286][T28731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.617657][T28731] CPU: 0 PID: 28731 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 675.620367][T28731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 675.623019][T28731] Call trace: [ 675.623964][T28731] dump_backtrace+0x1b8/0x1e4 [ 675.625174][T28731] show_stack+0x2c/0x44 [ 675.626310][T28731] dump_stack_lvl+0xd0/0x124 [ 675.627541][T28731] dump_stack+0x1c/0x28 [ 675.628649][T28731] should_fail_ex+0x3f8/0x5c4 [ 675.629868][T28731] __should_fail_alloc_page+0x104/0x124 [ 675.631410][T28731] should_fail_alloc_page+0x10/0x20 [ 675.632792][T28731] prepare_alloc_pages+0x1b0/0x554 [ 675.634124][T28731] __alloc_pages+0x150/0x698 [ 675.635360][T28731] alloc_pages+0x4bc/0x7c0 [ 675.636555][T28731] __get_free_pages+0x18/0x84 [ 675.637816][T28731] kasan_populate_vmalloc_pte+0x50/0xf0 [ 675.639260][T28731] __apply_to_page_range+0x76c/0xc78 [ 675.640693][T28731] apply_to_page_range+0x4c/0x64 [ 675.642035][T28731] kasan_populate_vmalloc+0x60/0x70 [ 675.643417][T28731] alloc_vmap_area+0x1924/0x1a54 [ 675.644827][T28731] __get_vm_area_node+0x1b8/0x38c [ 675.646145][T28731] __vmalloc_node_range+0x1dc/0xebc [ 675.647585][T28731] __vmalloc+0xb8/0xe0 00:11:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0xf) r1 = fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='\x00\x00\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=r2, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) [ 675.648695][T28731] bpf_prog_alloc_no_stats+0x60/0x438 [ 675.650197][T28731] bpf_prog_alloc+0x48/0x108 [ 675.651454][T28731] bpf_prog_load+0x544/0x16c8 [ 675.652765][T28731] __sys_bpf+0x2ac/0x5dc [ 675.653950][T28731] __arm64_sys_bpf+0x80/0x98 [ 675.655195][T28731] invoke_syscall+0x98/0x2b8 [ 675.656517][T28731] el0_svc_common+0x130/0x23c [ 675.657777][T28731] do_el0_svc+0x48/0x58 [ 675.658921][T28731] el0_svc+0x54/0x158 [ 675.659971][T28731] el0t_64_sync_handler+0x84/0xfc [ 675.661358][T28731] el0t_64_sync+0x190/0x194 00:11:15 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x78, 0x48, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x400}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:11:15 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 89) 00:11:15 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x78, 0x48, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x400}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) (rerun: 32) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=0x1, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x78, 0x48, 0x200, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x400}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1b, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 675.830135][T28765] FAULT_INJECTION: forcing a failure. [ 675.830135][T28765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:15 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=0x1, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 675.840636][T28765] CPU: 0 PID: 28765 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 675.843241][T28765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 675.845891][T28765] Call trace: [ 675.846775][T28765] dump_backtrace+0x1b8/0x1e4 [ 675.848032][T28765] show_stack+0x2c/0x44 [ 675.849153][T28765] dump_stack_lvl+0xd0/0x124 [ 675.850402][T28765] dump_stack+0x1c/0x28 [ 675.851575][T28765] should_fail_ex+0x3f8/0x5c4 [ 675.852819][T28765] __should_fail_alloc_page+0x104/0x124 [ 675.854337][T28765] should_fail_alloc_page+0x10/0x20 [ 675.855713][T28765] prepare_alloc_pages+0x1b0/0x554 [ 675.857125][T28765] __alloc_pages+0x150/0x698 [ 675.858322][T28765] alloc_pages+0x4bc/0x7c0 [ 675.859571][T28765] __get_free_pages+0x18/0x84 [ 675.860886][T28765] kasan_populate_vmalloc_pte+0x50/0xf0 [ 675.862395][T28765] __apply_to_page_range+0x76c/0xc78 [ 675.863778][T28765] apply_to_page_range+0x4c/0x64 [ 675.865071][T28765] kasan_populate_vmalloc+0x60/0x70 [ 675.866419][T28765] alloc_vmap_area+0x1924/0x1a54 [ 675.867746][T28765] __get_vm_area_node+0x1b8/0x38c [ 675.869080][T28765] __vmalloc_node_range+0x1dc/0xebc [ 675.870497][T28765] __vmalloc+0xb8/0xe0 [ 675.871598][T28765] bpf_prog_alloc_no_stats+0x60/0x438 [ 675.872983][T28765] bpf_prog_alloc+0x48/0x108 [ 675.874231][T28765] bpf_prog_load+0x544/0x16c8 [ 675.875468][T28765] __sys_bpf+0x2ac/0x5dc [ 675.876643][T28765] __arm64_sys_bpf+0x80/0x98 [ 675.877870][T28765] invoke_syscall+0x98/0x2b8 [ 675.879114][T28765] el0_svc_common+0x130/0x23c [ 675.880387][T28765] do_el0_svc+0x48/0x58 [ 675.881564][T28765] el0_svc+0x54/0x158 [ 675.882604][T28765] el0t_64_sync_handler+0x84/0xfc [ 675.883973][T28765] el0t_64_sync+0x190/0x194 00:11:15 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 90) 00:11:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 1: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040), 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:15 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=0x1, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:15 executing program 1: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040), 0x1) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) [ 675.978407][T28788] FAULT_INJECTION: forcing a failure. [ 675.978407][T28788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 675.995347][T28788] CPU: 1 PID: 28788 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 675.998095][T28788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 676.000671][T28788] Call trace: [ 676.001531][T28788] dump_backtrace+0x1b8/0x1e4 [ 676.002738][T28788] show_stack+0x2c/0x44 [ 676.003867][T28788] dump_stack_lvl+0xd0/0x124 [ 676.005129][T28788] dump_stack+0x1c/0x28 [ 676.006174][T28788] should_fail_ex+0x3f8/0x5c4 [ 676.007483][T28788] __should_fail_alloc_page+0x104/0x124 [ 676.009017][T28788] should_fail_alloc_page+0x10/0x20 [ 676.010441][T28788] prepare_alloc_pages+0x1b0/0x554 [ 676.011836][T28788] __alloc_pages+0x150/0x698 [ 676.013080][T28788] alloc_pages+0x4bc/0x7c0 [ 676.014287][T28788] __get_free_pages+0x18/0x84 [ 676.015579][T28788] kasan_populate_vmalloc_pte+0x50/0xf0 [ 676.017211][T28788] __apply_to_page_range+0x76c/0xc78 [ 676.018626][T28788] apply_to_page_range+0x4c/0x64 [ 676.019981][T28788] kasan_populate_vmalloc+0x60/0x70 [ 676.021382][T28788] alloc_vmap_area+0x1924/0x1a54 [ 676.022697][T28788] __get_vm_area_node+0x1b8/0x38c [ 676.024018][T28788] __vmalloc_node_range+0x1dc/0xebc [ 676.025404][T28788] __vmalloc+0xb8/0xe0 [ 676.026440][T28788] bpf_prog_alloc_no_stats+0x60/0x438 [ 676.027853][T28788] bpf_prog_alloc+0x48/0x108 [ 676.029111][T28788] bpf_prog_load+0x544/0x16c8 [ 676.030363][T28788] __sys_bpf+0x2ac/0x5dc [ 676.031487][T28788] __arm64_sys_bpf+0x80/0x98 [ 676.032714][T28788] invoke_syscall+0x98/0x2b8 [ 676.033971][T28788] el0_svc_common+0x130/0x23c [ 676.035291][T28788] do_el0_svc+0x48/0x58 00:11:15 executing program 1: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040), 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:15 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x21, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 676.036391][T28788] el0_svc+0x54/0x158 [ 676.037505][T28788] el0t_64_sync_handler+0x84/0xfc [ 676.038894][T28788] el0t_64_sync+0x190/0x194 00:11:15 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 91) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x22, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000002c0)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000100)="2c240b88790500191ce0ce5c20f04b8914e8854c6c5435c0de7d9475c9c8007352e72915de493a566bc8fbd32d9250791c5a53754861cce0869b00b0288c657ee864124855621c0dad2903844166c2bbd2d08169cefbacb18a76d2eb89a5c22d83b17bc4e6a1d525c42de4fe0b76d695bbe7605d2567c1d5ec8a52716d02e1e351e1fc4d6afddef188e60c3b7bacb19117a91d6f4890e6fd6d000337a1c70e106795a59c283866f1e8d997e75c0f89fc6c718c6630c47a53a8bc95dbbb829db63caaadd662646678c217ccf19851f26af340edd830f44d95286f0869dc292a1d9198ca3e0943c8b036e6aa50ff66e6af5a3c5ae7606bcdf5", 0xf8, 0x7fffffffffffffff, 0x0, 0x1}, &(0x7f0000000240)) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 1: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x23, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:16 executing program 1: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) (async) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) (async) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 92) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 676.228971][T28828] FAULT_INJECTION: forcing a failure. [ 676.228971][T28828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.238068][T28828] CPU: 0 PID: 28828 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 676.240783][T28828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 676.243420][T28828] Call trace: [ 676.244358][T28828] dump_backtrace+0x1b8/0x1e4 [ 676.245545][T28828] show_stack+0x2c/0x44 [ 676.246644][T28828] dump_stack_lvl+0xd0/0x124 [ 676.247818][T28828] dump_stack+0x1c/0x28 [ 676.248993][T28828] should_fail_ex+0x3f8/0x5c4 [ 676.250271][T28828] __should_fail_alloc_page+0x104/0x124 [ 676.251816][T28828] should_fail_alloc_page+0x10/0x20 [ 676.253219][T28828] prepare_alloc_pages+0x1b0/0x554 [ 676.254602][T28828] __alloc_pages+0x150/0x698 [ 676.255790][T28828] alloc_pages+0x4bc/0x7c0 [ 676.256919][T28828] __get_free_pages+0x18/0x84 [ 676.258252][T28828] kasan_populate_vmalloc_pte+0x50/0xf0 [ 676.259706][T28828] __apply_to_page_range+0x76c/0xc78 [ 676.261160][T28828] apply_to_page_range+0x4c/0x64 [ 676.262509][T28828] kasan_populate_vmalloc+0x60/0x70 [ 676.263903][T28828] alloc_vmap_area+0x1924/0x1a54 [ 676.265215][T28828] __get_vm_area_node+0x1b8/0x38c [ 676.266512][T28828] __vmalloc_node_range+0x1dc/0xebc [ 676.267913][T28828] __vmalloc+0xb8/0xe0 [ 676.268975][T28828] bpf_prog_alloc_no_stats+0x60/0x438 [ 676.270431][T28828] bpf_prog_alloc+0x48/0x108 [ 676.271573][T28828] bpf_prog_load+0x544/0x16c8 [ 676.272694][T28828] __sys_bpf+0x2ac/0x5dc [ 676.273840][T28828] __arm64_sys_bpf+0x80/0x98 [ 676.275118][T28828] invoke_syscall+0x98/0x2b8 [ 676.276337][T28828] el0_svc_common+0x130/0x23c [ 676.277629][T28828] do_el0_svc+0x48/0x58 [ 676.278731][T28828] el0_svc+0x54/0x158 [ 676.279814][T28828] el0t_64_sync_handler+0x84/0xfc [ 676.281125][T28828] el0t_64_sync+0x190/0x194 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000280)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000002c0)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000100)="2c240b88790500191ce0ce5c20f04b8914e8854c6c5435c0de7d9475c9c8007352e72915de493a566bc8fbd32d9250791c5a53754861cce0869b00b0288c657ee864124855621c0dad2903844166c2bbd2d08169cefbacb18a76d2eb89a5c22d83b17bc4e6a1d525c42de4fe0b76d695bbe7605d2567c1d5ec8a52716d02e1e351e1fc4d6afddef188e60c3b7bacb19117a91d6f4890e6fd6d000337a1c70e106795a59c283866f1e8d997e75c0f89fc6c718c6630c47a53a8bc95dbbb829db63caaadd662646678c217ccf19851f26af340edd830f44d95286f0869dc292a1d9198ca3e0943c8b036e6aa50ff66e6af5a3c5ae7606bcdf5", 0xf8, 0x7fffffffffffffff, 0x0, 0x1}, &(0x7f0000000240)) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18}, 0x48) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 1: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) (async) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) (async) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 93) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0xd, 0x6, 0xb, 0x100, 0x10}, @ldst={0x0, 0x3, 0x6, 0x1, 0x9, 0x4, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x380, 0xda, &(0x7f0000000080)=""/218, 0x41100, 0x6a, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8}, 0x90) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x600, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d45565a3116bd00800000356a768135e4c7d232eef7acfa96649ed82cb0c35cef5b6813c05ee477585a1b986485ef49c992b36b181d4f5fe9d67bada6aa873c37c26538e6319b85e1c26792c3818a932c58cb0c45"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0xd, 0x6, 0xb, 0x100, 0x10}, @ldst={0x0, 0x3, 0x6, 0x1, 0x9, 0x4, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x380, 0xda, &(0x7f0000000080)=""/218, 0x41100, 0x6a, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8}, 0x90) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) io_setup(0x7fff, &(0x7f00000002c0)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000100)="2c240b88790500191ce0ce5c20f04b8914e8854c6c5435c0de7d9475c9c8007352e72915de493a566bc8fbd32d9250791c5a53754861cce0869b00b0288c657ee864124855621c0dad2903844166c2bbd2d08169cefbacb18a76d2eb89a5c22d83b17bc4e6a1d525c42de4fe0b76d695bbe7605d2567c1d5ec8a52716d02e1e351e1fc4d6afddef188e60c3b7bacb19117a91d6f4890e6fd6d000337a1c70e106795a59c283866f1e8d997e75c0f89fc6c718c6630c47a53a8bc95dbbb829db63caaadd662646678c217ccf19851f26af340edd830f44d95286f0869dc292a1d9198ca3e0943c8b036e6aa50ff66e6af5a3c5ae7606bcdf5", 0xf8, 0x7fffffffffffffff, 0x0, 0x1}, &(0x7f0000000240)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000280)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) io_setup(0x7fff, &(0x7f00000002c0)) (async) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000100)="2c240b88790500191ce0ce5c20f04b8914e8854c6c5435c0de7d9475c9c8007352e72915de493a566bc8fbd32d9250791c5a53754861cce0869b00b0288c657ee864124855621c0dad2903844166c2bbd2d08169cefbacb18a76d2eb89a5c22d83b17bc4e6a1d525c42de4fe0b76d695bbe7605d2567c1d5ec8a52716d02e1e351e1fc4d6afddef188e60c3b7bacb19117a91d6f4890e6fd6d000337a1c70e106795a59c283866f1e8d997e75c0f89fc6c718c6630c47a53a8bc95dbbb829db63caaadd662646678c217ccf19851f26af340edd830f44d95286f0869dc292a1d9198ca3e0943c8b036e6aa50ff66e6af5a3c5ae7606bcdf5", 0xf8, 0x7fffffffffffffff, 0x0, 0x1}, &(0x7f0000000240)) (async) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x700, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 676.484879][T28865] FAULT_INJECTION: forcing a failure. [ 676.484879][T28865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.497620][T28865] CPU: 1 PID: 28865 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 676.500378][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 676.503080][T28865] Call trace: [ 676.503928][T28865] dump_backtrace+0x1b8/0x1e4 [ 676.505163][T28865] show_stack+0x2c/0x44 [ 676.506278][T28865] dump_stack_lvl+0xd0/0x124 [ 676.507546][T28865] dump_stack+0x1c/0x28 [ 676.508679][T28865] should_fail_ex+0x3f8/0x5c4 [ 676.509931][T28865] __should_fail_alloc_page+0x104/0x124 [ 676.511442][T28865] should_fail_alloc_page+0x10/0x20 [ 676.512851][T28865] prepare_alloc_pages+0x1b0/0x554 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0xd, 0x6, 0xb, 0x100, 0x10}, @ldst={0x0, 0x3, 0x6, 0x1, 0x9, 0x4, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x380, 0xda, &(0x7f0000000080)=""/218, 0x41100, 0x6a, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8}, 0x90) [ 676.514240][T28865] __alloc_pages+0x150/0x698 [ 676.515439][T28865] alloc_pages+0x4bc/0x7c0 [ 676.516586][T28865] __get_free_pages+0x18/0x84 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x900, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 676.517864][T28865] kasan_populate_vmalloc_pte+0x50/0xf0 [ 676.519364][T28865] __apply_to_page_range+0x76c/0xc78 [ 676.520805][T28865] apply_to_page_range+0x4c/0x64 [ 676.522165][T28865] kasan_populate_vmalloc+0x60/0x70 [ 676.523590][T28865] alloc_vmap_area+0x1924/0x1a54 [ 676.524925][T28865] __get_vm_area_node+0x1b8/0x38c [ 676.526257][T28865] __vmalloc_node_range+0x1dc/0xebc [ 676.527690][T28865] __vmalloc+0xb8/0xe0 [ 676.528784][T28865] bpf_prog_alloc_no_stats+0x60/0x438 [ 676.530289][T28865] bpf_prog_alloc+0x48/0x108 [ 676.531528][T28865] bpf_prog_load+0x544/0x16c8 [ 676.532789][T28865] __sys_bpf+0x2ac/0x5dc [ 676.533925][T28865] __arm64_sys_bpf+0x80/0x98 [ 676.535200][T28865] invoke_syscall+0x98/0x2b8 [ 676.536452][T28865] el0_svc_common+0x130/0x23c [ 676.537694][T28865] do_el0_svc+0x48/0x58 [ 676.538767][T28865] el0_svc+0x54/0x158 [ 676.539851][T28865] el0t_64_sync_handler+0x84/0xfc [ 676.541228][T28865] el0t_64_sync+0x190/0x194 [ 676.584072][T28865] warn_alloc: 45 callbacks suppressed [ 676.584089][T28865] syz-executor.5: vmalloc error: size 8003584, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 676.591239][T28865] CPU: 0 PID: 28865 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 676.593952][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 676.596649][T28865] Call trace: [ 676.597505][T28865] dump_backtrace+0x1b8/0x1e4 [ 676.598686][T28865] show_stack+0x2c/0x44 [ 676.599767][T28865] dump_stack_lvl+0xd0/0x124 [ 676.601011][T28865] dump_stack+0x1c/0x28 [ 676.602172][T28865] warn_alloc+0x220/0x400 [ 676.603353][T28865] __vmalloc_node_range+0x23c/0xebc [ 676.604752][T28865] __vmalloc+0xb8/0xe0 [ 676.605896][T28865] bpf_prog_alloc_no_stats+0x60/0x438 [ 676.607419][T28865] bpf_prog_alloc+0x48/0x108 [ 676.608606][T28865] bpf_prog_load+0x544/0x16c8 [ 676.609826][T28865] __sys_bpf+0x2ac/0x5dc [ 676.610991][T28865] __arm64_sys_bpf+0x80/0x98 [ 676.612225][T28865] invoke_syscall+0x98/0x2b8 [ 676.613468][T28865] el0_svc_common+0x130/0x23c [ 676.614705][T28865] do_el0_svc+0x48/0x58 [ 676.615820][T28865] el0_svc+0x54/0x158 [ 676.616877][T28865] el0t_64_sync_handler+0x84/0xfc [ 676.618213][T28865] el0t_64_sync+0x190/0x194 [ 676.620930][T28865] Mem-Info: [ 676.621840][T28865] active_anon:7911 inactive_anon:15496 isolated_anon:0 [ 676.621840][T28865] active_file:3542 inactive_file:8697 isolated_file:0 [ 676.621840][T28865] unevictable:768 dirty:24 writeback:0 [ 676.621840][T28865] slab_reclaimable:14373 slab_unreclaimable:91705 [ 676.621840][T28865] mapped:18722 shmem:9889 pagetables:456 [ 676.621840][T28865] sec_pagetables:0 bounce:0 [ 676.621840][T28865] kernel_misc_reclaimable:0 [ 676.621840][T28865] free:1459051 free_pcp:5802 free_cma:7360 [ 676.635453][T28865] Node 0 active_anon:31644kB inactive_anon:61984kB active_file:14168kB inactive_file:34788kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:74888kB dirty:96kB writeback:0kB shmem:39556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8212kB pagetables:1824kB sec_pagetables:0kB all_unreclaimable? no [ 676.644820][T28865] Node 0 DMA free:3076864kB boost:0kB min:20556kB low:25692kB high:30828kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:29440kB [ 676.653069][T28865] lowmem_reserve[]: 0 0 3584 3584 3584 [ 676.654619][T28865] Node 0 Normal free:2759340kB boost:0kB min:24496kB low:30620kB high:36744kB reserved_highatomic:0KB active_anon:31644kB inactive_anon:61984kB active_file:14168kB inactive_file:34788kB unevictable:3072kB writepending:96kB present:5242880kB managed:3674288kB mlocked:0kB bounce:0kB free_pcp:23532kB local_pcp:11076kB free_cma:0kB [ 676.663231][T28865] lowmem_reserve[]: 0 0 0 0 0 [ 676.664559][T28865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 676.669854][T28865] Node 0 Normal: 6171*4kB (UME) 1368*8kB (UME) 1066*16kB (UME) 743*32kB (UME) 842*64kB (UME) 251*128kB (UME) 48*256kB (UME) 12*512kB (UME) 4*1024kB (M) 3*2048kB (ME) 627*4096kB (UM) = 2759340kB [ 676.675207][T28865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.682769][T28865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 676.685389][T28865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.687949][T28865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 676.690457][T28865] 22115 total pagecache pages [ 676.691735][T28865] 0 pages in swap cache [ 676.692816][T28865] Free swap = 124996kB [ 676.693941][T28865] Total swap = 124996kB [ 676.695070][T28865] 2097152 pages RAM [ 676.696071][T28865] 0 pages HighMem/MovableOnly [ 676.697384][T28865] 408532 pages reserved [ 676.698497][T28865] 8192 pages cma reserved [ 676.699644][T28865] 0 pages hwpoisoned 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 94) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff58) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xa00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={@map, 0x11, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff58) 00:11:16 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={@map, 0x11, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={@map, 0x11, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xb00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 95) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff58) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 3: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={@map, 0x11, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={@map, 0x11, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b733185c0cfdaa77a57814fd1456750cfed85c5957de46bed9e250df113e927c59eccd0ea39fb22bc11c75d"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:16 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={@cgroup, 0x0, 0x30, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x40}) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xd00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x300}, 0x48) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfe5e) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7fff, 0x8001, 0xff, 0x2004, 0x1, 0xfffff1cf, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000080)=""/97, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x10, 0x1, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=[r1, 0x1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], &(0x7f0000000240)=[{0x1, 0x5, 0x1, 0x4}], 0x10, 0x7}, 0x90) [ 676.898819][T28921] FAULT_INJECTION: forcing a failure. [ 676.898819][T28921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.913339][T28921] CPU: 0 PID: 28921 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 676.915981][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 676.918582][T28921] Call trace: [ 676.919454][T28921] dump_backtrace+0x1b8/0x1e4 [ 676.920674][T28921] show_stack+0x2c/0x44 [ 676.921788][T28921] dump_stack_lvl+0xd0/0x124 [ 676.923065][T28921] dump_stack+0x1c/0x28 [ 676.924174][T28921] should_fail_ex+0x3f8/0x5c4 [ 676.925440][T28921] __should_fail_alloc_page+0x104/0x124 [ 676.926921][T28921] should_fail_alloc_page+0x10/0x20 [ 676.928373][T28921] prepare_alloc_pages+0x1b0/0x554 [ 676.929703][T28921] __alloc_pages+0x150/0x698 [ 676.930872][T28921] alloc_pages+0x4bc/0x7c0 [ 676.932005][T28921] __get_free_pages+0x18/0x84 [ 676.933280][T28921] kasan_populate_vmalloc_pte+0x50/0xf0 [ 676.934742][T28921] __apply_to_page_range+0x76c/0xc78 [ 676.936137][T28921] apply_to_page_range+0x4c/0x64 [ 676.937433][T28921] kasan_populate_vmalloc+0x60/0x70 [ 676.938841][T28921] alloc_vmap_area+0x1924/0x1a54 [ 676.940210][T28921] __get_vm_area_node+0x1b8/0x38c [ 676.941510][T28921] __vmalloc_node_range+0x1dc/0xebc [ 676.942867][T28921] __vmalloc+0xb8/0xe0 [ 676.943938][T28921] bpf_prog_alloc_no_stats+0x60/0x438 [ 676.945349][T28921] bpf_prog_alloc+0x48/0x108 [ 676.946489][T28921] bpf_prog_load+0x544/0x16c8 [ 676.947707][T28921] __sys_bpf+0x2ac/0x5dc [ 676.948808][T28921] __arm64_sys_bpf+0x80/0x98 [ 676.949980][T28921] invoke_syscall+0x98/0x2b8 [ 676.950987][T28921] el0_svc_common+0x130/0x23c [ 676.952239][T28921] do_el0_svc+0x48/0x58 [ 676.953308][T28921] el0_svc+0x54/0x158 [ 676.954351][T28921] el0t_64_sync_handler+0x84/0xfc [ 676.955704][T28921] el0t_64_sync+0x190/0x194 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xe00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 96) 00:11:16 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={@cgroup, 0x0, 0x30, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x40}) 00:11:16 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfe5e) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 64) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7fff, 0x8001, 0xff, 0x2004, 0x1, 0xfffff1cf, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async, rerun: 32) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000080)=""/97, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x10, 0x1, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=[r1, 0x1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], &(0x7f0000000240)=[{0x1, 0x5, 0x1, 0x4}], 0x10, 0x7}, 0x90) 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 677.040625][T28943] FAULT_INJECTION: forcing a failure. [ 677.040625][T28943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:16 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000080)={@cgroup, 0x0, 0x30, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x40}) 00:11:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xf00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:16 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 677.063454][T28943] CPU: 1 PID: 28943 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 677.066124][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 677.068885][T28943] Call trace: [ 677.069738][T28943] dump_backtrace+0x1b8/0x1e4 [ 677.071017][T28943] show_stack+0x2c/0x44 [ 677.072124][T28943] dump_stack_lvl+0xd0/0x124 [ 677.073369][T28943] dump_stack+0x1c/0x28 [ 677.074499][T28943] should_fail_ex+0x3f8/0x5c4 [ 677.075728][T28943] __should_fail_alloc_page+0x104/0x124 [ 677.077266][T28943] should_fail_alloc_page+0x10/0x20 [ 677.078673][T28943] prepare_alloc_pages+0x1b0/0x554 [ 677.080036][T28943] __alloc_pages+0x150/0x698 [ 677.081287][T28943] alloc_pages+0x4bc/0x7c0 [ 677.082490][T28943] __get_free_pages+0x18/0x84 [ 677.083747][T28943] kasan_populate_vmalloc_pte+0x50/0xf0 [ 677.085215][T28943] __apply_to_page_range+0x76c/0xc78 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 677.086679][T28943] apply_to_page_range+0x4c/0x64 [ 677.087966][T28943] kasan_populate_vmalloc+0x60/0x70 [ 677.089343][T28943] alloc_vmap_area+0x1924/0x1a54 [ 677.090687][T28943] __get_vm_area_node+0x1b8/0x38c [ 677.092070][T28943] __vmalloc_node_range+0x1dc/0xebc [ 677.093508][T28943] __vmalloc+0xb8/0xe0 [ 677.094631][T28943] bpf_prog_alloc_no_stats+0x60/0x438 [ 677.096093][T28943] bpf_prog_alloc+0x48/0x108 [ 677.097399][T28943] bpf_prog_load+0x544/0x16c8 [ 677.098686][T28943] __sys_bpf+0x2ac/0x5dc [ 677.099839][T28943] __arm64_sys_bpf+0x80/0x98 [ 677.101123][T28943] invoke_syscall+0x98/0x2b8 [ 677.102345][T28943] el0_svc_common+0x130/0x23c [ 677.103648][T28943] do_el0_svc+0x48/0x58 [ 677.104807][T28943] el0_svc+0x54/0x158 [ 677.105946][T28943] el0t_64_sync_handler+0x84/0xfc [ 677.107347][T28943] el0t_64_sync+0x190/0x194 00:11:17 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x78) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 97) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c3d40bae4931487670b73"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfe5e) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7fff, 0x8001, 0xff, 0x2004, 0x1, 0xfffff1cf, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000080)=""/97, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x10, 0x1, 0x1ff}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)=[r1, 0x1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], &(0x7f0000000240)=[{0x1, 0x5, 0x1, 0x4}], 0x10, 0x7}, 0x90) 00:11:17 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x78) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 98) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x40, 0x9}, 'port0\x00', 0x80, 0x100000, 0x200, 0xffffffb5, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0x38}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000003c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4180, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf25010000000000000009410000004c0018000000aa75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%d \x00'}, 0x20) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) r5 = fsmount(r0, 0x1, 0x84) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r5, 0xf, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) [ 677.291721][T28982] FAULT_INJECTION: forcing a failure. [ 677.291721][T28982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 00:11:17 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x78) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 677.307810][T28982] CPU: 1 PID: 28982 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 677.310569][T28982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 677.313420][T28982] Call trace: [ 677.314392][T28982] dump_backtrace+0x1b8/0x1e4 [ 677.315716][T28982] show_stack+0x2c/0x44 [ 677.316875][T28982] dump_stack_lvl+0xd0/0x124 [ 677.318160][T28982] dump_stack+0x1c/0x28 [ 677.319360][T28982] should_fail_ex+0x3f8/0x5c4 [ 677.320614][T28982] __should_fail_alloc_page+0x104/0x124 [ 677.322130][T28982] should_fail_alloc_page+0x10/0x20 [ 677.323533][T28982] prepare_alloc_pages+0x1b0/0x554 [ 677.324815][T28982] __alloc_pages+0x150/0x698 [ 677.326086][T28982] alloc_pages+0x4bc/0x7c0 [ 677.327305][T28982] __get_free_pages+0x18/0x84 [ 677.328567][T28982] kasan_populate_vmalloc_pte+0x50/0xf0 [ 677.330096][T28982] __apply_to_page_range+0x76c/0xc78 [ 677.331547][T28982] apply_to_page_range+0x4c/0x64 [ 677.332895][T28982] kasan_populate_vmalloc+0x60/0x70 [ 677.334280][T28982] alloc_vmap_area+0x1924/0x1a54 [ 677.335593][T28982] __get_vm_area_node+0x1b8/0x38c [ 677.336932][T28982] __vmalloc_node_range+0x1dc/0xebc [ 677.338343][T28982] __vmalloc+0xb8/0xe0 [ 677.339472][T28982] bpf_prog_alloc_no_stats+0x60/0x438 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x40, 0x9}, 'port0\x00', 0x80, 0x100000, 0x200, 0xffffffb5, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0x38}) (rerun: 32) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000003c0)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4180, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf25010000000000000009410000004c0018000000aa75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) (async, rerun: 32) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%d \x00'}, 0x20) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) (async) r5 = fsmount(r0, 0x1, 0x84) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000001) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r5, 0xf, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) [ 677.340971][T28982] bpf_prog_alloc+0x48/0x108 [ 677.342174][T28982] bpf_prog_load+0x544/0x16c8 [ 677.343435][T28982] __sys_bpf+0x2ac/0x5dc [ 677.344544][T28982] __arm64_sys_bpf+0x80/0x98 [ 677.345718][T28982] invoke_syscall+0x98/0x2b8 [ 677.346943][T28982] el0_svc_common+0x130/0x23c [ 677.348189][T28982] do_el0_svc+0x48/0x58 00:11:17 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc00}, 0x48) [ 677.349320][T28982] el0_svc+0x54/0x158 [ 677.350421][T28982] el0t_64_sync_handler+0x84/0xfc [ 677.351769][T28982] el0t_64_sync+0x190/0x194 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:17 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x40, 0x9}, 'port0\x00', 0x80, 0x100000, 0x200, 0xffffffb5, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0x38}) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000003c0)) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x4180, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf25010000000000000009410000004c0018000000aa75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%d \x00'}, 0x20) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) (async, rerun: 64) r5 = fsmount(r0, 0x1, 0x84) (rerun: 64) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000001) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r5, 0xf, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (rerun: 64) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 99) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) (async) [ 677.523967][T29017] FAULT_INJECTION: forcing a failure. [ 677.523967][T29017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 677.535458][T29017] CPU: 0 PID: 29017 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 677.538105][T29017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 677.540817][T29017] Call trace: [ 677.541715][T29017] dump_backtrace+0x1b8/0x1e4 [ 677.542947][T29017] show_stack+0x2c/0x44 [ 677.544052][T29017] dump_stack_lvl+0xd0/0x124 [ 677.545336][T29017] dump_stack+0x1c/0x28 [ 677.546409][T29017] should_fail_ex+0x3f8/0x5c4 [ 677.547606][T29017] __should_fail_alloc_page+0x104/0x124 [ 677.549033][T29017] should_fail_alloc_page+0x10/0x20 [ 677.550358][T29017] prepare_alloc_pages+0x1b0/0x554 [ 677.551681][T29017] __alloc_pages+0x150/0x698 [ 677.552896][T29017] alloc_pages+0x4bc/0x7c0 [ 677.554025][T29017] __get_free_pages+0x18/0x84 [ 677.555236][T29017] kasan_populate_vmalloc_pte+0x50/0xf0 [ 677.556648][T29017] __apply_to_page_range+0x76c/0xc78 [ 677.557997][T29017] apply_to_page_range+0x4c/0x64 [ 677.559328][T29017] kasan_populate_vmalloc+0x60/0x70 [ 677.560653][T29017] alloc_vmap_area+0x1924/0x1a54 [ 677.561972][T29017] __get_vm_area_node+0x1b8/0x38c [ 677.563343][T29017] __vmalloc_node_range+0x1dc/0xebc [ 677.564744][T29017] __vmalloc+0xb8/0xe0 [ 677.565823][T29017] bpf_prog_alloc_no_stats+0x60/0x438 [ 677.567206][T29017] bpf_prog_alloc+0x48/0x108 [ 677.568485][T29017] bpf_prog_load+0x544/0x16c8 [ 677.569729][T29017] __sys_bpf+0x2ac/0x5dc [ 677.570871][T29017] __arm64_sys_bpf+0x80/0x98 [ 677.572153][T29017] invoke_syscall+0x98/0x2b8 [ 677.573386][T29017] el0_svc_common+0x130/0x23c [ 677.574601][T29017] do_el0_svc+0x48/0x58 [ 677.575704][T29017] el0_svc+0x54/0x158 [ 677.576736][T29017] el0t_64_sync_handler+0x84/0xfc [ 677.578027][T29017] el0t_64_sync+0x190/0x194 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1600, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:17 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (fail_nth: 100) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1700, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xffffffffffffff03}) 00:11:17 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:17 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743f0dc58d14c"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:17 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1900, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1a00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x2, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1b00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8a9, '\x00', 0x0, r0, 0x3, 0x1, 0x5}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r5 = fsmount(r0, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x84, &(0x7f0000000480)=""/132, 0x41100, 0x10, '\x00', r4, 0x0, r0, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x7, 0xfffffff8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r1, r5, r1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x1, 0x0, 0x1}], 0x10, 0x4}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x2c, 0x0, &(0x7f0000000040)="cc9c1caf4eb579607c0a99322dbdefc6aed042f5393a5678513b61cb1d283367139716533407cc1121e1db72"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x48) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x48c41, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095005743"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x7, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) [ 678.045705][T29091] binder: 29089:29091 ioctl c0306201 0 returned -14 00:11:17 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1c00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 678.054475][T29091] binder_user_error: 32 callbacks suppressed [ 678.054487][T29091] binder: 29089:29091 DecRefs 0 refcount change on invalid ref 0 ret -22 00:11:17 executing program 5: bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:17 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x7, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:18 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:18 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1d00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:18 executing program 5: bpf$BPF_PROG_QUERY(0x4, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:18 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1e00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:18 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@cgroup, 0x7, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:18 executing program 5: bpf$BPF_PROG_QUERY(0x6, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:18 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:18 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8a9, '\x00', 0x0, r0, 0x3, 0x1, 0x5}, 0x48) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r5 = fsmount(r0, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x84, &(0x7f0000000480)=""/132, 0x41100, 0x10, '\x00', r4, 0x0, r0, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x7, 0xfffffff8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r1, r5, r1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x1, 0x0, 0x1}], 0x10, 0x4}, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x2c, 0x0, &(0x7f0000000040)="cc9c1caf4eb579607c0a99322dbdefc6aed042f5393a5678513b61cb1d283367139716533407cc1121e1db72"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x48) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x48c41, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8a9, '\x00', 0x0, r0, 0x3, 0x1, 0x5}, 0x48) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async) fsmount(r0, 0x1, 0x72) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x84, &(0x7f0000000480)=""/132, 0x41100, 0x10, '\x00', r4, 0x0, r0, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x7, 0xfffffff8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r1, r5, r1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x1, 0x0, 0x1}], 0x10, 0x4}, 0x90) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x2c, 0x0, &(0x7f0000000040)="cc9c1caf4eb579607c0a99322dbdefc6aed042f5393a5678513b61cb1d283367139716533407cc1121e1db72"}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x48) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x48c41, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) 00:11:18 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1f00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000020000000000000005000000000000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:18 executing program 5: bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 678.931920][T29129] binder: 29127:29129 ioctl c0306201 0 returned -14 [ 678.934196][T29129] binder: 29127:29129 DecRefs 0 refcount change on invalid ref 0 ret -22 00:11:18 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffff7f, 0xcc, 0x5, 0x300, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd212}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r0, r1, r2, r3, 0x1, 0x1, r4, 0x1, r5, r6], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x2, 0x7, 0x7}, {0x3, 0x5, 0xc, 0x9}, {0x5, 0x4, 0xb, 0x1}, {0x4, 0x5, 0x1, 0xe}, {0x83a, 0x1, 0x10, 0x8}, {0x5, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x6}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x1, 0x5, 0xffff, 0x1010, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) 00:11:18 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:18 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 678.958486][ T2211] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.960543][ T2211] ieee802154 phy1 wpan1: encryption failed: -22 00:11:18 executing program 5: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 678.988967][T29139] binder: 29127:29139 ioctl c0306201 0 returned -14 00:11:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:18 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffff7f, 0xcc, 0x5, 0x300, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x3}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd212}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r0, r1, r2, r3, 0x1, 0x1, r4, 0x1, r5, r6], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x2, 0x7, 0x7}, {0x3, 0x5, 0xc, 0x9}, {0x5, 0x4, 0xb, 0x1}, {0x4, 0x5, 0x1, 0xe}, {0x83a, 0x1, 0x10, 0x8}, {0x5, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x6}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x1, 0x5, 0xffff, 0x1010, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) 00:11:18 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:18 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8a9, '\x00', 0x0, r0, 0x3, 0x1, 0x5}, 0x48) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) (async) r5 = fsmount(r0, 0x1, 0x72) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x84, &(0x7f0000000480)=""/132, 0x41100, 0x10, '\x00', r4, 0x0, r0, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x7, 0xfffffff8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r1, r5, r1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x1, 0x0, 0x1}], 0x10, 0x4}, 0x90) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x2c, 0x0, &(0x7f0000000040)="cc9c1caf4eb579607c0a99322dbdefc6aed042f5393a5678513b61cb1d283367139716533407cc1121e1db72"}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x400, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x48) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x48c41, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 00:11:18 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:18 executing program 5: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:18 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffff7f, 0xcc, 0x5, 0x300, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd212}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r0, r1, r2, r3, 0x1, 0x1, r4, 0x1, r5, r6], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x2, 0x7, 0x7}, {0x3, 0x5, 0xc, 0x9}, {0x5, 0x4, 0xb, 0x1}, {0x4, 0x5, 0x1, 0xe}, {0x83a, 0x1, 0x10, 0x8}, {0x5, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x6}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x1, 0x5, 0xffff, 0x1010, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) fsmount(0xffffffffffffffff, 0x1, 0x80) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffff7f, 0xcc, 0x5, 0x300, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x3}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd212}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x10000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r0, r1, r2, r3, 0x1, 0x1, r4, 0x1, r5, r6], &(0x7f00000002c0)=[{0x2, 0x1, 0x0, 0x9}, {0x0, 0x2, 0x7, 0x7}, {0x3, 0x5, 0xc, 0x9}, {0x5, 0x4, 0xb, 0x1}, {0x4, 0x5, 0x1, 0xe}, {0x83a, 0x1, 0x10, 0x8}, {0x5, 0x2}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x6}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x1, 0x5, 0xffff, 0x1010, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x48) (async) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb8fb}, @ldst={0x0, 0x0, 0x6, 0x8, 0xb, 0x20, 0x8}, @jmp={0x5, 0x1, 0x3, 0x4, 0x7, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xbc, &(0x7f00000000c0)=""/188, 0x41100, 0x31, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x9, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x1, 0x7, 0x4}, {0x4, 0x1, 0x5, 0xa}, {0x1, 0x2, 0x2, 0x2}], 0x10, 0x5}, 0x90) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000340)=0xf33d) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb8fb}, @ldst={0x0, 0x0, 0x6, 0x8, 0xb, 0x20, 0x8}, @jmp={0x5, 0x1, 0x3, 0x4, 0x7, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xbc, &(0x7f00000000c0)=""/188, 0x41100, 0x31, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x9, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x1, 0x7, 0x4}, {0x4, 0x1, 0x5, 0xa}, {0x1, 0x2, 0x2, 0x2}], 0x10, 0x5}, 0x90) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000340)=0xf33d) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb8fb}, @ldst={0x0, 0x0, 0x6, 0x8, 0xb, 0x20, 0x8}, @jmp={0x5, 0x1, 0x3, 0x4, 0x7, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xbc, &(0x7f00000000c0)=""/188, 0x41100, 0x31, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x9, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x1, 0x7, 0x4}, {0x4, 0x1, 0x5, 0xa}, {0x1, 0x2, 0x2, 0x2}], 0x10, 0x5}, 0x90) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000340)=0xf33d) (async) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xb, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8b}, [@call={0x85, 0x0, 0x0, 0xa8}, @generic={0x7, 0x8, 0x6, 0x100, 0x3}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000140)=""/144, 0x41100, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x10001, 0xbd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x9}, {0x0, 0x4, 0x8, 0x9}], 0x10, 0x400}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x567e1e7b}}, @call={0x85, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x693}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xe20, 0x6}, 0x10, 0x25f25, r3, 0x3, &(0x7f0000000740)=[r1, r4], &(0x7f0000000780)=[{0x2, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0xd7}, 0x90) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2300, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb8fb}, @ldst={0x0, 0x0, 0x6, 0x8, 0xb, 0x20, 0x8}, @jmp={0x5, 0x1, 0x3, 0x4, 0x7, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xbc, &(0x7f00000000c0)=""/188, 0x41100, 0x31, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x9, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x1, 0x7, 0x4}, {0x4, 0x1, 0x5, 0xa}, {0x1, 0x2, 0x2, 0x2}], 0x10, 0x5}, 0x90) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000340)=0xf33d) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8b}, [@call={0x85, 0x0, 0x0, 0xa8}, @generic={0x7, 0x8, 0x6, 0x100, 0x3}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000140)=""/144, 0x41100, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x10001, 0xbd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x9}, {0x0, 0x4, 0x8, 0x9}], 0x10, 0x400}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x567e1e7b}}, @call={0x85, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x693}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xe20, 0x6}, 0x10, 0x25f25, r3, 0x3, &(0x7f0000000740)=[r1, r4], &(0x7f0000000780)=[{0x2, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0xd7}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8b}, [@call={0x85, 0x0, 0x0, 0xa8}, @generic={0x7, 0x8, 0x6, 0x100, 0x3}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000140)=""/144, 0x41100, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x10001, 0xbd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x9}, {0x0, 0x4, 0x8, 0x9}], 0x10, 0x400}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x567e1e7b}}, @call={0x85, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x693}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xe20, 0x6}, 0x10, 0x25f25, r3, 0x3, &(0x7f0000000740)=[r1, r4], &(0x7f0000000780)=[{0x2, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0xd7}, 0x90) (async) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xc, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xd, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x2000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x15b0000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) syz_open_dev$vim2m(&(0x7f0000000040), 0x8a0, 0x2) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8b}, [@call={0x85, 0x0, 0x0, 0xa8}, @generic={0x7, 0x8, 0x6, 0x100, 0x3}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000140)=""/144, 0x41100, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x10001, 0xbd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0x9}, {0x0, 0x4, 0x8, 0x9}], 0x10, 0x400}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x567e1e7b}}, @call={0x85, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x693}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0xe20, 0x6}, 0x10, 0x25f25, r3, 0x3, &(0x7f0000000740)=[r1, r4], &(0x7f0000000780)=[{0x2, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0xf, 0x5}], 0x10, 0xd7}, 0x90) (rerun: 64) 00:11:19 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x3000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 4: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) fsmount(r0, 0x0, 0x38) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x15b0000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) syz_open_dev$vim2m(&(0x7f0000000040), 0x8a0, 0x2) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe3a) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x15b0000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x8a0, 0x2) (async) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0xf, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x71) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_submit(0x0, 0x7, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000000)="b1e1a39cc746069a93485049c08788e9a6d1a9e24f2340dfb47e74f1af7d4506389af4b4a98c3be7d1f514d22c6485d8437d8f7c0aacec70a99179b346232e8669b639e0d18715a7157e06cd", 0x4c, 0x7fffffffffffffff, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9e3, r0, &(0x7f00000000c0)="ab9d323811733b561bc31078613b12dfda3b0db8dc47cc2b1536ebe247c2217ae8f82571e0f8824e8c041a3cc684259ce0ec414975cdcc9027ea0e189957f78a7c5373d7f6c368ecebaa88013cdd36470ea24997597f03b1f82baabbd3ab08eb2fe3", 0x62, 0x1, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000180)="bc37be897d156222f624de594a0b64e3edab451e9a39fd9e492102ce83ff61", 0x1f, 0x6, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000200)="221bd4dd265ae5fc975c0955cc696737c0175b3e7e1fe8981bbac0a7de1581f641be36efa0e4f5a9250000000000", 0x2e, 0x6, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000280), 0x0, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="481a4a78f16b592e6f865c8a46a3e58b8c1d22f5abb4dcee83189c9152d70238b0ace75178c1b639771472707b9a645a03aede1d265b2a05d3ce2d69998feff08b5b6dbdce04c52dce0d92f0499ce35940d5b6358a58edbbfa8981555104b0e6b5df5bb0274c66b043b40fb058d19fc474b8129d4f7200df6aea697f04d85137c1ec774a409d37cb608dd171505409cb25a9bb85a89a538b29467ba5072fad9f049d25a9084bb547f7449f317809cfee8a4c04b88679a5", 0xb7, 0x8, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x40, r6, &(0x7f0000000f00)="6e9d14a36f176f154070dcd323db6c1287910b3a278802e6342ed1027e86e64787dca69358a10bdcdfeae77f2a1f450d6e933c9d4f49e54e5752c337d9496e790fad7f758aefe712671df6b1b43d769c5688103c0d573d660f2623684dfd84ae35a82701536c33b8d7a30f65f4e59f0120dd8113bc2bf561b14de33efa850766fe1ab3b0e9b68ba7032c8633b40ae2a4cf1f9019c1f2b3cf2cdc54090fbcd4cf21e6e63386120b0fad90af0df78c394f969ab7b85e7a9fd63007bb18d68c228ba74405f4f90e3077779ce368560b29801e5669ea55952037d8f4433406fcfad785a40a3347ae5c59c824407f46b6e4875b01515768ae59748c4b4aa57eca9abcfdd4f55ef5fda7f45062bcbb722c81354259556b336007f828cae07cd93375c1cb248bf560cc19be22466d6c3c4d9fd44764272efe59feccbcdf7ef351f7392e3a391d7a7ba15abc467ad51b0e32ca8b128e4f70b2e9ef14bba74db1deaffbb9414f43045cd1bbe18365a74483f36b59b1fe10f299884075a804c5194093bb8dc5793326da59ba429f2631ee8bf1781638ecd715fe272927216e46d6a8a1bb670807b4fda57705894200e06e005d0fa0b8a82674cf05977b98508250100d57fadb8fa1a6d8436c4226357dbe8c0402dbe1b9cf660a82d048800491a75f2692a43008d00597b5b4263ff8489c87897af970f263cb5825a6b6635a8758490d045e06d2d5897a3b409b71e402106785ff18d59357dfc5d5e82e7fad53c06f1bb296c36bc516c6ff507442971fd0c86d5626308249c6a04a5466101e427adf75df6cf3191fed4dc242da47e3f64588fd2e78c47d52e9215d3bd5744c334622917f39282632bf8721ff2f85987b718d4bc2834b4d8a6a8d5eb7f010546825ca6a3bf23558926893a4651f5f8f83f03885a029200116826fbfa81295635d0a38fa6b87c4b8616105e5399045181ffb131f3d11f01944c254e3de14b066692d6c850c4448dfaa79e102be6e1fa7b57635af0e78d85da25ed2cea41d8f0a737843946a00f69569b91d962ad374073745b141ca62c3c02292f74a85e102930257595c599be05626eadd6335534613687fe4825c9af8bd8a33041a1170a32dfcd89c8a10a75ddb8851eef64d5fca6315aacc989bd0ed2c551aabe736296885cb25ccc244dcca3ab59074fca31c8b509e8930c4fd3b6d4570889ca637ce269189741023b92c4cbadb48e7c9528b373108a673a3c6c1937e91651f8e1928fa651454a5030c8ea7d642ea37a71cd9367dc1a573693f83565d8691c1927121ffde83d4e771b3db633e7c9224c97cef8d6a7f6b3d03867d151428144bf4faf53892cafeaa0fd97f61331ea19310c4617a57aaed21d7debd4358d1440222776673e5c0f50af13dd4f10b847db88c104444c1f8ff69bcaaa3edcdaa68e046be4c42bbdde0e76da9d36a78bdc709fcd4c8e1e30203b568fc114306cbf5ef75dfcda4c863788c3c7c38299a646376705c37a621ec89dc9e66f2602c4292d4be3ecd635b0a74d05f3dccd9be32ecd05f0e7522b02253af46bcb5cf2d050eb61bb2077712a9e7963422030d43cfebc3dc42a9b328a2f1fa103b8fbfa499a11dd0f7d2388bf277c1253a8a2d5894586470035cbf1936dcc1fb293c10f19de2358b0e2df778f7a11a52d6329c764bd353046cb905f5240bd116ea7858b6289ef05f9ff13bc1b1a1fdbc3caea347d3b0354b24808db30457496d9224cceb9dabff4b00d5b6e27d75575cca1315d5c065e86841d7f5f7d5f87aab1a5dd5088ef33c609fa5a7a1cc31fad5436e5b4f2fb04d1ad7036562b6f1ff247f99ecae3b12aae811842e4b116f88c1ad45f0ee80acf7ade4ff75593f99289bb45496ccf836311b8eec411a99301d479f5c88cae55f29fe92b3d59ba1bcb69bc1008dfc5029375540110925087baf08e19d0bf517e372eb6ff81adf928e69f3cf1bc09877d305d54de6d6b0003f7c0ab7986b48f687976b2fc1354e35be105df528b782733f409a9a6be28b3f029f06d8f477c68111dfd9a8997e95012865178d44780dfee77a8bd2934b8f6a352f8b42373334fe0f6742ebd62243672545c47ecf2d34acf33f4f731ee5a207a95a56fc3afb0fd6d5531c2437527787f0df96df21719c6782f85a8940b679ccbd6a2e867e9c529ab2bdb94f2c10260d09348052598284647ba4470f0f962f606100d8a4e0cc0a4fcf236f498bdbd9383246667ef09dc23282ce6f1357e4364e498a656fa5601a49b0c34260d3ad3a1a03ecc7eb8d2a3332c6a6e84bd56fb27b882a5f6e2b794ac35a260b1d22f40b28bee3ac1a25a3d7ea075851b913c17d581ecae62cf9b524fcee44620df407c239dddde2fd18c5addaca46d639931d40c3061e4d29cfe6e96f449f4e10bd1c04dfee485cbba7227cd4382c92e020ac277d985c881a9b8747f8c2c4bd3486bbed8164456a1a02dbccd51cdf5e14236214ba294a7f4fab28c18d116442ac33381c7fc8a584920d2b98f10b60614a1bb04918a143b5c97c97bc70ba8664138f36db849ed455a7df34c4f08a125caa8bedc1c80bc6702ff6a056349ac6c8c89dc29a87a9ce92fd71cb6ab64f1a2444ff6e594e908f117a94c65e281bea1047094fba2fc8f5a5c345aeee0e861162e70874796b14d82f3646dd5ae380e07eebb03725a37aada9f85bdab45d6e42388f4c6e057ab07f90f10b132383e2b43c512f6c001680ba7f3bc2c5ad5b2e09d34e4f0ea0f256247d3f86e2ab0d04c9d98a0e2fbefd79a1df4db7cb3713a799e06019e225808ef72af9c79c3a5f46239b8bfa003eb5e78b2ca4db34fe1bfe9711a30a37bc2cfd6ffd03854ad2546d870f204a7297d3cb8640a8062e9b01cdacffad8ebe771e1fce7d780ad3adaad1e409fac8b1b1727eb9d1f9418996a3ea4559f85f1ea110b429168cda1332d458cdfe33cdce55e70dcf443f5c2b4d4a73e939e7ae3fca44e200cbcdf880a23f096c3e5b9777f5492d276e32eb302de020757451fd821b789af77c235f9748a1cc40608ff72f8283a0942a88b9cb41d587c8f08d82e09786a4535189c565298381de8cc46b26a637c117fe818ecd45a65252c8943665ba4aa0e629249bdc0f5e1e706aa6fc8928a4df1e100a69b91571b4ec15aef9c0aa4727d90f0ac6028f923ab3b70254250be3633b11509d9e8741b898ddaf4c78585d7fcdb825590030ec5f60a505aacd70990adf6d15c833259c9a44c0a33e8b359df118b00f8ff09ee0a01cbcbcca929d66667b8a259a86a8e5d764c52aa6ef2f4ace07d46c8189825867a87adfb34d9f05561e441968a6e94fb4b6e12295e2897e318d1ef0681db85eaeb5956c1fcabf92ea6692d8f89171ada06bb65a0be190978de3f0ebcaa7a0e86785890387d907b94cef9e5b572488d3b428eaec7db9f78d4a10c420290fffdb9c50908d501d6741553750c2552f1c799da5238c32c47437c6d2929347edf660906399d1e3f095833f46a96ed389ea966f8157721b76f53c7c0e5557e8c49c955232d8c5e51f6425f4d0d26ae47b5ffed5724203705a9fbc63f42c1c64c0226af5f4ea0c1b4d8fd917fe087aeb075b5ef632aef4144bc0c7be881ff3f87441296673cfced2fd88af3fd16667dbc7034579817cd69ff0132c5d917551c1d5e6ef0973efbf2ae5a516d6fbabafa180a480f0794b8417707a9d755322c9643afa56d6c4d72c942db554057235251e031f850bae63232b97e8de6168df9daba63c4392aa657f0cbd530f505edd3174604b8b2ec07de82128e9bbe3637b786f8af9e0a0b25cb7bbd2a0045d8e50204b775a73c5d5373ecd1b61494121044842f76e26e6db00bb04270ea25e35057dc375cd17d605b49753ff692f7abc6909061b2ab6d6d0104fa19df995d1a7970e22299a245d42c05aa67da60878465997d00efee0dd6137ae29179260d46276bbeaa96675bcbe882071d59730c04023a456fb657acf60d9aa7e3cef9fe6ce9388ac0de5f6167b21c88e7c44af894edb2d6a6a593ef83183d1fbaad477676ee112f048169e88e6223c38834224e48e2004b0d26d03e0957ff6528709847ce368ebfd89d7959b976716b7cacba76db682c415bce4c0a1c76a2eb6c9fe4f5aec8d7a23548b14a757d40c6e3b07221624cb5ebbf6b9b333a8a03135c12e3fda277de41f58d9ae9782d4f29a4450d2917c7fb83e04d609285a4257088cad4cb0d4f9fddab4a50e919c350b9c94be9b854e20d025645e359c60083c715ab8b51e1917c02e8eefdedfc0bc8e09982b43a695c8c11e21053675edd011770dbffc3fc808aec7ed889b8500ed69739e4f593366f5bda8e00af7d8568f6c110759d7766aaff62d4191d4fb27d3f42074796cae3c257b4d49a23828ee4107e8f3a239805bb9c0a8c9682eb03b35f42b9b67376b948b45d312b20c9372f23d89c85d5a23ed080c0c0b3063368f8a9341124fc80c9bd6605f3fb33e086a6539133f7a0a78d41e5d8b19025e411e9e0a1ec9f65be0cf3d4f4f0a4394889717fff21452dd1dc1d46cdf5f76aa2d7e2db7a1af5ea493fcf1e11f1aafaf726eaf691f50995644c6a19ebc5d89e1b78c7e6deff06b0fb49071a4a317f837b9f71b42c9efa40ff96380953071ef8cf51a482a645a159b199a91874a286e8f913c787760aa9d88d2f6b614387894ca0bac2b9d2cd957011d43114ba635136e7786bcf1908141ad8e39e3b93376f7e1fc8dede26b7a36d393df74b51258f867a40c7774921a0a4b14454a47a5e76e007ae949e7858efb1b7fd9f38acfa7aa458fe8e95f0cbdfb3b99e14f75ef3a876fca1c93641320f81d9a47915f07718600c4103908d031b13696a024836d4535c9b92a32f4b658ef0359540188c7e557fa8fc5ef99b5f2405dcac2e12d9766a9cb7aaad44f823539366b3dc5843e4c63573fac757f3fab34db87fbe8ef6bf6b04a46d9856633eaf7070cc68bb65ba01d2ba922ba3537ed3fc5fb420b95f92f2ba08e8d048a7dd011ba34c5c23b8cea242335964c7eeb939aefc3967fb1df23d60512652e12bcb17d2e0452aff4180e81bd254d04342ada2608d61640ec004b44a50bad9258864f1dc7fcaf09091d91ab944105c95f3d243054ecaba0a2440137d828619a800dbd5eb0e1dc066869aa1de3ee4afac0f5458b3ae38888ba77574230467d515cfe5b162fa18f9ff756fa3160c55989a46b6df86f874a3ebfa19846812798045a7c4a9e5f72bc1b72cd107d5eb8fb321be758916f5e1315aa5130130835c4ba1a341c2aacf15508b5404a723d3e6de85d18df8f5c23744ad2906fb099e6c93fb7918f7341775d5c472e1f35b8b4ac1299a6adf570db2a2417cf5dfe5f4a472cd9ff2d49209439915aa03cc3b337a68cf69ecfae2f7b0831a19b039452a1624eee2e49372decb4789ecc8ed34874c1ce4e625607c2f5a5f06c51a2f03849a4bbf42495eadb9848bbe403f982fd9c27ef5b482a5f172a7d453a7b0c1ea1ae8a2f2eb953c049ef7e32eacab391c814a0d8fa2baa4530a797f03fe1fe74299019e8279a4d46a87df5d42ef08bc5bab6026fe2de3f09a5698548d36e4ddb2eedb33cf41fa1418b4efb00511899ffea8d9e0c97758695b2a5bd04c0593b10f84701e3b8aae2731049529de451fc75a3f01f24c7d83058c48e41caf8efc7ba3d59d1d2fc7e10fd2aa4b5d45143166f75a920d210e843c60ae19be1ca8d64e9eee3e7a0c9f195b14ec5dcb2ebfd26588e2439e1e2cc3f8b13e3766729c14a083e5e0cf50f2bd7061a6d418d70ed", 0x1000, 0xb1d, 0x0, 0x3}]) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x4000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r1, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x15b0000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) syz_open_dev$vim2m(&(0x7f0000000040), 0x8a0, 0x2) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe3a) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x15b0000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x48) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x8a0, 0x2) (async) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x5000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x71) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_submit(0x0, 0x7, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000000)="b1e1a39cc746069a93485049c08788e9a6d1a9e24f2340dfb47e74f1af7d4506389af4b4a98c3be7d1f514d22c6485d8437d8f7c0aacec70a99179b346232e8669b639e0d18715a7157e06cd", 0x4c, 0x7fffffffffffffff, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9e3, r0, &(0x7f00000000c0)="ab9d323811733b561bc31078613b12dfda3b0db8dc47cc2b1536ebe247c2217ae8f82571e0f8824e8c041a3cc684259ce0ec414975cdcc9027ea0e189957f78a7c5373d7f6c368ecebaa88013cdd36470ea24997597f03b1f82baabbd3ab08eb2fe3", 0x62, 0x1, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000180)="bc37be897d156222f624de594a0b64e3edab451e9a39fd9e492102ce83ff61", 0x1f, 0x6, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000200)="221bd4dd265ae5fc975c0955cc696737c0175b3e7e1fe8981bbac0a7de1581f641be36efa0e4f5a9250000000000", 0x2e, 0x6, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000280), 0x0, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="481a4a78f16b592e6f865c8a46a3e58b8c1d22f5abb4dcee83189c9152d70238b0ace75178c1b639771472707b9a645a03aede1d265b2a05d3ce2d69998feff08b5b6dbdce04c52dce0d92f0499ce35940d5b6358a58edbbfa8981555104b0e6b5df5bb0274c66b043b40fb058d19fc474b8129d4f7200df6aea697f04d85137c1ec774a409d37cb608dd171505409cb25a9bb85a89a538b29467ba5072fad9f049d25a9084bb547f7449f317809cfee8a4c04b88679a5", 0xb7, 0x8, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x40, r6, &(0x7f0000000f00)="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", 0x1000, 0xb1d, 0x0, 0x3}]) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x71) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) io_submit(0x0, 0x7, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000000)="b1e1a39cc746069a93485049c08788e9a6d1a9e24f2340dfb47e74f1af7d4506389af4b4a98c3be7d1f514d22c6485d8437d8f7c0aacec70a99179b346232e8669b639e0d18715a7157e06cd", 0x4c, 0x7fffffffffffffff, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9e3, r0, &(0x7f00000000c0)="ab9d323811733b561bc31078613b12dfda3b0db8dc47cc2b1536ebe247c2217ae8f82571e0f8824e8c041a3cc684259ce0ec414975cdcc9027ea0e189957f78a7c5373d7f6c368ecebaa88013cdd36470ea24997597f03b1f82baabbd3ab08eb2fe3", 0x62, 0x1, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000180)="bc37be897d156222f624de594a0b64e3edab451e9a39fd9e492102ce83ff61", 0x1f, 0x6, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000200)="221bd4dd265ae5fc975c0955cc696737c0175b3e7e1fe8981bbac0a7de1581f641be36efa0e4f5a9250000000000", 0x2e, 0x6, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000280), 0x0, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="481a4a78f16b592e6f865c8a46a3e58b8c1d22f5abb4dcee83189c9152d70238b0ace75178c1b639771472707b9a645a03aede1d265b2a05d3ce2d69998feff08b5b6dbdce04c52dce0d92f0499ce35940d5b6358a58edbbfa8981555104b0e6b5df5bb0274c66b043b40fb058d19fc474b8129d4f7200df6aea697f04d85137c1ec774a409d37cb608dd171505409cb25a9bb85a89a538b29467ba5072fad9f049d25a9084bb547f7449f317809cfee8a4c04b88679a5", 0xb7, 0x8, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x40, r6, &(0x7f0000000f00)="6e9d14a36f176f154070dcd323db6c1287910b3a278802e6342ed1027e86e64787dca69358a10bdcdfeae77f2a1f450d6e933c9d4f49e54e5752c337d9496e790fad7f758aefe712671df6b1b43d769c5688103c0d573d660f2623684dfd84ae35a82701536c33b8d7a30f65f4e59f0120dd8113bc2bf561b14de33efa850766fe1ab3b0e9b68ba7032c8633b40ae2a4cf1f9019c1f2b3cf2cdc54090fbcd4cf21e6e63386120b0fad90af0df78c394f969ab7b85e7a9fd63007bb18d68c228ba74405f4f90e3077779ce368560b29801e5669ea55952037d8f4433406fcfad785a40a3347ae5c59c824407f46b6e4875b01515768ae59748c4b4aa57eca9abcfdd4f55ef5fda7f45062bcbb722c81354259556b336007f828cae07cd93375c1cb248bf560cc19be22466d6c3c4d9fd44764272efe59feccbcdf7ef351f7392e3a391d7a7ba15abc467ad51b0e32ca8b128e4f70b2e9ef14bba74db1deaffbb9414f43045cd1bbe18365a74483f36b59b1fe10f299884075a804c5194093bb8dc5793326da59ba429f2631ee8bf1781638ecd715fe272927216e46d6a8a1bb670807b4fda57705894200e06e005d0fa0b8a82674cf05977b98508250100d57fadb8fa1a6d8436c4226357dbe8c0402dbe1b9cf660a82d048800491a75f2692a43008d00597b5b4263ff8489c87897af970f263cb5825a6b6635a8758490d045e06d2d5897a3b409b71e402106785ff18d59357dfc5d5e82e7fad53c06f1bb296c36bc516c6ff507442971fd0c86d5626308249c6a04a5466101e427adf75df6cf3191fed4dc242da47e3f64588fd2e78c47d52e9215d3bd5744c334622917f39282632bf8721ff2f85987b718d4bc2834b4d8a6a8d5eb7f010546825ca6a3bf23558926893a4651f5f8f83f03885a029200116826fbfa81295635d0a38fa6b87c4b8616105e5399045181ffb131f3d11f01944c254e3de14b066692d6c850c4448dfaa79e102be6e1fa7b57635af0e78d85da25ed2cea41d8f0a737843946a00f69569b91d962ad374073745b141ca62c3c02292f74a85e102930257595c599be05626eadd6335534613687fe4825c9af8bd8a33041a1170a32dfcd89c8a10a75ddb8851eef64d5fca6315aacc989bd0ed2c551aabe736296885cb25ccc244dcca3ab59074fca31c8b509e8930c4fd3b6d4570889ca637ce269189741023b92c4cbadb48e7c9528b373108a673a3c6c1937e91651f8e1928fa651454a5030c8ea7d642ea37a71cd9367dc1a573693f83565d8691c1927121ffde83d4e771b3db633e7c9224c97cef8d6a7f6b3d03867d151428144bf4faf53892cafeaa0fd97f61331ea19310c4617a57aaed21d7debd4358d1440222776673e5c0f50af13dd4f10b847db88c104444c1f8ff69bcaaa3edcdaa68e046be4c42bbdde0e76da9d36a78bdc709fcd4c8e1e30203b568fc114306cbf5ef75dfcda4c863788c3c7c38299a646376705c37a621ec89dc9e66f2602c4292d4be3ecd635b0a74d05f3dccd9be32ecd05f0e7522b02253af46bcb5cf2d050eb61bb2077712a9e7963422030d43cfebc3dc42a9b328a2f1fa103b8fbfa499a11dd0f7d2388bf277c1253a8a2d5894586470035cbf1936dcc1fb293c10f19de2358b0e2df778f7a11a52d6329c764bd353046cb905f5240bd116ea7858b6289ef05f9ff13bc1b1a1fdbc3caea347d3b0354b24808db30457496d9224cceb9dabff4b00d5b6e27d75575cca1315d5c065e86841d7f5f7d5f87aab1a5dd5088ef33c609fa5a7a1cc31fad5436e5b4f2fb04d1ad7036562b6f1ff247f99ecae3b12aae811842e4b116f88c1ad45f0ee80acf7ade4ff75593f99289bb45496ccf836311b8eec411a99301d479f5c88cae55f29fe92b3d59ba1bcb69bc1008dfc5029375540110925087baf08e19d0bf517e372eb6ff81adf928e69f3cf1bc09877d305d54de6d6b0003f7c0ab7986b48f687976b2fc1354e35be105df528b782733f409a9a6be28b3f029f06d8f477c68111dfd9a8997e95012865178d44780dfee77a8bd2934b8f6a352f8b42373334fe0f6742ebd62243672545c47ecf2d34acf33f4f731ee5a207a95a56fc3afb0fd6d5531c2437527787f0df96df21719c6782f85a8940b679ccbd6a2e867e9c529ab2bdb94f2c10260d09348052598284647ba4470f0f962f606100d8a4e0cc0a4fcf236f498bdbd9383246667ef09dc23282ce6f1357e4364e498a656fa5601a49b0c34260d3ad3a1a03ecc7eb8d2a3332c6a6e84bd56fb27b882a5f6e2b794ac35a260b1d22f40b28bee3ac1a25a3d7ea075851b913c17d581ecae62cf9b524fcee44620df407c239dddde2fd18c5addaca46d639931d40c3061e4d29cfe6e96f449f4e10bd1c04dfee485cbba7227cd4382c92e020ac277d985c881a9b8747f8c2c4bd3486bbed8164456a1a02dbccd51cdf5e14236214ba294a7f4fab28c18d116442ac33381c7fc8a584920d2b98f10b60614a1bb04918a143b5c97c97bc70ba8664138f36db849ed455a7df34c4f08a125caa8bedc1c80bc6702ff6a056349ac6c8c89dc29a87a9ce92fd71cb6ab64f1a2444ff6e594e908f117a94c65e281bea1047094fba2fc8f5a5c345aeee0e861162e70874796b14d82f3646dd5ae380e07eebb03725a37aada9f85bdab45d6e42388f4c6e057ab07f90f10b132383e2b43c512f6c001680ba7f3bc2c5ad5b2e09d34e4f0ea0f256247d3f86e2ab0d04c9d98a0e2fbefd79a1df4db7cb3713a799e06019e225808ef72af9c79c3a5f46239b8bfa003eb5e78b2ca4db34fe1bfe9711a30a37bc2cfd6ffd03854ad2546d870f204a7297d3cb8640a8062e9b01cdacffad8ebe771e1fce7d780ad3adaad1e409fac8b1b1727eb9d1f9418996a3ea4559f85f1ea110b429168cda1332d458cdfe33cdce55e70dcf443f5c2b4d4a73e939e7ae3fca44e200cbcdf880a23f096c3e5b9777f5492d276e32eb302de020757451fd821b789af77c235f9748a1cc40608ff72f8283a0942a88b9cb41d587c8f08d82e09786a4535189c565298381de8cc46b26a637c117fe818ecd45a65252c8943665ba4aa0e629249bdc0f5e1e706aa6fc8928a4df1e100a69b91571b4ec15aef9c0aa4727d90f0ac6028f923ab3b70254250be3633b11509d9e8741b898ddaf4c78585d7fcdb825590030ec5f60a505aacd70990adf6d15c833259c9a44c0a33e8b359df118b00f8ff09ee0a01cbcbcca929d66667b8a259a86a8e5d764c52aa6ef2f4ace07d46c8189825867a87adfb34d9f05561e441968a6e94fb4b6e12295e2897e318d1ef0681db85eaeb5956c1fcabf92ea6692d8f89171ada06bb65a0be190978de3f0ebcaa7a0e86785890387d907b94cef9e5b572488d3b428eaec7db9f78d4a10c420290fffdb9c50908d501d6741553750c2552f1c799da5238c32c47437c6d2929347edf660906399d1e3f095833f46a96ed389ea966f8157721b76f53c7c0e5557e8c49c955232d8c5e51f6425f4d0d26ae47b5ffed5724203705a9fbc63f42c1c64c0226af5f4ea0c1b4d8fd917fe087aeb075b5ef632aef4144bc0c7be881ff3f87441296673cfced2fd88af3fd16667dbc7034579817cd69ff0132c5d917551c1d5e6ef0973efbf2ae5a516d6fbabafa180a480f0794b8417707a9d755322c9643afa56d6c4d72c942db554057235251e031f850bae63232b97e8de6168df9daba63c4392aa657f0cbd530f505edd3174604b8b2ec07de82128e9bbe3637b786f8af9e0a0b25cb7bbd2a0045d8e50204b775a73c5d5373ecd1b61494121044842f76e26e6db00bb04270ea25e35057dc375cd17d605b49753ff692f7abc6909061b2ab6d6d0104fa19df995d1a7970e22299a245d42c05aa67da60878465997d00efee0dd6137ae29179260d46276bbeaa96675bcbe882071d59730c04023a456fb657acf60d9aa7e3cef9fe6ce9388ac0de5f6167b21c88e7c44af894edb2d6a6a593ef83183d1fbaad477676ee112f048169e88e6223c38834224e48e2004b0d26d03e0957ff6528709847ce368ebfd89d7959b976716b7cacba76db682c415bce4c0a1c76a2eb6c9fe4f5aec8d7a23548b14a757d40c6e3b07221624cb5ebbf6b9b333a8a03135c12e3fda277de41f58d9ae9782d4f29a4450d2917c7fb83e04d609285a4257088cad4cb0d4f9fddab4a50e919c350b9c94be9b854e20d025645e359c60083c715ab8b51e1917c02e8eefdedfc0bc8e09982b43a695c8c11e21053675edd011770dbffc3fc808aec7ed889b8500ed69739e4f593366f5bda8e00af7d8568f6c110759d7766aaff62d4191d4fb27d3f42074796cae3c257b4d49a23828ee4107e8f3a239805bb9c0a8c9682eb03b35f42b9b67376b948b45d312b20c9372f23d89c85d5a23ed080c0c0b3063368f8a9341124fc80c9bd6605f3fb33e086a6539133f7a0a78d41e5d8b19025e411e9e0a1ec9f65be0cf3d4f4f0a4394889717fff21452dd1dc1d46cdf5f76aa2d7e2db7a1af5ea493fcf1e11f1aafaf726eaf691f50995644c6a19ebc5d89e1b78c7e6deff06b0fb49071a4a317f837b9f71b42c9efa40ff96380953071ef8cf51a482a645a159b199a91874a286e8f913c787760aa9d88d2f6b614387894ca0bac2b9d2cd957011d43114ba635136e7786bcf1908141ad8e39e3b93376f7e1fc8dede26b7a36d393df74b51258f867a40c7774921a0a4b14454a47a5e76e007ae949e7858efb1b7fd9f38acfa7aa458fe8e95f0cbdfb3b99e14f75ef3a876fca1c93641320f81d9a47915f07718600c4103908d031b13696a024836d4535c9b92a32f4b658ef0359540188c7e557fa8fc5ef99b5f2405dcac2e12d9766a9cb7aaad44f823539366b3dc5843e4c63573fac757f3fab34db87fbe8ef6bf6b04a46d9856633eaf7070cc68bb65ba01d2ba922ba3537ed3fc5fb420b95f92f2ba08e8d048a7dd011ba34c5c23b8cea242335964c7eeb939aefc3967fb1df23d60512652e12bcb17d2e0452aff4180e81bd254d04342ada2608d61640ec004b44a50bad9258864f1dc7fcaf09091d91ab944105c95f3d243054ecaba0a2440137d828619a800dbd5eb0e1dc066869aa1de3ee4afac0f5458b3ae38888ba77574230467d515cfe5b162fa18f9ff756fa3160c55989a46b6df86f874a3ebfa19846812798045a7c4a9e5f72bc1b72cd107d5eb8fb321be758916f5e1315aa5130130835c4ba1a341c2aacf15508b5404a723d3e6de85d18df8f5c23744ad2906fb099e6c93fb7918f7341775d5c472e1f35b8b4ac1299a6adf570db2a2417cf5dfe5f4a472cd9ff2d49209439915aa03cc3b337a68cf69ecfae2f7b0831a19b039452a1624eee2e49372decb4789ecc8ed34874c1ce4e625607c2f5a5f06c51a2f03849a4bbf42495eadb9848bbe403f982fd9c27ef5b482a5f172a7d453a7b0c1ea1ae8a2f2eb953c049ef7e32eacab391c814a0d8fa2baa4530a797f03fe1fe74299019e8279a4d46a87df5d42ef08bc5bab6026fe2de3f09a5698548d36e4ddb2eedb33cf41fa1418b4efb00511899ffea8d9e0c97758695b2a5bd04c0593b10f84701e3b8aae2731049529de451fc75a3f01f24c7d83058c48e41caf8efc7ba3d59d1d2fc7e10fd2aa4b5d45143166f75a920d210e843c60ae19be1ca8d64e9eee3e7a0c9f195b14ec5dcb2ebfd26588e2439e1e2cc3f8b13e3766729c14a083e5e0cf50f2bd7061a6d418d70ed", 0x1000, 0xb1d, 0x0, 0x3}]) (async) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r1, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x11, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 1: geteuid() bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffef9) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r1, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x6000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 1: geteuid() bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffef9) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffef9) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x12, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r1, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x7000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x71) (async, rerun: 32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (rerun: 32) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_submit(0x0, 0x7, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000000)="b1e1a39cc746069a93485049c08788e9a6d1a9e24f2340dfb47e74f1af7d4506389af4b4a98c3be7d1f514d22c6485d8437d8f7c0aacec70a99179b346232e8669b639e0d18715a7157e06cd", 0x4c, 0x7fffffffffffffff, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9e3, r0, &(0x7f00000000c0)="ab9d323811733b561bc31078613b12dfda3b0db8dc47cc2b1536ebe247c2217ae8f82571e0f8824e8c041a3cc684259ce0ec414975cdcc9027ea0e189957f78a7c5373d7f6c368ecebaa88013cdd36470ea24997597f03b1f82baabbd3ab08eb2fe3", 0x62, 0x1, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000180)="bc37be897d156222f624de594a0b64e3edab451e9a39fd9e492102ce83ff61", 0x1f, 0x6, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000200)="221bd4dd265ae5fc975c0955cc696737c0175b3e7e1fe8981bbac0a7de1581f641be36efa0e4f5a9250000000000", 0x2e, 0x6, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000280), 0x0, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="481a4a78f16b592e6f865c8a46a3e58b8c1d22f5abb4dcee83189c9152d70238b0ace75178c1b639771472707b9a645a03aede1d265b2a05d3ce2d69998feff08b5b6dbdce04c52dce0d92f0499ce35940d5b6358a58edbbfa8981555104b0e6b5df5bb0274c66b043b40fb058d19fc474b8129d4f7200df6aea697f04d85137c1ec774a409d37cb608dd171505409cb25a9bb85a89a538b29467ba5072fad9f049d25a9084bb547f7449f317809cfee8a4c04b88679a5", 0xb7, 0x8, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x40, r6, &(0x7f0000000f00)="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", 0x1000, 0xb1d, 0x0, 0x3}]) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x13, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 1: geteuid() (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffef9) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x8000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x51d000, 0x0) r2 = fsmount(r1, 0x0, 0xfe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0xf, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r0, r1, 0x5, 0x2, 0x5, 0x3}, 0x48) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x2, 0x1d3b6a, 0x2f0b95}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x0, 0x3, 0x5, 0x50, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, &(0x7f0000000480), 0x41000, 0xf, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3], 0x0, 0x10, 0xff}, 0x90) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x10) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x14, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000200000000000000050000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9}, 0x90) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0xa}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x9000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x51d000, 0x0) r2 = fsmount(r1, 0x0, 0xfe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0xf, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r0, r1, 0x5, 0x2, 0x5, 0x3}, 0x48) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x2, 0x1d3b6a, 0x2f0b95}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x0, 0x3, 0x5, 0x50, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, &(0x7f0000000480), 0x41000, 0xf, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3], 0x0, 0x10, 0xff}, 0x90) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x10) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x51d000, 0x0) (async) fsmount(r1, 0x0, 0xfe) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0xf, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r0, r1, 0x5, 0x2, 0x5, 0x3}, 0x48) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x38}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x2, 0x1d3b6a, 0x2f0b95}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x0, 0x3, 0x5, 0x50, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, &(0x7f0000000480), 0x41000, 0xf, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3], 0x0, 0x10, 0xff}, 0x90) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x10) (async) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xa000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x15, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 2: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%p \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x200, 0x487dbbb, 0xc4c, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xfffffffd, 0xb}, 0x48) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000300)="e55bc7bef9dd9514e6bc20b3d58566a258eee7777addadb35026b32ad9798bd510854564c553f0330d46bf1203e049b6e389310a4d0bf588a50ab246bb2aab629b2b33134bac9c3ecb9fb1cf0e4ebb36b85165685a806b747a7c411660422f9adbf041239cf2a2ff1faaa9815893da59f2a05c6e282b362e52247d4a3c9a4f2ef8", &(0x7f00000003c0)=""/198, 0x4}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=@setneightbl={0x0, 0x43, 0x300, 0x70bd28, 0x25dfdbfc, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x81}, @NDTA_THRESH3={0x0, 0x4, 0x800}, @NDTA_THRESH1={0xffffffffffffff92, 0x2, 0x3f}, @NDTA_THRESH1={0x0, 0x2, 0x4}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0x0, 0xc, 0xffffffffffffffff}, @NDTPA_LOCKTIME={0x0, 0xf, 0x5f}, @NDTPA_APP_PROBES={0x0, 0x9, 0xa8b3}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x401}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) (rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x51d000, 0x0) r2 = fsmount(r1, 0x0, 0xfe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0xf, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1f, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r0, r1, 0x5, 0x2, 0x5, 0x3}, 0x48) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x2, 0x1d3b6a, 0x2f0b95}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x3, 0x0, 0x3, 0x5, 0x50, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x0, &(0x7f0000000480), 0x41000, 0xf, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x800, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r3], 0x0, 0x10, 0xff}, 0x90) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0x10) 00:11:19 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000002000000000000000500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xb000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x16, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 4: fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%p \x00'}, 0x20) (rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x200, 0x487dbbb, 0xc4c, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xfffffffd, 0xb}, 0x48) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000300)="e55bc7bef9dd9514e6bc20b3d58566a258eee7777addadb35026b32ad9798bd510854564c553f0330d46bf1203e049b6e389310a4d0bf588a50ab246bb2aab629b2b33134bac9c3ecb9fb1cf0e4ebb36b85165685a806b747a7c411660422f9adbf041239cf2a2ff1faaa9815893da59f2a05c6e282b362e52247d4a3c9a4f2ef8", &(0x7f00000003c0)=""/198, 0x4}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=@setneightbl={0x0, 0x43, 0x300, 0x70bd28, 0x25dfdbfc, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x81}, @NDTA_THRESH3={0x0, 0x4, 0x800}, @NDTA_THRESH1={0xffffffffffffff92, 0x2, 0x3f}, @NDTA_THRESH1={0x0, 0x2, 0x4}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0x0, 0xc, 0xffffffffffffffff}, @NDTPA_LOCKTIME={0x0, 0xf, 0x5f}, @NDTPA_APP_PROBES={0x0, 0x9, 0xa8b3}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x401}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 00:11:19 executing program 2: r0 = fsopen(&(0x7f0000000140)='nfsd\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0xfffffdce, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r2, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0xa0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='}[{+]-\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40011) r3 = fsmount(r0, 0x0, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x1, r2, 0x10, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}}, 0xa0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='\'\\\x00', &(0x7f0000000380)='./file0\x00', r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000480)='posixacl\x00', 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, r9, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:19 executing program 5: bpf$BPF_PROG_QUERY(0x17, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:19 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xc000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:19 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffd05) 00:11:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%p \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x200, 0x487dbbb, 0xc4c, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xfffffffd, 0xb}, 0x48) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000300)="e55bc7bef9dd9514e6bc20b3d58566a258eee7777addadb35026b32ad9798bd510854564c553f0330d46bf1203e049b6e389310a4d0bf588a50ab246bb2aab629b2b33134bac9c3ecb9fb1cf0e4ebb36b85165685a806b747a7c411660422f9adbf041239cf2a2ff1faaa9815893da59f2a05c6e282b362e52247d4a3c9a4f2ef8", &(0x7f00000003c0)=""/198, 0x4}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=@setneightbl={0x0, 0x43, 0x300, 0x70bd28, 0x25dfdbfc, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x81}, @NDTA_THRESH3={0x0, 0x4, 0x800}, @NDTA_THRESH1={0xffffffffffffff92, 0x2, 0x3f}, @NDTA_THRESH1={0x0, 0x2, 0x4}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0x0, 0xc, 0xffffffffffffffff}, @NDTPA_LOCKTIME={0x0, 0xf, 0x5f}, @NDTPA_APP_PROBES={0x0, 0x9, 0xa8b3}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x401}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x18, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xd000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffd05) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffd05) (async) 00:11:20 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%p \x00'}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) recvfrom$rose(r1, &(0x7f00000005c0)=""/157, 0x9d, 0x40000000, &(0x7f0000000680)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5fd1, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x6}, @map_fd={0x18, 0xc, 0x1, 0x0, r0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @printk={@pointer}, @ldst={0x3, 0x2, 0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0xea, &(0x7f00000001c0)=""/234, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r3, 0x1, r4, r5], &(0x7f00000004c0)=[{0x4, 0x3, 0xc, 0x4}, {0x3, 0x1, 0x6, 0x9}], 0x10, 0x80000000}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x19, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffd05) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffd05) (async) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xe000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x1a, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x1b, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%p \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%p \x00'}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) recvfrom$rose(r1, &(0x7f00000005c0)=""/157, 0x9d, 0x40000000, &(0x7f0000000680)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) (async) recvfrom$rose(r1, &(0x7f00000005c0)=""/157, 0x9d, 0x40000000, &(0x7f0000000680)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5fd1, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x6}, @map_fd={0x18, 0xc, 0x1, 0x0, r0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @printk={@pointer}, @ldst={0x3, 0x2, 0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0xea, &(0x7f00000001c0)=""/234, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r3, 0x1, r4, r5], &(0x7f00000004c0)=[{0x4, 0x3, 0xc, 0x4}, {0x3, 0x1, 0x6, 0x9}], 0x10, 0x80000000}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5fd1, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x6}, @map_fd={0x18, 0xc, 0x1, 0x0, r0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @printk={@pointer}, @ldst={0x3, 0x2, 0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0xea, &(0x7f00000001c0)=""/234, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r3, 0x1, r4, r5], &(0x7f00000004c0)=[{0x4, 0x3, 0xc, 0x4}, {0x3, 0x1, 0x6, 0x9}], 0x10, 0x80000000}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x34) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0xf000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x1c, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x34) 00:11:20 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%p \x00'}, 0x20) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) recvfrom$rose(r1, &(0x7f00000005c0)=""/157, 0x9d, 0x40000000, &(0x7f0000000680)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5fd1, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x6}, @map_fd={0x18, 0xc, 0x1, 0x0, r0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @printk={@pointer}, @ldst={0x3, 0x2, 0x3, 0x3, 0x5, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0xea, &(0x7f00000001c0)=""/234, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, 0xffffffffffffffff, r3, 0x1, r4, r5], &(0x7f00000004c0)=[{0x4, 0x3, 0xc, 0x4}, {0x3, 0x1, 0x6, 0x9}], 0x10, 0x80000000}, 0x90) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x10000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x1d, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000380)={0x98, 0x20, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x34) 00:11:20 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {&(0x7f0000000680), 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x1e, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x11000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x7, 0x4, 0x2, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@exit, @ldst={0x3, 0x3, 0x1, 0x6, 0xa, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0x60}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9b3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x31, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x81, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x4, 0x5, 0xe, 0x1}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x5, 0xc, 0x2}], 0x10, 0x4}, 0x90) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x21, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x1f) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x12000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x1f) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x22, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x7, 0x4, 0x2, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@exit, @ldst={0x3, 0x3, 0x1, 0x6, 0xa, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0x60}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9b3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x31, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x81, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x4, 0x5, 0xe, 0x1}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x5, 0xc, 0x2}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@exit, @ldst={0x3, 0x3, 0x1, 0x6, 0xa, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0x60}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9b3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x31, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x81, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x4, 0x5, 0xe, 0x1}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x5, 0xc, 0x2}], 0x10, 0x4}, 0x90) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x1f) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x13000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x7, 0x4, 0x2, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@exit, @ldst={0x3, 0x3, 0x1, 0x6, 0xa, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0x60}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9b3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_fd={0x18, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x88, &(0x7f0000000100)=""/136, 0x40f00, 0x31, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x81, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r2], &(0x7f0000000380)=[{0x4, 0x5, 0xe, 0x1}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x5, 0xc, 0x2}], 0x10, 0x4}, 0x90) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x5, 0xaeb7, 0xffff, 0x80}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x6) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x14000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffe1d) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x5, 0xaeb7, 0xffff, 0x80}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x6) 00:11:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x15000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) 00:11:20 executing program 1: ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x5, 0xaeb7, 0xffff, 0x80}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x6) 00:11:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x16000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xf4) 00:11:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000780)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}}, 0xa0) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xf4) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x7, 0x0, 0xfffffeea, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:11:20 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x17000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xf4) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x7, 0x0, 0xfffffeea, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:11:20 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:20 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x18000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:20 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x45}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x800, 0x81}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x4) ioctl$TCSBRK(r0, 0x5409, 0x0) 00:11:20 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x7, 0x0, 0xfffffeea, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) r7 = socket(0x28, 0x6, 0x78) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000)) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x19000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = fsmount(0xffffffffffffffff, 0x1, 0x79) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r7, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = fspick(r3, &(0x7f00000007c0)='./file0\x00', 0x1) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) r12 = fsmount(r3, 0xe98ac9ad11b615f5, 0x86) io_submit(r7, 0x7, &(0x7f0000000d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f00000006c0)="5e1f45acab02143f319f0c68cbd40196912c5558357519c8ecbc1c0092f637b2d363a17112bd71b6119494b051f8ebf491da9b4edc3ae5e9f951bcbe5783533408cb8681bd05a326ced6a8fd5e1e76701ac5d00051d9434b3781354930cd602ddc34d5886d7a8027b453ad5b138f66c5c4fc7650bf14071f9fd61b5730157be2f3525b4321c6e5de948b8b7ba4304cfd47db1e314f6d544c9b0372f8a6fa6e59ae1028e7ae3ffb2e2b290d57e11d0115d5ae501074264df979d879fe0d862c1b88d874b1ceb3abc354bba8e4dfd97814b8dbed77254506f5032b274047234667de59ee01bbd8082ba7297878428a86804fe2ca7767", 0xf5, 0x800, 0x0, 0x3, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000800)="58cc38612377c2ea5897e5470e86ce8dbed31e94234a48d33e209784f99a7a515be89aa8", 0x24, 0x8000000000000000, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xbf7, r3, &(0x7f0000000880)="39e19ffec9c152d424310e0b39d5949c869d8e66204a941b35151c5f541145201829e9886d988252eb30d0c90de12c66857a04f162", 0x35, 0x8000, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000900)="c2ebd29e403e79bff477fe6bb44881847d30e0aff3cd3426b7a22aa11aaa8ed399fae03232479a74a77ae2d34dce98f544c9c76680644492b3a380312df0a2ee4874f931a0d53264d61311594ffc7a1248a8cedc70b9142d799dc0becf63c8f5ed13814993603229a61f11d1698b16ff11e658a4462fadb75890a72b458cccaa2bf1a74f70561d51d89ab82548f56e83a76868fa475f157b149f", 0x9a, 0x8, 0x0, 0x2, r3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x400, r4, &(0x7f0000000a00)="1c6bf1f4f68c0da7fa816305c89db10ccc2c50b3bc73f0b99f4b85853dcc13b78b2c187d1f6621330c6a931079de48e119c2e29899a88a95ae55cd73a0f5e5459d26c58caab8aff5dbda740ed0af83251075b9a03650799643250edb84297309ede25375361177be094ca305c8ec8f2dc8362d685189f91c8d822fe7bf18c24411fe46c25ddec7740aa57cf0111455ea59e474a401527651e07ea404d7e26d31000b039152d9b6c397", 0xa9, 0x1ff, 0x0, 0x3, r11}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, &(0x7f0000000b40)="90a4e96b9d33a005020ff7f36a5096d8257e504dfe35c9589a237dcf089c7663899bb0da22042c101d508765a7f8706277bb0e90867945ab7e83e83c0276ed90075e02e21c0b411da8e2b93dcc6dc41bbf84e073d5fb1fe3d3dc6400cc", 0x5d, 0x100000000, 0x0, 0x2, r4}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000c00)="6a308ee289bebe111995103fac4e3654365467ce7928740817e84529dcedace1b303ea7ea3de7f9a5b66da99b7430356da66ce64b130746ff3cc005107acd741bcf725b31dc046ee504c33ed855b5f9e12affed0c6789159ee38fc4cf0d4446dde419fd515d6f446e1806bab40e2a1620f3de3aed431696b343d92eb3d76ed0e9b843779779434a4b542ba9aadb24daaddd3632465", 0x95, 0x1000, 0x0, 0x0, r12}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x9, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x17, 0xb3, &(0x7f0000000300)=""/179, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0x81, 0x33}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r5, r6], &(0x7f0000000580)=[{0x5, 0x4, 0xe, 0x4}], 0x10, 0x74ca}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000680)='syzkaller\x00', 0xffff7672, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0xfffffffd, 0x7}, 0x10, 0x3050a, 0xffffffffffffffff, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[{0x5, 0x3, 0x6, 0x9}, {0x2, 0x5, 0x9, 0xb}, {0x2, 0x2, 0xf, 0x5}], 0x10, 0x5}, 0x90) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x6, 0x8, 0xfffffffffffffffe, 0x1}, @ldst={0x0, 0x0, 0x1, 0x8, 0x7, 0x18, 0x10}, @jmp={0x5, 0x1, 0xc, 0xa, 0x9, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0xe0, &(0x7f0000000200)=""/224, 0x41100, 0x9, '\x00', 0x0, 0x2, r2, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xe, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000480)=[r4, r5, r6, 0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0xb, 0xa}, {0x4, 0x3, 0x3}], 0x10, 0x4}, 0x90) socket(0x28, 0x6, 0x78) 00:11:21 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x45}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x800, 0x81}) (async, rerun: 64) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TCSBRK(r0, 0x5409, 0x8) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x4) (async) ioctl$TCSBRK(r0, 0x5409, 0x0) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1a000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7aeb, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1b000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) socket(0x28, 0x6, 0x78) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = fsmount(0xffffffffffffffff, 0x1, 0x79) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r7, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r9, 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r3, &(0x7f00000007c0)='./file0\x00', 0x1) (async) r10 = fspick(r3, &(0x7f00000007c0)='./file0\x00', 0x1) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) fsmount(r3, 0xe98ac9ad11b615f5, 0x86) (async) r12 = fsmount(r3, 0xe98ac9ad11b615f5, 0x86) io_submit(r7, 0x7, &(0x7f0000000d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f00000006c0)="5e1f45acab02143f319f0c68cbd40196912c5558357519c8ecbc1c0092f637b2d363a17112bd71b6119494b051f8ebf491da9b4edc3ae5e9f951bcbe5783533408cb8681bd05a326ced6a8fd5e1e76701ac5d00051d9434b3781354930cd602ddc34d5886d7a8027b453ad5b138f66c5c4fc7650bf14071f9fd61b5730157be2f3525b4321c6e5de948b8b7ba4304cfd47db1e314f6d544c9b0372f8a6fa6e59ae1028e7ae3ffb2e2b290d57e11d0115d5ae501074264df979d879fe0d862c1b88d874b1ceb3abc354bba8e4dfd97814b8dbed77254506f5032b274047234667de59ee01bbd8082ba7297878428a86804fe2ca7767", 0xf5, 0x800, 0x0, 0x3, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000800)="58cc38612377c2ea5897e5470e86ce8dbed31e94234a48d33e209784f99a7a515be89aa8", 0x24, 0x8000000000000000, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xbf7, r3, &(0x7f0000000880)="39e19ffec9c152d424310e0b39d5949c869d8e66204a941b35151c5f541145201829e9886d988252eb30d0c90de12c66857a04f162", 0x35, 0x8000, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000900)="c2ebd29e403e79bff477fe6bb44881847d30e0aff3cd3426b7a22aa11aaa8ed399fae03232479a74a77ae2d34dce98f544c9c76680644492b3a380312df0a2ee4874f931a0d53264d61311594ffc7a1248a8cedc70b9142d799dc0becf63c8f5ed13814993603229a61f11d1698b16ff11e658a4462fadb75890a72b458cccaa2bf1a74f70561d51d89ab82548f56e83a76868fa475f157b149f", 0x9a, 0x8, 0x0, 0x2, r3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x400, r4, &(0x7f0000000a00)="1c6bf1f4f68c0da7fa816305c89db10ccc2c50b3bc73f0b99f4b85853dcc13b78b2c187d1f6621330c6a931079de48e119c2e29899a88a95ae55cd73a0f5e5459d26c58caab8aff5dbda740ed0af83251075b9a03650799643250edb84297309ede25375361177be094ca305c8ec8f2dc8362d685189f91c8d822fe7bf18c24411fe46c25ddec7740aa57cf0111455ea59e474a401527651e07ea404d7e26d31000b039152d9b6c397", 0xa9, 0x1ff, 0x0, 0x3, r11}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, &(0x7f0000000b40)="90a4e96b9d33a005020ff7f36a5096d8257e504dfe35c9589a237dcf089c7663899bb0da22042c101d508765a7f8706277bb0e90867945ab7e83e83c0276ed90075e02e21c0b411da8e2b93dcc6dc41bbf84e073d5fb1fe3d3dc6400cc", 0x5d, 0x100000000, 0x0, 0x2, r4}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000c00)="6a308ee289bebe111995103fac4e3654365467ce7928740817e84529dcedace1b303ea7ea3de7f9a5b66da99b7430356da66ce64b130746ff3cc005107acd741bcf725b31dc046ee504c33ed855b5f9e12affed0c6789159ee38fc4cf0d4446dde419fd515d6f446e1806bab40e2a1620f3de3aed431696b343d92eb3d76ed0e9b843779779434a4b542ba9aadb24daaddd3632465", 0x95, 0x1000, 0x0, 0x0, r12}]) (async) io_submit(r7, 0x7, &(0x7f0000000d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f00000006c0)="5e1f45acab02143f319f0c68cbd40196912c5558357519c8ecbc1c0092f637b2d363a17112bd71b6119494b051f8ebf491da9b4edc3ae5e9f951bcbe5783533408cb8681bd05a326ced6a8fd5e1e76701ac5d00051d9434b3781354930cd602ddc34d5886d7a8027b453ad5b138f66c5c4fc7650bf14071f9fd61b5730157be2f3525b4321c6e5de948b8b7ba4304cfd47db1e314f6d544c9b0372f8a6fa6e59ae1028e7ae3ffb2e2b290d57e11d0115d5ae501074264df979d879fe0d862c1b88d874b1ceb3abc354bba8e4dfd97814b8dbed77254506f5032b274047234667de59ee01bbd8082ba7297878428a86804fe2ca7767", 0xf5, 0x800, 0x0, 0x3, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000800)="58cc38612377c2ea5897e5470e86ce8dbed31e94234a48d33e209784f99a7a515be89aa8", 0x24, 0x8000000000000000, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xbf7, r3, &(0x7f0000000880)="39e19ffec9c152d424310e0b39d5949c869d8e66204a941b35151c5f541145201829e9886d988252eb30d0c90de12c66857a04f162", 0x35, 0x8000, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000900)="c2ebd29e403e79bff477fe6bb44881847d30e0aff3cd3426b7a22aa11aaa8ed399fae03232479a74a77ae2d34dce98f544c9c76680644492b3a380312df0a2ee4874f931a0d53264d61311594ffc7a1248a8cedc70b9142d799dc0becf63c8f5ed13814993603229a61f11d1698b16ff11e658a4462fadb75890a72b458cccaa2bf1a74f70561d51d89ab82548f56e83a76868fa475f157b149f", 0x9a, 0x8, 0x0, 0x2, r3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x400, r4, &(0x7f0000000a00)="1c6bf1f4f68c0da7fa816305c89db10ccc2c50b3bc73f0b99f4b85853dcc13b78b2c187d1f6621330c6a931079de48e119c2e29899a88a95ae55cd73a0f5e5459d26c58caab8aff5dbda740ed0af83251075b9a03650799643250edb84297309ede25375361177be094ca305c8ec8f2dc8362d685189f91c8d822fe7bf18c24411fe46c25ddec7740aa57cf0111455ea59e474a401527651e07ea404d7e26d31000b039152d9b6c397", 0xa9, 0x1ff, 0x0, 0x3, r11}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, &(0x7f0000000b40)="90a4e96b9d33a005020ff7f36a5096d8257e504dfe35c9589a237dcf089c7663899bb0da22042c101d508765a7f8706277bb0e90867945ab7e83e83c0276ed90075e02e21c0b411da8e2b93dcc6dc41bbf84e073d5fb1fe3d3dc6400cc", 0x5d, 0x100000000, 0x0, 0x2, r4}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000c00)="6a308ee289bebe111995103fac4e3654365467ce7928740817e84529dcedace1b303ea7ea3de7f9a5b66da99b7430356da66ce64b130746ff3cc005107acd741bcf725b31dc046ee504c33ed855b5f9e12affed0c6789159ee38fc4cf0d4446dde419fd515d6f446e1806bab40e2a1620f3de3aed431696b343d92eb3d76ed0e9b843779779434a4b542ba9aadb24daaddd3632465", 0x95, 0x1000, 0x0, 0x0, r12}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x9, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x17, 0xb3, &(0x7f0000000300)=""/179, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0x81, 0x33}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r5, r6], &(0x7f0000000580)=[{0x5, 0x4, 0xe, 0x4}], 0x10, 0x74ca}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000680)='syzkaller\x00', 0xffff7672, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0xfffffffd, 0x7}, 0x10, 0x3050a, 0xffffffffffffffff, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[{0x5, 0x3, 0x6, 0x9}, {0x2, 0x5, 0x9, 0xb}, {0x2, 0x2, 0xf, 0x5}], 0x10, 0x5}, 0x90) 00:11:21 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x45}) (async) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x45}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x800, 0x81}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x5427) (async) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TCSBRK(r0, 0x5409, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x4) ioctl$TCSBRK(r0, 0x5409, 0x0) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) socket(0x28, 0x6, 0x78) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1c000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xbdfe, 0x0, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) 00:11:21 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1d000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) socket(0x28, 0x6, 0x78) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xbdfe, 0x0, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) socket(0x28, 0x6, 0x78) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r3 = fsmount(0xffffffffffffffff, 0x1, 0x79) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) (async, rerun: 64) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r7, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = fspick(r3, &(0x7f00000007c0)='./file0\x00', 0x1) (async) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) r12 = fsmount(r3, 0xe98ac9ad11b615f5, 0x86) io_submit(r7, 0x7, &(0x7f0000000d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f00000006c0)="5e1f45acab02143f319f0c68cbd40196912c5558357519c8ecbc1c0092f637b2d363a17112bd71b6119494b051f8ebf491da9b4edc3ae5e9f951bcbe5783533408cb8681bd05a326ced6a8fd5e1e76701ac5d00051d9434b3781354930cd602ddc34d5886d7a8027b453ad5b138f66c5c4fc7650bf14071f9fd61b5730157be2f3525b4321c6e5de948b8b7ba4304cfd47db1e314f6d544c9b0372f8a6fa6e59ae1028e7ae3ffb2e2b290d57e11d0115d5ae501074264df979d879fe0d862c1b88d874b1ceb3abc354bba8e4dfd97814b8dbed77254506f5032b274047234667de59ee01bbd8082ba7297878428a86804fe2ca7767", 0xf5, 0x800, 0x0, 0x3, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x8, r10, &(0x7f0000000800)="58cc38612377c2ea5897e5470e86ce8dbed31e94234a48d33e209784f99a7a515be89aa8", 0x24, 0x8000000000000000, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xbf7, r3, &(0x7f0000000880)="39e19ffec9c152d424310e0b39d5949c869d8e66204a941b35151c5f541145201829e9886d988252eb30d0c90de12c66857a04f162", 0x35, 0x8000, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000900)="c2ebd29e403e79bff477fe6bb44881847d30e0aff3cd3426b7a22aa11aaa8ed399fae03232479a74a77ae2d34dce98f544c9c76680644492b3a380312df0a2ee4874f931a0d53264d61311594ffc7a1248a8cedc70b9142d799dc0becf63c8f5ed13814993603229a61f11d1698b16ff11e658a4462fadb75890a72b458cccaa2bf1a74f70561d51d89ab82548f56e83a76868fa475f157b149f", 0x9a, 0x8, 0x0, 0x2, r3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x400, r4, &(0x7f0000000a00)="1c6bf1f4f68c0da7fa816305c89db10ccc2c50b3bc73f0b99f4b85853dcc13b78b2c187d1f6621330c6a931079de48e119c2e29899a88a95ae55cd73a0f5e5459d26c58caab8aff5dbda740ed0af83251075b9a03650799643250edb84297309ede25375361177be094ca305c8ec8f2dc8362d685189f91c8d822fe7bf18c24411fe46c25ddec7740aa57cf0111455ea59e474a401527651e07ea404d7e26d31000b039152d9b6c397", 0xa9, 0x1ff, 0x0, 0x3, r11}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, &(0x7f0000000b40)="90a4e96b9d33a005020ff7f36a5096d8257e504dfe35c9589a237dcf089c7663899bb0da22042c101d508765a7f8706277bb0e90867945ab7e83e83c0276ed90075e02e21c0b411da8e2b93dcc6dc41bbf84e073d5fb1fe3d3dc6400cc", 0x5d, 0x100000000, 0x0, 0x2, r4}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000c00)="6a308ee289bebe111995103fac4e3654365467ce7928740817e84529dcedace1b303ea7ea3de7f9a5b66da99b7430356da66ce64b130746ff3cc005107acd741bcf725b31dc046ee504c33ed855b5f9e12affed0c6789159ee38fc4cf0d4446dde419fd515d6f446e1806bab40e2a1620f3de3aed431696b343d92eb3d76ed0e9b843779779434a4b542ba9aadb24daaddd3632465", 0x95, 0x1000, 0x0, 0x0, r12}]) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x6, 0x9, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x17, 0xb3, &(0x7f0000000300)=""/179, 0x40f00, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x8, 0x81, 0x33}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r4, 0xffffffffffffffff, r5, r6], &(0x7f0000000580)=[{0x5, 0x4, 0xe, 0x4}], 0x10, 0x74ca}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000680)='syzkaller\x00', 0xffff7672, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x1, 0xfffffffd, 0x7}, 0x10, 0x3050a, 0xffffffffffffffff, 0x3, &(0x7f0000000140), &(0x7f0000000180)=[{0x5, 0x3, 0x6, 0x9}, {0x2, 0x5, 0x9, 0xb}, {0x2, 0x2, 0xf, 0x5}], 0x10, 0x5}, 0x90) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1e000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r2, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) socket(0x28, 0x6, 0x78) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xbdfe, 0x0, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xbdfe, 0x0, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x48) (async) 00:11:21 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x1f000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket(0x28, 0x6, 0x78) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x20000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x6, 0x78) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x11, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x3, 0x1, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x21000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x3, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004c44) 00:11:21 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x10, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x100, '\x00', 0x0, r0, 0x4, 0x3, 0x4}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%d \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x8, 0x10001, 0x4000000, 0x1, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb28b, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000840)=""/170, 0x40f00, 0xa, '\x00', r3, 0x37, r0, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x7, &(0x7f0000000b80)=[r5, r1, r6, r0, 0x1, r1, r0], &(0x7f0000000bc0)=[{0x5, 0x2, 0xd, 0x9}, {0x5, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xc, 0xa}, {0x3, 0x3, 0xa, 0xb}, {0x4, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x800}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000f00)="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", &(0x7f0000000040)=""/127}, 0x20) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r7}, 0x18) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000c40)={0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x8}}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x5, '\x00', r8, r0, 0x4, 0x4}, 0x48) write$smackfs_labels_list(r0, &(0x7f0000000000)={[{}, {'..'}, {'*&[\x06/%.$i%'}, {'}:-\x8b:'}, {}, {'$:%:{{'}, {}, {'}*\''}, {}]}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800480}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x5) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) socket(0x28, 0x6, 0x78) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x22000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x3, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004c44) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x3, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004c44) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) socket(0x28, 0x6, 0x78) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x100, '\x00', 0x0, r0, 0x4, 0x3, 0x4}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00'}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%d \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x8, 0x10001, 0x4000000, 0x1, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb28b, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000840)=""/170, 0x40f00, 0xa, '\x00', r3, 0x37, r0, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x7, &(0x7f0000000b80)=[r5, r1, r6, r0, 0x1, r1, r0], &(0x7f0000000bc0)=[{0x5, 0x2, 0xd, 0x9}, {0x5, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xc, 0xa}, {0x3, 0x3, 0xa, 0xb}, {0x4, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x800}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000f00)="07c07b0d24fbc19f6173d6220ca29e072d93f471e047345862f5c62f12bb6a8bb357cf24de6641c0922cac1e0cdafc5f58b0679123e32235a15abdff21252210345181dd4271180ce6d7d4a3ea6902b98b067b8d71d118172c9b8835561606ec7e993dfb76d5810a6f17b480600af2a057bf2e767955622c0b9dc3786b2e68219489fc3b34ba0d233c4e2a76415de01782bbee999e562ffc5c13adf0f3b16a921e709f839d7d3965de1d40abe4bfd20875b8d8d5f7fe5282807ec75a47634480869c3f4595c3bf3b664020aa3932c28077f0d5fc137a0d370cbf30228267eb876594cbfdaddcf9d80fd613bc5cf49c3952c43cda2b502f8a6c89f10a0a14144de38988621fbad99ed2b2849305a9748b8a4c14d7cfc77cfaf984b00675f7614f96bde68be31508638d2250f547db67c827e9bec50b648c059a179d4e66360015e95fffffadb1f6e4db474342ee067e493ad66ca74607e781e8210d64a6e53d8eb81b2cf86aa478b1f956ba3d317441340daf656942f77705634e77ce8ce7ecbc483834554307e09b2808a3e9f471e9e59ec7442d2dd3245373c5d4208dfd7c2f521b430e055a89421d2227f6ea9e746f26a8c1711bebefd1aac6fb23b5e5e1b0c8ca8c38728a1efd0d4f7451393882fe615cdbd33e91c37fa51369d131f2cdbcc76b0efce01c3862e05f959c94ff2b162444181769a6727d68c99bf086850b7e403ac5aca32610f13c927442a578aee668975d0439ab6c6cb7b8729d084477f54d53d1149cf8f828dee3474b2f361f7e760084c553826b347d85164f6f06d9010800f79eced541b4b4687869bbd4c1d90b075c6d704fa648b660ed14953c708509b6e490a207a648f5bf431a0645ec6b22ac8d0c409efcdaa7bf85cdf89c00f48bddd343cf84b80932106c83a98946446db0ca5739663c81f6e608c50e17821e3620a4869f46df0a2b4868bf8a90b70735cda8b5e01d72b6dea5577e0df08af20864a437479cf65fe85f465c2da885386ff641058dd5b7299bd1c7df7fa25a16875e97108e4bb5ffcdcf8aaa2f11095077b605ad52101895758d50884eff924a87c4c8b594a30c519ba97480af598d8036180fbdaaf6a8916f03ecbca5eaf93583a8dcf3c7f9e7d2acd762abd0cbc4eee5234fe58ea92f04e70f05cab21abd841242fe31a14d5b7b0b904273440c402bc545da22eefd60ae3ea672837dd022a463946a7c274aee78fa3af4f2bd0ac8fbd21e8db3581e02a0cca5c5b912689583290938702249028afdf7b5cda8606427de4aa2dfa75c895220cf5ed3b9a99e30a36caf7709304a18c93928f7cb8c60bcf4a3c7ea8e86c8c82b39ac0fa5c81f702362c6135958cf6b0c98e288f24e2598a26dcde62ebea25aad5f2dd3431965ce70a34c840c6e71e0323ebabb516987f8decc8cc5e3b29f29c4a2ef18a8ac415b6bbac50a07db5236b79d843a26c36eb9f34836e3a18474b61796cd29669109554bc3518247c9f3b6e0e35526f428e85b915f7b1a858b788ce615a9939d9d878c5af41f3001c70b10637cac9acade31e2c82a5a67d813cbc345a781c9f84f8a81668bf17e49feef9c40b2e818fc2cb68a3cc199a42793b6a5316dd7fd3734ff164fa3332aab5046e08414f0f5f031e60c84adce8cf28d7d7f10144724d482616d27d5e870b5e9103dba99381aa87b83aa3800d920c6af780079b74ebe343c126a72d9336af235cebd876f53b3559233421db06f07b15633762b9266da25f243b07675b19c6ae7c8d46a1ae2d65c8a5ed27e3bfb86eb49f067c63a03c8d3d387be1882532b0bc3bdcb722d617aa85fb47729146fa5277a9231db0e1b912ab1b5761d977f7d7f97e35c155ef2fbd2ebc9784c8cc8df57fef38f88a7c3d4c84e3f70ba296f09663b8a455b70c0d9a5a7edff435fa172411a5c819eb305fa995c28b8a691e0ee0be465666db928312286d0c19976489c74f28f5ea02d6f8e02f661393318b4609d0e66637d9319a7c8fb23e5399f89c2d3db542eef8adfa310adb5f84e82df70d94d09891053888b3014ae27b202f7d66e15984fe42d1db6eaca1fe63ea27c016ab428733a6daa0bc8fd37e489008c8b89f4d69b634c29651bea155c4b55209150b4e1306de05f0e3a891a21fa185559f9f439e9a3c9ee9c80fabb023f2eb204b63562b9a1ef32cf5533907c61e06de1b2d38be8041e3d0642c8d0d7d9f028c9fdf7e59ec9bd970ee04f4a57e4ea7eae3c22f191bc4331361537ba3a1c9811d54dc9de25cd4263143e50471d3c47ee52bb06644fe84b886885e60359ba086aa94e9350141e22ed2bbd07161c00dd7481737f9b7dfc3ae38ec22bdb1b84ebf8906667a87042f55364b6ea51f398ae3339ec169b4c782727b74550887ed959cf8b89dfecb8ab9b24a981418f7e23a8eab884a5114e30911c81dbbb9514b2a48040d55db1d802cc4519e2a1555ca7d746a494215a59e1126ae140c7138688bc2b38dcd0d55ab05342199602f79a0a1ae2131fce33f245b50534919cf742f7e3890a420a31f383dce3961703a5f302184e78b42f35db71efad660b679d0355954a5f168191125857d29298760aed8749f7da20306d11312f98bc012300c0cd9687e99504f65cab9f1a8dc173093975181efc1f3d30a560d10b36e8c60e609f8f73fa1578d1d77c49c531c8395d2c6e2aad9224e0c52b223ab418dd737e33b3805af41957dcb1dbef36b57a8ca428a74dca508f59f6311806ca1cb2f55a0c1c07b79a75765cf7bd3800cc5e334fcbde7bcb10a6e6618a6cb096be06aafa360f0397f59ce90b7f0758c23e07ab7c2f8afb41f53265bc5106715b470f43db88745c38e4b2fb84d7edfaba33dd64ac4d25117eff1431fec4e48ff752c74bfa461dea8abc6028574445cd41364840c3aa44efb9f71fda591520a092ce6037eae3967f19b92ddda270491bfa7663424b2604e221d354ec1df45f82bcee7daed35643a8db488e0261dbf1913ed3461b45fbd822ef80ddceee9925993b9b887c754867271dd53181f7d19592a0616a784370400d7125cda161d5f5b95008f99811371d96f3ab890a7e8ee9b948956827cb631e322f97160be898f50d254bec35c6c1c1b82318196d7fc4737c1b096cfa1296530b5a73a0dac6444246a186b3618c09d4482519a4f6fb80ac59db54c61dc6fb1483850b75386607baebe7856ae2c6011a838ba75ddbd5ff465ad5113261367436a89624fa4e48fdff14b1ff8465e286a7f59c08df00e9a9600839789357ca1eee07a20e61727787d6614e1cf1de55764ec52f8e55d0b35be266b9746fb59392bbdc23aedb87368382b4fc3b3d77c8d4e32f1bfda32946cd48a19b53f07449dd7025bbfa16c2f4a690f7c5d06f3d5d3dde612c328a0fc271760930539f2d707861b6a0d204675d68c043f9abc8087b99058b6d87a75fb3b92dc74ce97e04869981157014dcf71bb0be81764ab868e798f9a61bc49c0c679437109be6bef66e3cdadfb443554a13df957fb203cf7b5ab226c60570ec72b1428d087769bf118efb3382db49f96a221dbb6172b9c744507a7b6e789f6251ea42f6f0a161110f0b6e4fe5d41a00540ced06117688078c6e537cee420b9b56450536ffe01032d431c001720643ef408a555af6c73f228e8ed92186fd3ff86cf17fe099a055c86e0ddf718fbb62f31222b9cd3daec9b84b3d08eef4c0d6aa605f247e3de7da9feac5eee5612e302ea2ee2b5d3ff3639febba66c7fbe21c236d063974d12d0d1032e7a22c97594b0de425e31108d7908a891106f77a70cdafa7d8a683bbb95dee142f7f7b275fc174c453123be9b5c998515ac9415c5dfe163ed30d41fd54bc65fe63c0bbe827f8938aa68d2e73ab2463343fd664f7b5e6c44d1ba87235e01d7c12eb9bbf97ecd3114d48a6fcde107101d048ab91272d645378f80cd703f6dae092a86facaa068eaa4beadf4f1c3b8d96d8d0cc2772fdee887f18806a211ae3821a23c15ed662e3e5619a884bd7859372bfde0608278cab39eac137af354b8d5ce989a25da79173775e73ab6ac81e0a388e702863fd36183ec9126913a24fe02beebf74b08418ba24f25e5e38303c6c3f81716ce382690d30184c4e3496b787bb6909a96e6909438f9af5dc9bc2ee1eec65a836685b26af1cc13f0749cb7c47451d1bcde21b294c55e62a5b5a80f7f7d5b7e812af972502ebba929bb3d73da63ee12ecbeffd5773c10ae4630406cdc4fac33b4221e81bb20756fc1c965ec64a52d3aca08c05c9b94d22b5dceb6be1a925f8acf1262c1f9332c407756e49c78f758869c9c1013c0a5c6e29b78e4d4eaf43c82ba116c86fa29b12e022efeb02fa840514aaacdbb553389c5fae001d25e95fddcc4a8863474f5696a42890c34045a401ba1288e37086155c077c9822ef12d2ad630411d546f3c462a06a9c0b292f1943fdbf0e3818376c4ab7187a8a2b566d99423b63f390b31169f8945e18416f40714172dfe9c5584ebb6da645fbd6da1549422b2f6ca802af8019d6763b18b68df9451ac523be1ac13e7b0d45f7953492832609c1a3f1d3acb50aa998425a96e19aa5ce73ddc753a5d9e6efdaa63bdc91f948f6c6d11a7ae1c74459353114def6e26667d97b3328962c390e246eee51d363daa41bfdd2796026c83998a5c9cfbd5478271985ee935785d7435f241260e0d051ab261e0052482f7c6ab5e30ab3ada788e78a3dc0032d41a00e959b0f662fc3db79a261c27aa05445d1e3e03aa1fc4b798ce27437589c9e3da106a1354215edad4b3ab548c4ff0e68df808ffccfa57a1d10af1763f13faf42f086d799c007ea0f24320b26a0b785cb2139946ead70915aa112c6d77515acf1446ce3acb32e1e774a996c94ff430ff31ddc918833c49eeb9fd2c1df2060232c849e94465045fd22a917fc3cfce3d3a78eaf94d8c02352f7d78ed95e15c60a1342d9d4ae9a1853068851ddebf86bf1281a86922ef6459aa2b660d014a915d6a4df1b235000439f18cec3002a50e9d63483daa1b6346fef31bdbf4449285f8b8123ba8f9c9e86a66727bf3e88d94eea208a1b9cca51410e9b41a97d92c15d2d93807082a70577e9e9aacfa5f0c859295e366d5ce5613adb63687e6c1a109c5630313dc589609aa83c9fb90108691da413aceace30abca7fb76e4d76c0a53328c5f72dce3e4097d11c34d81fbaff041fd132db89d21dc61c95bb00e85f5f3c1633cb3e5e7ecd8b3ddbe30559152d0cb9d48207ad2851b5e831002e0af2a95c4a8b8b3fcba35ae127a3fd7419b5a483018ec88fc7c3609442bd30e12f34a8479beb2219dbea4559668d5bca1e8d6f7fbe9f715b1a43ee0c5ac5e67117353ab4d9986e155c6d433f88c5d22209d2c42a2fac1a1b34dadefa88badef2821aeb8f64e3797b6fd649b795f9f260b018f5dd6a34196515267e382c75da0587922eb334d9fb3156795c4a89056212c4f77389a186c8b285619ee7dd51c32503ce86f5933783a55caeb9c514807e6551e57b366590c8d6069547b412d05625a89460eef5e873d1fd2e107b1c2bdd8c4dc808d4af937ada3881ece720b8a6719922e740a42e67cdeaf001e1a195381dc262ffb382e817ac79007b1804cabd583cb2b1cc4a5adb243def3e3f62346bb577cef2b7c52a0b1b3c9b49d5ff385215d80af453c5f214a02988cb4aa467ef3c08d0eb2d13bc25b787885bd7b4079f21a294a31c71020c5508ce720d84a55f5206167849a7f774ff9e9031e22b289894012933e857b34aaf618420db1c31d2", &(0x7f0000000040)=""/127}, 0x20) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r7}, 0x18) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000c40)={0xc}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x8}}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x5, '\x00', r8, r0, 0x4, 0x4}, 0x48) write$smackfs_labels_list(r0, &(0x7f0000000000)={[{}, {'..'}, {'*&[\x06/%.$i%'}, {'}:-\x8b:'}, {}, {'$:%:{{'}, {}, {'}*\''}, {}]}, 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800480}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x5) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x23000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, &(0x7f00000000c0)='GPL\x00', 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) socket(0x28, 0x6, 0x78) 00:11:21 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x7a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a, 0x3, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004c44) (rerun: 64) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0xfffffffa, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x100, '\x00', 0x0, r0, 0x4, 0x3, 0x4}, 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00'}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%d \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x8, 0x10001, 0x4000000, 0x1, r1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x11, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb28b, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000840)=""/170, 0x40f00, 0xa, '\x00', r3, 0x37, r0, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x7, &(0x7f0000000b80)=[r5, r1, r6, r0, 0x1, r1, r0], &(0x7f0000000bc0)=[{0x5, 0x2, 0xd, 0x9}, {0x5, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xc, 0xa}, {0x3, 0x3, 0xa, 0xb}, {0x4, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x800}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000f00)="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", &(0x7f0000000040)=""/127}, 0x20) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r7}, 0x18) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000c40)={0xc}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x111, 0x8}}, 0x20) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x5, '\x00', r8, r0, 0x4, 0x4}, 0x48) write$smackfs_labels_list(r0, &(0x7f0000000000)={[{}, {'..'}, {'*&[\x06/%.$i%'}, {'}:-\x8b:'}, {}, {'$:%:{{'}, {}, {'}*\''}, {}]}, 0x24) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800480}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001600100033bd0500fcdb052500000000f6597c321bf1cd0772cfd70ea8f9ae8f6cee02b9e8e06067d79b670d0261defb8435541499b2970cf936d0a15cf0f30ab97c55a0383ea6ac35760fd6c69aab6cdd169599885f290a37a65a2f459ca06308383102bc999726dded2a34d7b84a64bcfaa38cd6c6e180a548b2a1e832f0dba4574863f63e1726dc3517230bb15a88f899fa257a7098529298c7bc30e2895e1f248b1be85710492280f7726c113e5dc36f658ab30965e6ad89b07c36a22c717d8eadf5abca2c53c094c53e53c842d86564d6e9d45dcfaa7ef1b1aef8968f5b456453d397a4abf972288bc06c9b3e0cbdca8894b718b2428cc57e224fc7d235e57433f07e247d2a3a9b1a8feb788a7484b16d186370ef49abe89cebb7cb1747a9bc99b787d61623c78e08b1c81053ab85b350ae00c2ba1b2585bf3210d096580f6e229390c005e3b1cdb3d2a2a36b098a7f383a4f5bf18d0100000000000000bc090449656e2e94b10d4b48d337c25059d5b39cb2fa320415f9cc19e239c414abe987c2a90e7d2f20736d93169f85afc5d54729945fe4066755e287d2ba2d2ecf8d2f23228dff0352d7d1b950463f9b107fc20e6f21ccc8d9e666a75d9f599adfe39166d1aab2792e652d17b9cf4d93c749670a0000000000005aa39fbe6574a40514db1803ed858fc68c1e4f219f7e"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x5) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socket(0x28, 0x6, 0x78) 00:11:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0xbf, &(0x7f0000000100)=""/191, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdbd) 00:11:21 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="f6f7a66aa92f30bc3c69545313080d94dcf307c8861b3953fa3d0faecf7e5d238248fd9d666b", &(0x7f0000000040)=""/228}, 0x20) 00:11:21 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:21 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x28, 0x6, 0x78) 00:11:21 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdbd) 00:11:22 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x6, 0x78) 00:11:22 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdbd) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdbd) (async) 00:11:22 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="f6f7a66aa92f30bc3c69545313080d94dcf307c8861b3953fa3d0faecf7e5d238248fd9d666b", &(0x7f0000000040)=""/228}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="f6f7a66aa92f30bc3c69545313080d94dcf307c8861b3953fa3d0faecf7e5d238248fd9d666b", &(0x7f0000000040)=""/228}, 0x20) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff40) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x55}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3efbd49e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 00:11:22 executing program 4: socket(0x0, 0x6, 0x78) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="f6f7a66aa92f30bc3c69545313080d94dcf307c8861b3953fa3d0faecf7e5d238248fd9d666b", &(0x7f0000000040)=""/228}, 0x20) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff40) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x55}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3efbd49e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) 00:11:22 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:22 executing program 4: socket(0x0, 0x6, 0x78) 00:11:22 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff40) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x55}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3efbd49e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xffffffffffffff40) (async) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x55}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3efbd49e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) (async) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x1, 0x2, 0x9}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x304, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:22 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) geteuid() (async) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpgid(0x0) (async) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") (async) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x90) 00:11:22 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:22 executing program 4: socket(0x0, 0x6, 0x78) 00:11:22 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x304, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x304, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xf, &(0x7f0000000000)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 00:11:22 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x304, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:22 executing program 4: socket(0x28, 0x0, 0x78) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) (async) r1 = socket(0x8, 0x80000, 0x80000001) (async) r2 = geteuid() (async) r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) (async) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:22 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xe, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x1, 0x4}], 0x10, 0x3ff}, 0x90) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (rerun: 32) 00:11:22 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0xa207, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:22 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:22 executing program 4: socket(0x28, 0x0, 0x0) 00:11:22 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdc7) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000003946ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702400014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000183600000200000000000000000000e917010000202070250000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009f91000000000000b7020000020000008500000085000000b70000000001000095000000000000000800"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', r0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r1], &(0x7f0000000200)=[{0x3, 0x5, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x90) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 4: socket(0x0, 0x0, 0x0) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xe, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x1, 0x4}], 0x10, 0x3ff}, 0x90) 00:11:23 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdc7) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdc7) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000003946ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702400014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000183600000200000000000000000000e917010000202070250000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009f91000000000000b7020000020000008500000085000000b70000000001000095000000000000000800"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', r0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r1], &(0x7f0000000200)=[{0x3, 0x5, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x90) 00:11:23 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x307a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdc7) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000003946ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702400014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000183600000200000000000000000000e917010000202070250000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009f91000000000000b7020000020000008500000085000000b70000000001000095000000000000000800"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', r0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r1], &(0x7f0000000200)=[{0x3, 0x5, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffdc7) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000003946ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702400014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000183600000200000000000000000000e917010000202070250000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009f91000000000000b7020000020000008500000085000000b70000000001000095000000000000000800"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', r0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r1], &(0x7f0000000200)=[{0x3, 0x5, 0x0, 0x6}, {0x5, 0x1, 0xd, 0x2}], 0x10, 0x2}, 0x90) (async) 00:11:23 executing program 4: socket(0x0, 0x0, 0x0) 00:11:23 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) 00:11:23 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x12, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:23 executing program 4: socket(0x0, 0x0, 0x0) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%p \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xe, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x1, 0x4}], 0x10, 0x3ff}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)='%p \x00'}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xe, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xd, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r1, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x5, 0x1, 0x4}], 0x10, 0x3ff}, 0x90) (async) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x13, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 00:11:23 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x7a3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:23 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xff9e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%p \x00'}, 0x20) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x15, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:23 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x16, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xff9e) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xff9e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%p \x00'}, 0x20) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x17, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 00:11:23 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:23 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xff9e) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%p \x00'}, 0x20) 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:23 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0xf, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:23 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:23 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x19, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x46, 0x0, 0x0, 0x20900, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x6, 0x1}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x1, 0x1, 0x9}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x1}, 0x90) 00:11:24 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0xf, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) syz_clone(0x30000, &(0x7f00000006c0)="7dae435726f749b3e9ae9926865b52b72998261e7194191e44aaf8c4b8a83ef28ab00fc392c85d7b45289eeb227030e45c8ed64797f2a580505b4b2628461b461179de6c7f4248d225a5fdb7928a0df40f5c1d8b19c5ffd9a3ba3d1fa4d7f29633b2a8c3d70d024d89801a15a2418d87ebe4ecae65858dd73de09abe56c544cf0844f56fba7c8a92ac94bf29f1f0983970a827078a924afd28c3cb5473ec0301695820734e254fbb23157fc57418379aee965f", 0xb3, &(0x7f0000000300), &(0x7f0000000780), &(0x7f00000007c0)="a562d333f6421d5536278d851f6fe704b4baec266921b0d900c81f716532ed099ee2a9794ec82e644323552342490fb8cef99999059b") 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x46, 0x0, 0x0, 0x20900, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x6, 0x1}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x1, 0x1, 0x9}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x1}, 0x90) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x46, 0x0, 0x0, 0x20900, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x6, 0x1}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x1, 0x1, 0x9}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x1}, 0x90) (async) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1b, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0xf, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0xf, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x46, 0x0, 0x0, 0x20900, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x6, 0x1}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x1, 0x1, 0x9}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x1}, 0x90) 00:11:24 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) 00:11:24 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpgid(0x0) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getitimer(0x0, &(0x7f0000000000)) r0 = fsmount(0xffffffffffffffff, 0x0, 0xba5f52082f2ae9dc) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x22, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @tail_call, @jmp={0x5, 0x0, 0x9, 0x3, 0x2, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @exit, @call={0x85, 0x0, 0x0, 0x3a}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000200)='GPL\x00', 0x9, 0xa2, &(0x7f0000000240)=""/162, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x3052d, r1, 0x5, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000400)=[{0x5, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x8, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x10, 0xa}, {0x4, 0x2, 0x10, 0x8}], 0x10, 0x2}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) 00:11:24 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) getitimer(0x0, &(0x7f0000000000)) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0xba5f52082f2ae9dc) (async) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x22, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @tail_call, @jmp={0x5, 0x0, 0x9, 0x3, 0x2, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @exit, @call={0x85, 0x0, 0x0, 0x3a}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000200)='GPL\x00', 0x9, 0xa2, &(0x7f0000000240)=""/162, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x3052d, r1, 0x5, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000400)=[{0x5, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x8, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x10, 0xa}, {0x4, 0x2, 0x10, 0x8}], 0x10, 0x2}, 0x90) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) 00:11:24 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) getitimer(0x0, &(0x7f0000000000)) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0xba5f52082f2ae9dc) (async) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r1, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x22, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @tail_call, @jmp={0x5, 0x0, 0x9, 0x3, 0x2, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @exit, @call={0x85, 0x0, 0x0, 0x3a}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000200)='GPL\x00', 0x9, 0xa2, &(0x7f0000000240)=""/162, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x3052d, r1, 0x5, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000400)=[{0x5, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x8, 0x1}, {0x0, 0x2, 0x0, 0x2}, {0x3, 0x5, 0x10, 0xa}, {0x4, 0x2, 0x10, 0x8}], 0x10, 0x2}, 0x90) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x21, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000200)}, 0xfffffe6f) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffff9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000040)={@ifindex=r5, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x22, 0x0, 0x101, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xa, &(0x7f0000000840)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x80, 0xb9, &(0x7f0000000400)=""/185, 0x40f00, 0x1c, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r8, r0, r4, r2, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x6, 0xb}, {0x1, 0x2, 0x5, 0x5}, {0x4, 0x3, 0x6, 0xb}, {0x2, 0x5, 0x7, 0xa}]}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:24 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x170bfcf02fb47785) 00:11:24 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:24 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) process_vm_writev(r4, 0xfffffffffffffffe, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x3, 0x0) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x170bfcf02fb47785) 00:11:25 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000200)}, 0xfffffe6f) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffff9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000040)={@ifindex=r5, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x22, 0x0, 0x101, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xa, &(0x7f0000000840)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x80, 0xb9, &(0x7f0000000400)=""/185, 0x40f00, 0x1c, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r8, r0, r4, r2, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x6, 0xb}, {0x1, 0x2, 0x5, 0x5}, {0x4, 0x3, 0x6, 0xb}, {0x2, 0x5, 0x7, 0xa}]}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000200)}, 0xfffffe6f) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffff9}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000040)={@ifindex=r5, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x22, 0x0, 0x101, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x3}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xa, &(0x7f0000000840)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x80, 0xb9, &(0x7f0000000400)=""/185, 0x40f00, 0x1c, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r8, r0, r4, r2, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x6, 0xb}, {0x1, 0x2, 0x5, 0x5}, {0x4, 0x3, 0x6, 0xb}, {0x2, 0x5, 0x7, 0xa}]}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x170bfcf02fb47785) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x4) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x4) 00:11:25 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) 00:11:25 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x500, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) 00:11:25 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000200)}, 0xfffffe6f) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000200)}, 0xfffffe6f) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffff9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000040)={@ifindex=r5, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000040)={@ifindex=r5, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x22, 0x0, 0x101, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1000, '\x00', r5, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xa, &(0x7f0000000840)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x80, 0xb9, &(0x7f0000000400)=""/185, 0x40f00, 0x1c, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r8, r0, r4, r2, r9], &(0x7f00000006c0)=[{0x0, 0x3, 0x6, 0xb}, {0x1, 0x2, 0x5, 0x5}, {0x4, 0x3, 0x6, 0xb}, {0x2, 0x5, 0x7, 0xa}]}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@map=r4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x600, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x4) 00:11:25 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x700, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x16, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = fsmount(r1, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x67, '\x00', r0, r3, 0x1, 0x2, 0x1}, 0x48) 00:11:25 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0xa2070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) geteuid() geteuid() 00:11:25 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x11, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x900, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x16, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = fsmount(r1, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x67, '\x00', r0, r3, 0x1, 0x2, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x16, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) fsmount(r1, 0x0, 0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x67, '\x00', r0, r3, 0x1, 0x2, 0x1}, 0x48) (async) 00:11:25 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) 00:11:25 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:25 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:25 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0xffffffffffffffff, 0x16, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = fsmount(r1, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x67, '\x00', r0, r3, 0x1, 0x2, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x16, 0x1, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) fsmount(r1, 0x0, 0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x67, '\x00', r0, r3, 0x1, 0x2, 0x1}, 0x48) (async) 00:11:25 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000f00)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x6000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r5, r6], 0x0, 0x10, 0x22}, 0x90) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:26 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) geteuid() 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:26 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000f00)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x6000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r5, r6], 0x0, 0x10, 0x22}, 0x90) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) fsmount(0xffffffffffffffff, 0x0, 0x81) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0xfffffffc}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) fsmount(0xffffffffffffffff, 0x1, 0x71) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000f00)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x6000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r5, r6], 0x0, 0x10, 0x22}, 0x90) (async) 00:11:26 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x945f}, 0x8) 00:11:26 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) (async, rerun: 32) r0 = socket(0x11, 0x3, 0x200) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) 00:11:26 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x10001, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 64) r5 = fsmount(0xffffffffffffffff, 0x1, 0x71) (rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000f00)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x6000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, r4, r5, r6], 0x0, 0x10, 0x22}, 0x90) 00:11:26 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:26 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) (async) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:28 executing program 2: syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") socket(0x8, 0x80000, 0x80000001) 00:11:28 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpgid(0x0) 00:11:28 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1500, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1600, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 2: socket(0x8, 0x80000, 0x80000001) 00:11:28 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1700, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x10001, 0x200, 0x2, 0x8, 0x1, "acc21d950102f52fd8c39287ac7016a35d96c4"}) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="a934d2edc1490fb093cef556f8a72d916bf34c2d747c43754ae83f8f837f1ce22e1d11722be2e79f6ee038c11385a6fbc42abbd36e2431f3d96e31b3378f", &(0x7f0000000040)=""/78, 0x4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 2: socket(0x0, 0x80000, 0x80000001) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="a934d2edc1490fb093cef556f8a72d916bf34c2d747c43754ae83f8f837f1ce22e1d11722be2e79f6ee038c11385a6fbc42abbd36e2431f3d96e31b3378f", &(0x7f0000000040)=""/78, 0x4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) 00:11:28 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async, rerun: 64) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x10001, 0x200, 0x2, 0x8, 0x1, "acc21d950102f52fd8c39287ac7016a35d96c4"}) (async) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1900, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="a934d2edc1490fb093cef556f8a72d916bf34c2d747c43754ae83f8f837f1ce22e1d11722be2e79f6ee038c11385a6fbc42abbd36e2431f3d96e31b3378f", &(0x7f0000000040)=""/78, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="a934d2edc1490fb093cef556f8a72d916bf34c2d747c43754ae83f8f837f1ce22e1d11722be2e79f6ee038c11385a6fbc42abbd36e2431f3d96e31b3378f", &(0x7f0000000040)=""/78, 0x4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1a00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) 00:11:28 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x10001, 0x200, 0x2, 0x8, 0x1, "acc21d950102f52fd8c39287ac7016a35d96c4"}) (async) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1b00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 2: socket(0x0, 0x80000, 0x80000001) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) 00:11:28 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1c00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) 00:11:28 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) geteuid() geteuid() 00:11:28 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x7a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) (async) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1d00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 2: socket(0x0, 0x80000, 0x80000001) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x684ac2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x5, 0x80000001, 0x0, 'queue0\x00', 0x4}) 00:11:28 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1e00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:28 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x684ac2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x5, 0x80000001, 0x0, 'queue0\x00', 0x4}) 00:11:28 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map=r0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:28 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) geteuid() 00:11:29 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x684ac2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x5, 0x80000001, 0x0, 'queue0\x00', 0x4}) 00:11:29 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map=r0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 2: socket(0x8, 0x0, 0x80000001) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map=r0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffee5) 00:11:29 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 3: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0xffff, 0x4, 0x2000, r0, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x4, 0x2e43f, 0x36b203}) 00:11:29 executing program 2: socket(0x8, 0x0, 0x0) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) 00:11:29 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffee5) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffee5) (async) 00:11:29 executing program 3: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0xffff, 0x4, 0x2000, r0, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x4, 0x2e43f, 0x36b203}) 00:11:29 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2300, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 1: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffee5) bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffee5) (async) 00:11:29 executing program 3: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0xffff, 0x4, 0x2000, r0, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x4, 0x2e43f, 0x36b203}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)='%d \x00'}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0xffff, 0x4, 0x2000, r0, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x30) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) recvfrom$rose(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x4, 0x2e43f, 0x36b203}) (async) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0xc, "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"}) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) socket(0x8, 0x80000, 0x80000001) geteuid() 00:11:29 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:29 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0xc, "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"}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:29 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map, 0x20, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:29 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map, 0x20, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map, 0x20, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:29 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0xc, "d88b1e481a9cd1e8b5471cb67d2cd7f12444c732ae4fad32a805f11e50b214f5e08a96e023d8a1b39f882769f94bf0382cdf1a820db407c8af41057c51da406e246a52588c8c722a0c17a915a4be7b430ebdaeaf1b902ec956858fb17c4d7c820ae3490477eb53c5f23aeaab38d8151f8a5ba59d89cba697d6083c69ef24ee4371055d0a8a79375087fe40ad08aeaa1fc53983b0b9b6c97eb21a9470b20a9c305e368cab4a1505236b52154169aac98d82d5f35056aba1375d9890edd22362300e6c3255dcef20d5c842d5e6d69cfe5d2049b25bdf7fce02814ba42f7cf6dcc418cd568300b2645d66b11b5f6a5c0c6dec565443fbb28548c0ecadff8c1cba27eda00bcb33d495072a8cac060ae74c45bd12261c917904bb4538fc47881a678a2b29a8d5c5e37cfdad7c1d7e6f7cb07791ba98598aaedd8de398734b0d2c2de11a88bc948e39f900b67ff9217818a84ea296526828b62de654b30a20e156a287b782a6f43ec53e8a5fd6e1d3511aa10bb9c7f5d5d9982fb3de0fd76edd677d23c08a5171671c09b46578b14f191b0ce99bb9b45bbcfcc61426246370a75423c15eb9f52f1d6e9e58f6a2b9f38e15b18a66b1545f1e8601d6100ddb4dd5342bdab1e8431adf46865f2c245e383354197086f547baff218bc9556025b32de667d02ce7c00857af057b3d936307fdfb90dac465e2bac4b743baf44de59e53e8fe6e"}) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:29 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xff10, 0x3, 0x1ff}) 00:11:29 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000000)={@map, 0x20, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xff10, 0x3, 0x1ff}) 00:11:30 executing program 4: process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4c081) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000700000000845b000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff18280000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xffffffff, 0x80000001}, 0x10, 0xe280, r3, 0x9, &(0x7f0000000780)=[r4, 0xffffffffffffffff, r5, r6, 0x1, r7, r1], &(0x7f00000007c0)=[{0x3, 0x5, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x4, 0x1, 0xf}, {0x3, 0x5, 0xc, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x3, 0x5, 0x5, 0xa}, {0x2, 0x1, 0xc, 0x8}, {0x0, 0x1, 0xa, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x90) 00:11:30 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0xa207, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 2: syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") socket(0x8, 0x80000, 0x80000001) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 1: ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xff10, 0x3, 0x1ff}) 00:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4c081) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000700000000845b000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff18280000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xffffffff, 0x80000001}, 0x10, 0xe280, r3, 0x9, &(0x7f0000000780)=[r4, 0xffffffffffffffff, r5, r6, 0x1, r7, r1], &(0x7f00000007c0)=[{0x3, 0x5, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x4, 0x1, 0xf}, {0x3, 0x5, 0xc, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x3, 0x5, 0x5, 0xa}, {0x2, 0x1, 0xc, 0x8}, {0x0, 0x1, 0xa, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x90) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4c081) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4c081) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x3, 0x0, 0x6d}, 0x10, 0x0, r3, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000700000000845b000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff18280000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xffffffff, 0x80000001}, 0x10, 0xe280, r3, 0x9, &(0x7f0000000780)=[r4, 0xffffffffffffffff, r5, r6, 0x1, r7, r1], &(0x7f00000007c0)=[{0x3, 0x5, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x4, 0x1, 0xf}, {0x3, 0x5, 0xc, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x3, 0x5, 0x5, 0xa}, {0x2, 0x1, 0xc, 0x8}, {0x0, 0x1, 0xa, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000700000000845b000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff18280000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f00)=""/4096, 0x0, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xffffffff, 0x80000001}, 0x10, 0xe280, r3, 0x9, &(0x7f0000000780)=[r4, 0xffffffffffffffff, r5, r6, 0x1, r7, r1], &(0x7f00000007c0)=[{0x3, 0x5, 0xf, 0x8}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x4, 0x1, 0xf}, {0x3, 0x5, 0xc, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x3, 0x5, 0x5, 0xa}, {0x2, 0x1, 0xc, 0x8}, {0x0, 0x1, 0xa, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x90) 00:11:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0xa, 0x1, 0x2}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, r2, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x307a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 4: process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x43b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x9a, 0x200040) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 2: r0 = syz_clone(0x0, &(0x7f0000000000)="8e69f90c36677b9b40e3cf0255dd9235f2e91a14b2661e7b6ca05388063b6b9a4ccbbcb30092673677b0dfccf891ecf0ed66262b64d6db052cbd03eeeee39c95d88f4b154092c2a7acbccd3fdb1131ad9f3c268f488acc1d2e03a8a5a1d6c0afef86a82584e7d0314c23fba1892eafc3808245da19221ab15dacc5791c8a223c48c69708d7b20752c1de173a05fae757908e1e3059c367ccc6503617b3d6ff48dd8b", 0xa2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x80000001) r2 = geteuid() r3 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)=@acquire={0x230, 0x17, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@broadcast, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e22, 0x43, 0x4e24, 0x40, 0x2, 0x60, 0xae1b7ef80bee37e6, 0x2c, 0x0, r2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, 0x4e20, 0x80, 0x4e23, 0x40, 0x2, 0x80, 0x20, 0x1d, 0x0, r3}, {0x200, 0x80f2, 0xffff, 0x4, 0xffff, 0x3, 0x9, 0x2af2}, {0x7, 0x6, 0x2, 0x9}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x1, 0x3}, 0xfff, 0x8, 0x8, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x80000000}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xe0, 0x54, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x4d5, 0x2b}, @in6=@mcast2, {0x8001, 0x80000000, 0x1, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x97c8, 0x7}, {0x3ff, 0x9, 0x100}, 0x70bd29, 0x3503, 0x2, 0x1, 0x3, 0x40}}, @mark={0xc, 0x15, {0x350759, 0xff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, 0x0) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x43b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x9a, 0x200040) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000200)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:11:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0xa, 0x1, 0x2}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, r2, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0xa, 0x1, 0x2}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, r2, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x43b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x9a, 0x200040) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000200)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:11:30 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 4: process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x14, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0xa, 0x1, 0x2}) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r1, 0x0, r2, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x14, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x3}) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x4ab, 0xffffffffffffffff, 0x3, 0x6}) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x1, 0x6, 0x1000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_setup(0x1f, &(0x7f0000000000)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x68, "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"}) 00:11:30 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:30 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x7a3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x14, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x11000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:30 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x3}) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x4ab, 0xffffffffffffffff, 0x3, 0x6}) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x1, 0x6, 0x1000}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_setup(0x1f, &(0x7f0000000000)) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x68, "ca3d92a02a5e8f693c0b7ae9889e18d63d82681089fbec5aa852d78cda261564a6cbb43112a4b2c35b2bd3045487ffac0de1e7e1e57cab5d7b99a88c9cfee9c92e646d1f7beeab08f5216857157f263201559c113d97b792f641402c450167d5431d045d2711482ed9f0df031097e8896d14404d32adbf4421d2208580b392907cf5ac5294d5d1cfac1526eb178b21e4547f7131642ae540d876130c43ce3e8daf5c2e44f8274a2f67cff957ca20a0f2cce6cdfa035a5512acd5dc9be6b43a8105c20df3b5ba9c46be9287e6268674fc4dc40378947210713c55004078767ab9e8bcfa40daefd3367403acbaf7b18c890cdd73e7d914eb03d445a1cc23d4a8ab92fa53ae0ac34af5013c949874aabbe761adff4fad407c12b394fa272e4e55618f11ee8de29ea72266b677493566953e2bdf4c793e0e58e8dd99166ca5839b752f2e908832a66a201176040f55c557f90e2f5464c7d40bd5fb2b0a8366bc295ae56396a32309850e91e5296f909b3bf97e4d52814c492bf562284cc10a4292308ca0969b5cfa9134462fd72c152e24550224e2c176b4e53233da1050027613d00f3d256a59053d00420ff352eb796558017f2c6d12ead24a0f6325393dfbf97c7f04c66d24f4560e2a4116e8942ffc8a9c6aa58d2fa48433d93eacd4ddd6f3c76d85403d42efb4bbce9274bb7f89e38d7609519d78a80ece80c6c3d6f83ea6e1"}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x3}) (async) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x4ab, 0xffffffffffffffff, 0x3, 0x6}) (async) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$TIOCCONS(r2, 0x541d) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x1, 0x6, 0x1000}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) io_setup(0x1f, &(0x7f0000000000)) (async) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x68, "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"}) (async) 00:11:30 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:30 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:31 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa8f7, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%p \x00'}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x1, 0x3, 0x5, 0x4, 0xffffffffffffffc0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x9, 0xbf, &(0x7f00000004c0)=""/191, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xa, 0x80000000, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, r5], &(0x7f0000000800)=[{0x5, 0x3, 0x10, 0x9}], 0x10, 0x171}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000240)={@map=r6, 0x32, 0x30, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x6, "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"}) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x12000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, 0x0) (async) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0x3}) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x4ab, 0xffffffffffffffff, 0x3, 0x6}) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) (async) ioctl$TIOCCONS(r2, 0x541d) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x1, 0x6, 0x1000}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_setup(0x1f, &(0x7f0000000000)) (async) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)={0x68, "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"}) 00:11:31 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="09055674d421a1665d782b84ee9e73b4f50fff1f3bc36f5e3f18bc9672dee19ce2e0fa9605f8495eaed9a479efd45ebe2463cf3fbaf512dab6afac92e3b0437365ef96bad77941556504a91f58dc66a639999fbb332a5ab9bef37ee22b0f7848dc6f42eb01f65f3f8022dbef3e2bc84a66991261131cfc0dc057ea4af9990e60d3fba9cf6b0ae2fa") process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x13000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa8f7, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%p \x00'}, 0x20) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x1, 0x3, 0x5, 0x4, 0xffffffffffffffc0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x9, 0xbf, &(0x7f00000004c0)=""/191, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xa, 0x80000000, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, r5], &(0x7f0000000800)=[{0x5, 0x3, 0x10, 0x9}], 0x10, 0x171}, 0x90) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000240)={@map=r6, 0x32, 0x30, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x6, "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"}) 00:11:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x14000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa8f7, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%p \x00'}, 0x20) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x48) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x1, 0x3, 0x5, 0x4, 0xffffffffffffffc0, 0x9}], &(0x7f0000000480)='GPL\x00', 0x9, 0xbf, &(0x7f00000004c0)=""/191, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xa, 0x80000000, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, r5], &(0x7f0000000800)=[{0x5, 0x3, 0x10, 0x9}], 0x10, 0x171}, 0x90) (async, rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000240)={@map=r6, 0x32, 0x30, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x6, "75ecbc8dc024703bfc956de4c0506eb4d5262304773c767bb0f2270020c52a949eca1c55cbf21198d60839f6010cfc830f90c51eaac8f29c8c85a95313350197d2fff961905901a2d98b11438b3059557287f57359b93788c070470f875e8c29440bb3b7d88259b9f853db05d23c2543591695f4ee17a2b9a1d40824a91ff178eff9b6e9bb7c99c863d017385d9a1dcf9c2d231611ddd1a4e356b28b0a5c44eb012d6d6b6d7685c3dc0591ba6ab990f6ab56666a823e7be8287837fe2e0187e638dc09b9d175581b50287d05e1a4b79e515fea9e275377de49f9057c426e4bff4bd3904e00c9bf37ec904e4e7cb98307d50451b0e5fcc15df14236dde5638053545a7518a069583411f644aabe246cff94dc1f302d179e201e75b5245d053ddb8681a963d45125b41e6ccf4fdb55d6f52743baa5a257ac9f80cb000260f6dbd55ad20dba94fe849bf68bb8ddffa393b450bd846523cf35a25ea001a617f13d6b78c1e97b08b82052fc5ef7aca551619ec572478b86090a052ef54bfde5576ae16c9bbfe21c058048731fdae4cd23198102891b7a105687a48e9f00cf097ac8f1d13a2370c8db14f69a3ac835ffb6594f9e7feabc7b590e6f8819eb7bf2a8fe393bc957fcbbe3c84f48f658e32aee8e1c1cb2b88e785a695989b6fb0859880bf259161086cee200f041b5cb99f0d01d38adcbaf00ce91261102a4185452875e57"}) 00:11:31 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x0, 0x4}) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x15000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000840}, 0x40800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x7fffffff, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004040) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1001d}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000801}, 0xc0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0xf1, 0x0, &(0x7f0000000180)="8b5f451e377a712063957be07cd59a5a860c9ac65112fd3e13df38d0c3b42e3eb6ff3d736599d24bd7cb60e1b3cd5fd4b9f698db2cb6429a37b59b9b574532d8b157023222ac329f2b0e9653a851d24cdffa84d40b813cc5f5dfb43db96c766427d3c4964508edf2774d6328e762d4611ad87000b1c8463ad23f6cf2d4e6a53417284e8e53a719083d09c718cf86b371ead91f5ececb777b833e70d86d10e1f063b0f8a1dcf75231a00cdc9047df0300e76b5bb24690f2277e403a7c224e8ceee8d9215fe50a15031a1012e388c2b17981922d766ca9722706a5c51a0bd3d0ef127c0044d3abb6b1ce3dd0fb4c1fc0f2d5"}) 00:11:31 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x16000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000840}, 0x40800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x7fffffff, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004040) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1001d}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000801}, 0xc0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0xf1, 0x0, &(0x7f0000000180)="8b5f451e377a712063957be07cd59a5a860c9ac65112fd3e13df38d0c3b42e3eb6ff3d736599d24bd7cb60e1b3cd5fd4b9f698db2cb6429a37b59b9b574532d8b157023222ac329f2b0e9653a851d24cdffa84d40b813cc5f5dfb43db96c766427d3c4964508edf2774d6328e762d4611ad87000b1c8463ad23f6cf2d4e6a53417284e8e53a719083d09c718cf86b371ead91f5ececb777b833e70d86d10e1f063b0f8a1dcf75231a00cdc9047df0300e76b5bb24690f2277e403a7c224e8ceee8d9215fe50a15031a1012e388c2b17981922d766ca9722706a5c51a0bd3d0ef127c0044d3abb6b1ce3dd0fb4c1fc0f2d5"}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000840}, 0x40800) (async) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x7fffffff, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004040) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1001d}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000801}, 0xc0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0xf1, 0x0, &(0x7f0000000180)="8b5f451e377a712063957be07cd59a5a860c9ac65112fd3e13df38d0c3b42e3eb6ff3d736599d24bd7cb60e1b3cd5fd4b9f698db2cb6429a37b59b9b574532d8b157023222ac329f2b0e9653a851d24cdffa84d40b813cc5f5dfb43db96c766427d3c4964508edf2774d6328e762d4611ad87000b1c8463ad23f6cf2d4e6a53417284e8e53a719083d09c718cf86b371ead91f5ececb777b833e70d86d10e1f063b0f8a1dcf75231a00cdc9047df0300e76b5bb24690f2277e403a7c224e8ceee8d9215fe50a15031a1012e388c2b17981922d766ca9722706a5c51a0bd3d0ef127c0044d3abb6b1ce3dd0fb4c1fc0f2d5"}) (async) 00:11:31 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/98, 0x62}], 0x6, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 64) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x17000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000840}, 0x40800) bpf$BPF_PROG_QUERY(0x8, 0x0, 0x8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x7fffffff, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20004040) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1001d}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000801}, 0xc0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000140)=[@clear_death], 0xf1, 0x0, &(0x7f0000000180)="8b5f451e377a712063957be07cd59a5a860c9ac65112fd3e13df38d0c3b42e3eb6ff3d736599d24bd7cb60e1b3cd5fd4b9f698db2cb6429a37b59b9b574532d8b157023222ac329f2b0e9653a851d24cdffa84d40b813cc5f5dfb43db96c766427d3c4964508edf2774d6328e762d4611ad87000b1c8463ad23f6cf2d4e6a53417284e8e53a719083d09c718cf86b371ead91f5ececb777b833e70d86d10e1f063b0f8a1dcf75231a00cdc9047df0300e76b5bb24690f2277e403a7c224e8ceee8d9215fe50a15031a1012e388c2b17981922d766ca9722706a5c51a0bd3d0ef127c0044d3abb6b1ce3dd0fb4c1fc0f2d5"}) 00:11:31 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x18000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x8, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) 00:11:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x19000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x8, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) 00:11:31 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:31 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1a000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:31 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup=0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x8, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) 00:11:32 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:32 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1b000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x424c81) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xf, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x6, 0x0, 0xb, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4422}}, @call={0x85, 0x0, 0x0, 0x48}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1f, 0x12, &(0x7f00000000c0)=""/18, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x8, 0x4b96}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x9}, {0x3, 0x3, 0xb, 0xa}], 0x10, 0x400}, 0x90) 00:11:32 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x3f, 0x741, 0x9, 0x5, 0x4c2, 0x4}, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:32 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xf, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x6, 0x0, 0xb, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4422}}, @call={0x85, 0x0, 0x0, 0x48}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1f, 0x12, &(0x7f00000000c0)=""/18, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x8, 0x4b96}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x9}, {0x3, 0x3, 0xb, 0xa}], 0x10, 0x400}, 0x90) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1c000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/172, 0xac}], 0x5, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000040)={0xcb0, 0x0, 0xffffffff7fffffff, 0x4, 0x59, 0x0, 0x5, 0x8000000000000001}, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:32 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xf, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @alu={0x4, 0x1, 0x6, 0x0, 0xb, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@pointer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4422}}, @call={0x85, 0x0, 0x0, 0x48}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000080)='syzkaller\x00', 0x1f, 0x12, &(0x7f00000000c0)=""/18, 0x40f00, 0x10, '\x00', 0x0, 0x23, r1, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x8, 0x4b96}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x9}, {0x3, 0x3, 0xb, 0xa}], 0x10, 0x400}, 0x90) 00:11:32 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1d000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/2, 0x2}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x44, 0x26, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x4, 0xfff1}, {0x8, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0xd7cf, 0x2, 0x4, 0x1, 0x7, 0x8, 0xd34, 0x80000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:32 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xfffffffffffffffe, 0x1, 0x8e, 0x8, 0x4, 0x3}, &(0x7f0000000040)={0x30, 0x0, 0x9, 0x3fc0, 0x4, 0xa7d9, 0x2, 0xc9d}, &(0x7f0000000080)={0x7fff, 0x8000000000000001, 0xa9, 0x67b, 0x9779, 0x8, 0x5, 0x1fc0000000000000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x410040, 0x0) write$6lowpan_control(r0, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%p \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r2, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) io_pgetevents(r2, 0x1, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x7fffffff]}, 0x8}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x40a01, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000500)={0x3, 0x4, 0x977, 0x3}) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1e000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) r0 = socket(0x11, 0x3, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0xa2070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xfffffffffffffffe, 0x1, 0x8e, 0x8, 0x4, 0x3}, &(0x7f0000000040)={0x30, 0x0, 0x9, 0x3fc0, 0x4, 0xa7d9, 0x2, 0xc9d}, &(0x7f0000000080)={0x7fff, 0x8000000000000001, 0xa9, 0x67b, 0x9779, 0x8, 0x5, 0x1fc0000000000000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x410040, 0x0) write$6lowpan_control(r0, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%p \x00'}, 0x20) (rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r2, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) io_pgetevents(r2, 0x1, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x7fffffff]}, 0x8}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x40a01, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000500)={0x3, 0x4, 0x977, 0x3}) 00:11:32 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x21000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:32 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:32 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xfffffffffffffffe, 0x1, 0x8e, 0x8, 0x4, 0x3}, &(0x7f0000000040)={0x30, 0x0, 0x9, 0x3fc0, 0x4, 0xa7d9, 0x2, 0xc9d}, &(0x7f0000000080)={0x7fff, 0x8000000000000001, 0xa9, 0x67b, 0x9779, 0x8, 0x5, 0x1fc0000000000000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x410040, 0x0) write$6lowpan_control(r0, &(0x7f0000000300)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%p \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) (async) io_setup(0x3b20, &(0x7f00000019c0)=0x0) io_getevents(r2, 0x0, 0x1, &(0x7f0000001a00)=[{}], &(0x7f0000001b40)={0x77359400}) (async) io_pgetevents(r2, 0x1, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x7fffffff]}, 0x8}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x40a01, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000500)={0x3, 0x4, 0x977, 0x3}) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x22000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 2: bpf$BPF_PROG_QUERY(0x8, 0x0, 0xfffffffffffffecf) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:32 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x23000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:32 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {0x0}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:33 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:33 executing program 2: r0 = socket(0x11, 0x3, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:33 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:11:33 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:33 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {0x0}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:33 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xd, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 00:11:33 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) 00:11:33 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xd, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 00:11:33 executing program 2: r0 = socket(0x0, 0x3, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:33 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xd, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 00:11:33 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:33 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)}, {0x0}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:34 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:11:34 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) 00:11:34 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 00:11:34 executing program 2: r0 = socket(0x0, 0x3, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:34 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:34 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:34 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 00:11:34 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:34 executing program 2: r0 = socket(0x0, 0x3, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:34 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 00:11:34 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:34 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) (async) fsmount(0xffffffffffffffff, 0x0, 0x5) (async) fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) (async) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:35 executing program 2: r0 = socket(0x11, 0x0, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x3}, 0x48) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/77, 0x4d}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x4, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) 00:11:35 executing program 2: r0 = socket(0x11, 0x0, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x3}, 0x48) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/81, 0x51}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x3}, 0x48) 00:11:35 executing program 2: r0 = socket(0x11, 0x0, 0x200) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x1, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x9, 0x3}, 0x48) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x1, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x1, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa, 0x3}, 0x48) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:35 executing program 2: socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xb, 0x3}, 0x48) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc, 0x3}, 0x48) 00:11:35 executing program 2: socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xd, 0x3}, 0x48) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x4}, 0x18) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe, 0x3}, 0x48) 00:11:35 executing program 2: socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x7a2, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x4}, 0x18) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x48) 00:11:35 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000200)) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3}, 0x48) 00:11:35 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x4}, 0x18) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x11, 0x3}, 0x48) 00:11:35 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x12, 0x3}, 0x48) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) 00:11:35 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x13, 0x3}, 0x48) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) 00:11:35 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:35 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:35 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x14, 0x3}, 0x48) 00:11:35 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}], 0x1, 0x0) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8001, 0x8, 0xcad7, 0x295, 0x1, 0xa8000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x94840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4c5, 0x9, 0xa04, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48) 00:11:36 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x15, 0x3}, 0x48) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8001, 0x8, 0xcad7, 0x295, 0x1, 0xa8000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x94840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4c5, 0x9, 0xa04, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48) 00:11:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x16, 0x3}, 0x48) 00:11:36 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680), 0x0, 0x0) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8001, 0x8, 0xcad7, 0x295, 0x1, 0xa8000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x7}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x94840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4c5, 0x9, 0xa04, r0, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x2}, 0x48) 00:11:36 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:36 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:36 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x17, 0x3}, 0x48) 00:11:36 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680), 0x0, 0x0) 00:11:36 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x84400, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x5c002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x7, &(0x7f0000000000)=@raw=[@generic={0x6, 0x4, 0x6, 0x1f, 0xd9}, @jmp={0x5, 0x1, 0xd, 0x3, 0x6, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @ldst={0x0, 0x3, 0x4, 0x4, 0xb, 0xfffffffffffffffc, 0x1}], &(0x7f0000000040)='GPL\x00', 0x81, 0x9b, &(0x7f0000000080)=""/155, 0xc3200, 0x77, '\x00', 0x0, 0x15, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x7ff, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1, 0x1, r2], &(0x7f0000000240), 0x10, 0x3}, 0x90) 00:11:36 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x84400, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x5c002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x7, &(0x7f0000000000)=@raw=[@generic={0x6, 0x4, 0x6, 0x1f, 0xd9}, @jmp={0x5, 0x1, 0xd, 0x3, 0x6, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @ldst={0x0, 0x3, 0x4, 0x4, 0xb, 0xfffffffffffffffc, 0x1}], &(0x7f0000000040)='GPL\x00', 0x81, 0x9b, &(0x7f0000000080)=""/155, 0xc3200, 0x77, '\x00', 0x0, 0x15, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x7ff, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1, 0x1, r2], &(0x7f0000000240), 0x10, 0x3}, 0x90) 00:11:36 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x3}, 0x48) 00:11:36 executing program 1: process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:36 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680), 0x0, 0x0) 00:11:36 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x84400, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x5c002) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x7, &(0x7f0000000000)=@raw=[@generic={0x6, 0x4, 0x6, 0x1f, 0xd9}, @jmp={0x5, 0x1, 0xd, 0x3, 0x6, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, @ldst={0x0, 0x3, 0x4, 0x4, 0xb, 0xfffffffffffffffc, 0x1}], &(0x7f0000000040)='GPL\x00', 0x81, 0x9b, &(0x7f0000000080)=""/155, 0xc3200, 0x77, '\x00', 0x0, 0x15, r0, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x4, 0x7ff, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, r1, 0x1, r2], &(0x7f0000000240), 0x10, 0x3}, 0x90) 00:11:36 executing program 1: process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:37 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 00:11:37 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x19, 0x3}, 0x48) 00:11:37 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:37 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0xa207, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:37 executing program 1: process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:37 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x7f}, 'port0\x00', 0x10, 0x100000, 0xc8, 0x4, 0x4, 0x4, 0x8001, 0x0, 0x5, 0xfd}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:37 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:37 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x7f}, 'port0\x00', 0x10, 0x100000, 0xc8, 0x4, 0x4, 0x4, 0x8001, 0x0, 0x5, 0xfd}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:37 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:37 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1a, 0x3}, 0x48) 00:11:37 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x307a00, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:37 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x3, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:38 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x7f}, 'port0\x00', 0x10, 0x100000, 0xc8, 0x4, 0x4, 0x4, 0x8001, 0x0, 0x5, 0xfd}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x7f}, 'port0\x00', 0x10, 0x100000, 0xc8, 0x4, 0x4, 0x4, 0x8001, 0x0, 0x5, 0xfd}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1b, 0x3}, 0x48) 00:11:38 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:38 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:38 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x1000, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4df}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1c, 0x3}, 0x48) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:38 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x1000, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4df}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x1000, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4df}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4) (async) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1d, 0x3}, 0x48) 00:11:38 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:38 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x1000, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4df}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x1000, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4df}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1f}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4) (async) 00:11:38 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x7a3000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:38 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1e, 0x3}, 0x48) 00:11:38 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:38 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r1, 0xffff0000, 0x86c, 0x7, 0x0, [], [0x4, 0x10001, 0x9, 0x7f], [0x80000001, 0x7f, 0x2, 0x9], [0x800, 0x7, 0x8638, 0x100000000000]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:38 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x21, 0x3}, 0x48) 00:11:38 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r1, 0xffff0000, 0x86c, 0x7, 0x0, [], [0x4, 0x10001, 0x9, 0x7f], [0x80000001, 0x7f, 0x2, 0x9], [0x800, 0x7, 0x8638, 0x100000000000]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:38 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={0x0}) 00:11:38 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x22, 0x3}, 0x48) 00:11:39 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:39 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r1, 0xffff0000, 0x86c, 0x7, 0x0, [], [0x4, 0x10001, 0x9, 0x7f], [0x80000001, 0x7f, 0x2, 0x9], [0x800, 0x7, 0x8638, 0x100000000000]}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x23, 0x3}, 0x48) 00:11:39 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x3}, 0x48) 00:11:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044003fe2b6d08630c40010000000000000008dfffff0e630cc3a64002000000000000000000"], 0xae, 0x0, &(0x7f00000000c0)="2653eeb2aa0965c09558054ff502a7caf739bbd73fab3f4f0e34116ecd8f761410e4266e9080836e300aa054feeeeab7bf9f09c8552828114561fcae800bb45b00007616d93ba8593fa0de0927ad3f9f33cbddc835f119a387b2595bb3db7ff17e9b75874f61243a29594fe878424f6975d9150975a463bc89c97f50f4c747de44bdf5676bf6565275eee17a25dec0f738840e94e499fc00f4894b200d8971a25fea85cb5746f5e11ec0542ee49f"}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x3, 0x1, 0x8, 0x1f, 0xa6, &(0x7f00000001c0)}) 00:11:39 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:39 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044003fe2b6d08630c40010000000000000008dfffff0e630cc3a64002000000000000000000"], 0xae, 0x0, &(0x7f00000000c0)="2653eeb2aa0965c09558054ff502a7caf739bbd73fab3f4f0e34116ecd8f761410e4266e9080836e300aa054feeeeab7bf9f09c8552828114561fcae800bb45b00007616d93ba8593fa0de0927ad3f9f33cbddc835f119a387b2595bb3db7ff17e9b75874f61243a29594fe878424f6975d9150975a463bc89c97f50f4c747de44bdf5676bf6565275eee17a25dec0f738840e94e499fc00f4894b200d8971a25fea85cb5746f5e11ec0542ee49f"}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x801, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x3, 0x1, 0x8, 0x1f, 0xa6, &(0x7f00000001c0)}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044003fe2b6d08630c40010000000000000008dfffff0e630cc3a64002000000000000000000"], 0xae, 0x0, &(0x7f00000000c0)="2653eeb2aa0965c09558054ff502a7caf739bbd73fab3f4f0e34116ecd8f761410e4266e9080836e300aa054feeeeab7bf9f09c8552828114561fcae800bb45b00007616d93ba8593fa0de0927ad3f9f33cbddc835f119a387b2595bb3db7ff17e9b75874f61243a29594fe878424f6975d9150975a463bc89c97f50f4c747de44bdf5676bf6565275eee17a25dec0f738840e94e499fc00f4894b200d8971a25fea85cb5746f5e11ec0542ee49f"}) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x801, 0x0) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) (async) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x3, 0x1, 0x8, 0x1f, 0xa6, &(0x7f00000001c0)}) (async) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x500, 0x3}, 0x48) 00:11:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:39 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x600, 0x3}, 0x48) 00:11:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044003fe2b6d08630c40010000000000000008dfffff0e630cc3a64002000000000000000000"], 0xae, 0x0, &(0x7f00000000c0)="2653eeb2aa0965c09558054ff502a7caf739bbd73fab3f4f0e34116ecd8f761410e4266e9080836e300aa054feeeeab7bf9f09c8552828114561fcae800bb45b00007616d93ba8593fa0de0927ad3f9f33cbddc835f119a387b2595bb3db7ff17e9b75874f61243a29594fe878424f6975d9150975a463bc89c97f50f4c747de44bdf5676bf6565275eee17a25dec0f738840e94e499fc00f4894b200d8971a25fea85cb5746f5e11ec0542ee49f"}) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x801, 0x0) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) (async) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000005c0)={0x3, 0x1, 0x8, 0x1f, 0xa6, &(0x7f00000001c0)}) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x700, 0x3}, 0x48) 00:11:39 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:39 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x900, 0x3}, 0x48) 00:11:40 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@getae={0x4c, 0x1f, 0x10, 0x70bd25, 0x25dfdbfd, {{@in6=@mcast1, 0x4d3, 0x2, 0x6c}, @in=@loopback, 0x2}, [@offload={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x14011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r3, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x52}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x19, r3, 0x8, &(0x7f0000000b00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xa, 0x1, 0xfffffb90}, 0x10, 0x26f60, r9, 0x9, &(0x7f0000000d00)=[r6, r10, r3, r11, r5, r12, r2], &(0x7f0000000d40)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}, {0x1, 0x4, 0x9, 0x9}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x7}, {0x5, 0x1, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x1, 0x8, 0x1, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xd, 0x9, 0x6, 0x100, 0x1}, @generic={0x2, 0x6, 0x0, 0x6, 0x1}, @generic={0x2, 0xf, 0x4, 0x100, 0x9ea7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x4f, &(0x7f0000000640)=""/79, 0x0, 0x17, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0xc7, 0x7f4b}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x2}, {0x0, 0x5, 0x5, 0x7}, {0x3, 0x4, 0x10, 0x3}], 0x10, 0xffff0001}, 0x90) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63f, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x28, &(0x7f0000000200)=""/40, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x200, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r5, 0xffffffffffffffff, r0, r6, r0, r0, r13], &(0x7f0000000440)=[{0x1, 0x3, 0x8, 0x3}, {0x0, 0x1, 0xa}, {0x5, 0x4, 0x0, 0x6}], 0x10, 0x8}, 0x90) 00:11:40 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:40 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa00, 0x3}, 0x48) 00:11:40 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r2 = fsmount(0xffffffffffffffff, 0x0, 0x5) r3 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1c}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x7, 0x89, &(0x7f0000000980)=""/137, 0x41100, 0x2, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x2, 0x7}], 0x10, 0x5}, 0x90) 00:11:40 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:11:40 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:40 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xb00, 0x3}, 0x48) 00:11:40 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:40 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) (rerun: 64) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) (async, rerun: 64) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@getae={0x4c, 0x1f, 0x10, 0x70bd25, 0x25dfdbfd, {{@in6=@mcast1, 0x4d3, 0x2, 0x6c}, @in=@loopback, 0x2}, [@offload={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x14011) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async, rerun: 32) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00'}, 0x18) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r3, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x52}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x19, r3, 0x8, &(0x7f0000000b00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xa, 0x1, 0xfffffb90}, 0x10, 0x26f60, r9, 0x9, &(0x7f0000000d00)=[r6, r10, r3, r11, r5, r12, r2], &(0x7f0000000d40)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}, {0x1, 0x4, 0x9, 0x9}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x7}, {0x5, 0x1, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x1, 0x8, 0x1, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xd, 0x9, 0x6, 0x100, 0x1}, @generic={0x2, 0x6, 0x0, 0x6, 0x1}, @generic={0x2, 0xf, 0x4, 0x100, 0x9ea7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x4f, &(0x7f0000000640)=""/79, 0x0, 0x17, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0xc7, 0x7f4b}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x2}, {0x0, 0x5, 0x5, 0x7}, {0x3, 0x4, 0x10, 0x3}], 0x10, 0xffff0001}, 0x90) (async, rerun: 64) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63f, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x28, &(0x7f0000000200)=""/40, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x200, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r5, 0xffffffffffffffff, r0, r6, r0, r0, r13], &(0x7f0000000440)=[{0x1, 0x3, 0x8, 0x3}, {0x0, 0x1, 0xa}, {0x5, 0x4, 0x0, 0x6}], 0x10, 0x8}, 0x90) 00:11:40 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc00, 0x3}, 0x48) 00:11:40 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 00:11:40 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:41 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x48) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@getae={0x4c, 0x1f, 0x10, 0x70bd25, 0x25dfdbfd, {{@in6=@mcast1, 0x4d3, 0x2, 0x6c}, @in=@loopback, 0x2}, [@offload={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c5}, 0x14011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r7, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x52}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x19, r3, 0x8, &(0x7f0000000b00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xa, 0x1, 0xfffffb90}, 0x10, 0x26f60, r9, 0x9, &(0x7f0000000d00)=[r6, r10, r3, r11, r5, r12, r2], &(0x7f0000000d40)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}, {0x1, 0x4, 0x9, 0x9}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x7}, {0x5, 0x1, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x1, 0x4, 0xb, 0x0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x52}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x19, r3, 0x8, &(0x7f0000000b00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xa, 0x1, 0xfffffb90}, 0x10, 0x26f60, r9, 0x9, &(0x7f0000000d00)=[r6, r10, r3, r11, r5, r12, r2], &(0x7f0000000d40)=[{0x1, 0x4, 0x10, 0x5}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x5, 0xc, 0x3}, {0x1, 0x4, 0x9, 0x9}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x7}, {0x5, 0x1, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x1, 0x8, 0x1, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xd, 0x9, 0x6, 0x100, 0x1}, @generic={0x2, 0x6, 0x0, 0x6, 0x1}, @generic={0x2, 0xf, 0x4, 0x100, 0x9ea7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x4f, &(0x7f0000000640)=""/79, 0x0, 0x17, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0xc7, 0x7f4b}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000780)=[{0x0, 0x5, 0x8, 0x2}, {0x0, 0x5, 0x5, 0x7}, {0x3, 0x4, 0x10, 0x3}], 0x10, 0xffff0001}, 0x90) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63f, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x28, &(0x7f0000000200)=""/40, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x200, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r5, 0xffffffffffffffff, r0, r6, r0, r0, r13], &(0x7f0000000440)=[{0x1, 0x3, 0x8, 0x3}, {0x0, 0x1, 0xa}, {0x5, 0x4, 0x0, 0x6}], 0x10, 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63f, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0x50}, @call={0x85, 0x0, 0x0, 0x6e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x7fffffff, 0x28, &(0x7f0000000200)=""/40, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x200, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r5, 0xffffffffffffffff, r0, r6, r0, r0, r13], &(0x7f0000000440)=[{0x1, 0x3, 0x8, 0x3}, {0x0, 0x1, 0xa}, {0x5, 0x4, 0x0, 0x6}], 0x10, 0x8}, 0x90) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xd00, 0x3}, 0x48) 00:11:41 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:41 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 00:11:41 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe00, 0x3}, 0x48) 00:11:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}, {&(0x7f0000000580)=""/240, 0xf0}], 0x2, 0x0) 00:11:41 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/117, 0x75, 0x2000, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x2, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @netrom={'nr', 0x0}, 0x4, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r1, 0x23, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000140)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xf00, 0x3}, 0x48) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1100, 0x3}, 0x48) 00:11:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, 0x0, 0x0, 0x0) 00:11:41 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 00:11:41 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1200, 0x3}, 0x48) 00:11:41 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, 0x0, 0x0, 0x0) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1300, 0x3}, 0x48) 00:11:41 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/117, 0x75, 0x2000, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x2, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @netrom={'nr', 0x0}, 0x4, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r1, 0x23, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000140)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:11:41 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:41 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x72cc, 0x9ed2, 0xa6, 0x2041, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1400, 0x3}, 0x48) 00:11:41 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, 0x0, 0x0, 0x0) 00:11:41 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1500, 0x3}, 0x48) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)=""/54, 0x36}], 0x1, 0x0) 00:11:42 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, &(0x7f0000000080)=""/117, 0x75, 0x2000, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x2, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async, rerun: 32) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @netrom={'nr', 0x0}, 0x4, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@ifindex=r1, 0x23, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000140)=0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1600, 0x3}, 0x48) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001600)='\x00', &(0x7f0000001640)='A', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1700, 0x3}, 0x48) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680), 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1800, 0x3}, 0x48) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0xa2070000, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1900, 0x3}, 0x48) 00:11:42 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x20, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x60, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x17c41, r1, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680), 0x0, 0x0) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x20, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x20, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x60, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x17c41, r1, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6]}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x60, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x17c41, r1, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1a00, 0x3}, 0x48) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680), 0x0, 0x0) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) (async, rerun: 32) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async, rerun: 64) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x20, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xba, &(0x7f0000000080)=""/186, 0x41100, 0x60, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x17c41, r1, 0x0, &(0x7f0000000280)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6]}, 0x90) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1b00, 0x3}, 0x48) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1c00, 0x3}, 0x48) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x511b82, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0x7, 0x10, &(0x7f0000000040)}) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x511b82, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0x7, 0x10, &(0x7f0000000040)}) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1d00, 0x3}, 0x48) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:42 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x511b82, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x1c, 0x7, 0x10, &(0x7f0000000040)}) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x13, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 32) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1e00, 0x3}, 0x48) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x101) 00:11:42 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x2, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0400001e00000127bd7000fbdbdf25ff010000000000000000000000000001000004d20a003c00e00000020000000000000000000000007fffffffff340000f6001400626c616b6532732d3232342d7838360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050050000c00000009bf2fb960e6c7b5a337ee4e4860e6a9319e5b138defd58a8e57f4b4a604b9b85ab3797b486bbc6f741077e482edc36cf464bbc10fa25cc4291875914e98da3e46f0fca01ecd812cfc65449d8effa58bbd81e0f16f58b8569854f230facc653fe86eadb1f11d2c320145987e985717bc366f762ac04ef93173c227f1743fc0c97e14b70ea2ddb462f56a993d1692faf4ccb94cd6d372a3826a2ee0e912f6efe1ddbfeac42abf5c65d8c6400004401050000000000000000000000000000000000000004d62b000000020000000a010100000000000000000000000000073500000001010000400000000000800010000020010000000000000000000000000000000004d5330000000a000000000000000000000000000000000000000635000001000700ff7f00000800000000000000e0000001000000000000000000000000000004d32b0000000a000000fc00000000000000000000000000000100350000020002000b040000bd0000000500000064010102000000000000000000000000000004d33c00000002000000ac1e01010000000000000000000000000004000001020600000000800700000000000080ac1e0101000000000000000000000000000004d63200000002000000ac1414bb000000000000000000000000023500000400000000020000ff07000009000000e400060000000000000000000000000000000000ff0100000000000000000000000000014e2300054e2200000200202089000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1f00, 0x3}, 0x48) 00:11:42 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x101) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x101) (async) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x3}, 0x48) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 1: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2100, 0x3}, 0x48) 00:11:42 executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x101) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x101) (async) 00:11:42 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}, 0x40) 00:11:42 executing program 2: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=@flushpolicy={0x10}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000aaddda28d91871d84402d14f0004d23c0000000000000000000000000000000000000005000000000000000f000000000000009f0c0000000000006700000000000000020000000000000001000000000000008778cd2f000000000000008000000000bbd10000000000000700000000000000ff00000000000000000000800000000007000000ffff000002cc000027bd70000135000002000003a400000000000000e400060000020000000000000000ffff00000000e00000010000000000000000000000004e220080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d500000000fe8000000000000000000000000000240400000000000000cbe0000000000000ff7f00000000000076000000000000002e0800000000000007000000000000003c09000000000000ffffffffffffffff01000000010000000100000000000000010000000000000009000000000000000002000009000000020000002dbd700001350000020002062100000000000000180008001400080001090c00b9ae9a3c1698c1d2b48a600608001d001261000008001f0002000000"], 0x46c}, 0x1, 0x0, 0x0, 0x4048800}, 0x200000c0) r1 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:11:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2200, 0x3}, 0x48) 00:11:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x80000001, &(0x7f0000000140)=0x0) io_destroy(r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff}}}, 0xa0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:11:43 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2300, 0x3}, 0x48) 00:11:43 executing program 4: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = fsopen(&(0x7f00000015c0)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:11:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x80000001, &(0x7f0000000140)=0x0) io_destroy(r1) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff}}}, 0xa0) (async) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000ec0)={@cgroup, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 703.128325][T31146] list_del corruption. prev->next should be ffff0000f845c828, but was ffff80008eacc880. (prev=ffff80008eacc880) 00:11:43 executing program 5: bpf$BPF_PROG_QUERY(0x5, &(0x7f0000000ec0)={@cgroup, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x40) [ 703.140063][T31146] ------------[ cut here ]------------ [ 703.141539][T31146] kernel BUG at lib/list_debug.c:64! [ 703.143106][T31146] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 703.145233][T31146] Modules linked in: [ 703.146257][T31146] CPU: 1 PID: 31146 Comm: syz-executor.1 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 703.148938][T31146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 703.151691][T31146] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 703.153859][T31146] pc : __list_del_entry_valid_or_report+0x13c/0x158 [ 703.155652][T31146] lr : __list_del_entry_valid_or_report+0x13c/0x158 [ 703.157375][T31146] sp : ffff800099b17aa0 [ 703.158449][T31146] x29: ffff800099b17aa0 x28: ffff0000c18970a0 x27: 00000000000a0003 [ 703.160648][T31146] x26: 1fffe00018ab8ba3 x25: ffff0000c153c510 x24: ffff0000d6974828 [ 703.162778][T31146] x23: dfff800000000000 x22: dfff800000000000 x21: ffff80008eacc880 [ 703.164959][T31146] x20: ffff0000d6974828 x19: ffff0000f845c828 x18: 1fffe000368333ce [ 703.167111][T31146] x17: ffff80008e33d000 x16: ffff80008a71b23c x15: 0000000000000001 [ 703.169202][T31146] x14: 1ffff00013362eac x13: 0000000000000000 x12: 0000000000000000 [ 703.171338][T31146] x11: 0000000000000000 x10: 0000000000000000 x9 : 7095812794dba000 [ 703.173481][T31146] x8 : 7095812794dba000 x7 : ffff80008028e628 x6 : 0000000000000000 [ 703.175561][T31146] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800082b180c4 [ 703.177738][T31146] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000006d [ 703.179856][T31146] Call trace: [ 703.180756][T31146] __list_del_entry_valid_or_report+0x13c/0x158 [ 703.182440][T31146] efivar_entry_remove+0x38/0x110 [ 703.183793][T31146] efivarfs_destroy+0x20/0x3c [ 703.185067][T31146] efivar_entry_iter+0x94/0xdc [ 703.186386][T31146] efivarfs_kill_sb+0x44/0x5c [ 703.187600][T31146] deactivate_locked_super+0xac/0x12c [ 703.189030][T31146] deactivate_super+0xe0/0x100 [ 703.190329][T31146] put_fs_context+0x88/0x790 [ 703.191531][T31146] fscontext_release+0x64/0x84 [ 703.192827][T31146] __fput+0x324/0x7f8 [ 703.193876][T31146] __fput_sync+0x60/0x9c [ 703.195032][T31146] __arm64_sys_close+0x150/0x1e0 [ 703.196403][T31146] invoke_syscall+0x98/0x2b8 [ 703.197664][T31146] el0_svc_common+0x130/0x23c [ 703.198943][T31146] do_el0_svc+0x48/0x58 [ 703.200089][T31146] el0_svc+0x54/0x158 [ 703.201141][T31146] el0t_64_sync_handler+0x84/0xfc [ 703.202571][T31146] el0t_64_sync+0x190/0x194 [ 703.203752][T31146] Code: 912c8000 aa1303e1 aa1503e3 95edb071 (d4210000) [ 703.205604][T31146] ---[ end trace 0000000000000000 ]--- [ 703.888563][T31146] pstore: backend (efi_pstore) writing error (-16) [ 703.890454][T31146] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 703.892468][T31146] SMP: stopping secondary CPUs [ 703.893746][T31146] Kernel Offset: disabled [ 703.894890][T31146] CPU features: 0x0,00000020,70020046,21017203 [ 703.896549][T31146] Memory Limit: none [ 704.580879][T31146] Rebooting in 86400 seconds..