last executing test programs: 17m27.827894246s ago: executing program 32 (id=945): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 17m15.059768662s ago: executing program 0 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x741200, 0x1c) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000008b000000", @ANYRESDEC=r1, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e7465720004000280080003400000011014"], 0xc8}}, 0x20050800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYBLOB="c3263b9a6cd2dc4c8d1ba0983bdc726f31e721aeea53a49e322970b2238f5a366fc3c51d9ba86528eb7fc9de9ed1c09108c05bde8f1a5f20b27a96991e529c05efa518b9f24dd8c1186f820c18eca416a7376919c527b7d84d5b538036c6d72f21b12b061101d5d5e4a5b1a0054d3cabd78aeb40486154aa370be8fc1288818c5113fbb0a8acb674275a5d0fa3fc7d1e97870437b14c", @ANYRES32=r2], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4e, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r5 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) keyctl$link(0x8, r5, 0xffffffffffffffff) 17m14.995724503s ago: executing program 33 (id=1269): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 17m14.976610863s ago: executing program 0 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x5, 0x0, @buffer={0x2, 0x50, &(0x7f00000000c0)=""/80}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB="64e12b0da8c5b23ee59cde071f284de593ab140466f230b32d3e8bd6e456788b18b99153c25bc6b1f45dc253ae3a92930ec88bd060332ff747f14ec9835e8d4b1b7157fef6eb89f94cad2e2d9f428ce6b41dd3606c4bc78803aea104ec1f30fbf349bab436156578e38dc5b9970de4d5145cdde85fdca46a3e9cb235b7f51b20fa2695b80698e4b460772a514a7e552e46a2e60a117783225f0cd2caa9a159195df5f6449787f9275dc3", @ANYRES64=r0], 0x40}}, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r3}, 0x10) r4 = msgget$private(0x0, 0x1c8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100ff00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000007ff4ede3369c0f0cc256a00101b24a98147df343fb1e77e4439c6494087e50cccbe0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000080)=0xffffff7f) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) msgsnd(r4, &(0x7f0000000200)=ANY=[], 0x0, 0x0) msgsnd(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="4e94da2993090c953cc49be596788b3df0ed32c000677202fee28a61fc66e83f22a1dbfe0e9f70097176746a7de05c35a2b8d17a08bf28dbaecf683a917decb4e25e2f569be1e99765318399b836b19c0254a2c4f034e25d4d73ded11d7788106e0537ca11edc4949aad45e70c"], 0xfd1, 0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 17m14.943813112s ago: executing program 0 (id=1273): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 17m14.898873273s ago: executing program 0 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mq_open(&(0x7f0000000880)='!sel\xe7\xcd\xbc\xe8inuxseli\n)\x9f1\xc6\xdf\n\x8d\x01\xcd\xebP\xe8\xc2e3l;u\xffe\x19Y\xb7\b\xf0\x8fSG\xff\xca\f%\xef\x83\xd1\x06\x15z\xd3\xb90\x83\xa4\xc1\xbb\xa6F\x91V\xad\xbf\xd1d\x88DY\xce\xf0P\x14\xaf\xc3\xbbk4\x01{\xc0L\x19D\xcb\xcd\xe78\x97\xe6:3\xb1\xd3\xefe\xb2\xd2\xa5\n\t4\xa6K\xdd\x97\xa3\xac\xc60xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000002640)={[{@abort}, {@min_batch_time={'min_batch_time', 0x3d, 0x60000}}, {@dax_inode}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x63028921}}, {@nodelalloc}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@dont_appraise}, {@seclabel}, {@measure}]}, 0x5, 0x507, &(0x7f0000002040)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 17m14.575718874s ago: executing program 34 (id=1281): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000005902aed5b128ca24f065b811509b7b12b062e7e5d052745759067ba45eab0c46deaf2e4838d2b8d09617690694e726368f4999f4874fed9dc3a1dc5cb2feee9d1a6da27e3d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000002640)={[{@abort}, {@min_batch_time={'min_batch_time', 0x3d, 0x60000}}, {@dax_inode}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x63028921}}, {@nodelalloc}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@dont_appraise}, {@seclabel}, {@measure}]}, 0x5, 0x507, &(0x7f0000002040)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOyW3YWCqjqJuxut9sAuJ4TQSog9gtQNiRtFseModkoTekjPHLggUYkTHPkDOPfEnQuCG5dyQOJHBGqQOBjNeJK6qd1EJLGj+PORRvPevPF834sz78XPsV8AI+t6ROxFRDEiPouImex4Ltvi486WnPd0/8Hywf6D5Vy025/+I5eWJ8ei6zGJa9k1SxHx/W9H/Cj3Ytzmzu76Uq1W3cryc6365lxzZ/fWWn1ptbpa3ahUFhcW5z+4/X7l3Nr6Vr2Ypb785Pd73/hJUq3p7Eh3O85Tp+mFoziJ8Yj47kUEG4KxrD3FYVeE/0s+Il6PiLfT+38mxtJnEwC4ytrtmWjPdOcBgKsun86B5fLlbC5gOvL5crkzh/dGTOVrjWbr5t3G9sZKZ65sNgr5u2u16nw2VzgbhVySX0jTz/KVY/nbEfFaRPx8YjLNl5cbtZVh/uEDACPs2rHx/98TnfEfALjiSsOuAAAwcMZ/ABg9xn8AGD3GfwAYPZ3xf3LY1QAABsjrfwAYPcZ/ABgp3/vkk2RrH2Tff71yb2d7vXHv1kq1uV6uby+Xlxtbm+XVRmM1/c6e+knXqzUamwvvxfb92W9uNltzzZ3dO/XG9kbrTvq93neqhfSsvQG0DADo57W3Hv8pl4zIH06mW3St5VAYas2Ai5YfdgWAoRkbdgWAobHaF4yuM7zGNz0AV0SPJXqfU+r1AaF2u92+uCoBF+zGF8z/w6jqmv/3X8AwYsz/w+gy/w+jq93OnXbN/zjtiQDA5WaOH+jz/v/r2f432ZsDP1w5fsajno/by7qX86sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXEKH6/+Ws7XApyOfL5cjXomI2Sjk7q7VqvMR8WpE/HGiMJHkF4ZcZwDgrPJ/zWXrf92YeXf6uaI3rx0lixHx419++ov7S63W1h8iirl/Thwebz3KjlcGX3sA4GSH43S673oh/3T/wfLhNsj6/O1bEVHqxD/YL8bBUfzxGE/3pShExNS/clm+I9c1d3EWew8j4vO92p+L6XQOpLPy6fH4SexXBho//1z8fFrW2Sc/i8+dQ11g1DxO+p+Pe91/+bie7nvf/6W0hzq7rP9LLrV8kPaBz+If9n9jffq/66eN8d7vvtNJTb5Y9jDii+MRh7EPuvqfw/i5PvHfPWX8P3/pzbf7lbV/FXEjesfvjjXXqm/ONXd2b63Vl1arq9WNSmVxYXH+g9vvV+bSOeq5/qPB3z+8+Wq/sqT9U33il05o/1dP2f5f//ezH3zlJfG//k6v+Pl442fFvvGTMfFrp4y/NPXbUr+yJP5Kn/af9PzfPGX8J3/ZfWHZcABgeJo7u+tLtVp1S0Li8ieSX9lLUI2eiY8GFasYvYt++k7nnj5W1G6//IIf9S7q12Ocx6wbcBkc3fQR8Z9hVwYAAAAAAAAAAAAAAOhpEJ9YGnYbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA///zVdb3") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 12m11.693447077s ago: executing program 4 (id=7834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x800000, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x780, 0xf8, 0x278, 0xf8, 0xf8, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xff, 0xff], 'dvmrp0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x29, 0x2, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {0xff}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private2, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80}]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10001, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x100) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 12m11.482951298s ago: executing program 4 (id=7841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x100000000000600d, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="2aeebe00000000274a252d9de284a72c74000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 12m10.637015712s ago: executing program 4 (id=7868): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='qdisc_reset\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (fail_nth: 3) 12m10.319450774s ago: executing program 4 (id=7869): openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x513482, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x24, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x1e36c2, 0x5c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x83) 12m10.318980424s ago: executing program 4 (id=7870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r1 = fcntl$getown(r0, 0x9) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/20, 0x14}], 0x3, &(0x7f0000000580)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000480)}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000002700)=""/226, 0xe2}], 0x6, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000640)="04ea4075f7b1a78922c246a9408badaf2d76364f4714393666c1be176d7a3f8eb39774c764af6749411ced400a04ef53b078f5cb9e3ed5294c924166e72395efa50820de26ec826c10f6264b00903e38d7f059f1ff90bf75f8911704a28cc803ddcb231c7a1daff915a46f5f7e4ab407d80c65f3090a575efad0accaefee18fcb5849e688aaac86220f503ae2a87ab09e63f38feef0b60df1cf79c11f11a1e6d7ae54be5ef490b9ef308b4b5ebb6cb919fb161", 0xb3}], 0x2}}], 0x1, 0x0) 12m10.088908155s ago: executing program 4 (id=7873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x800000, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x780, 0xf8, 0x278, 0xf8, 0xf8, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xff, 0xff], 'dvmrp0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x29, 0x2, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {0xff}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private2, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80}]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10001, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x100) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 12m10.088304615s ago: executing program 35 (id=7873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x800000, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x8, 0x6, 0x970, 0x780, 0xf8, 0x278, 0xf8, 0xf8, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], [0xff, 0xff, 0xff, 0xff], 'dvmrp0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x29, 0x2, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {0xff}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private2, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80}]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10001, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x100) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 9m14.091225856s ago: executing program 5 (id=11995): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 9m14.067330606s ago: executing program 5 (id=11997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x228801, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000002f, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002088702500000000000000000007010000f8ffffffb706110008000000b7030000000000f0850000002d0000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x1ff}, 0x18) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) close(r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x80000, 0x3, 0xfc, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_clone(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c7766646e6f3d9856adef311185176567cffc222bf159fa8e6b21b0dee7f686c22ea0fe1a6070020000000000000084b485e3742b81e7c25a48a5", @ANYRESHEX=r7, @ANYBLOB=',\x00']) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000309, &(0x7f0000000380)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$eJzs3c9vI1cdAPCvvXHiZNMmLT0AgnZpCwtarZN426jqgZYTQqgSokeQtiHxRlHsOIqd0oSVmp65IlGJExz5Azhw6ok7FwQ3LuWAxI8I1CBxGDTjSdabtTcWSewo/nyk2Zk3bzLf74t33lu/bPwCGFu3IuIgIiYj4r2ImMvPF/It3u5s6XWfHT5cPTp8uFqIJHn3H4WsPj0XXV+TupnfsxwR3/92xI8KT8Zt7e1vrtTrtZ28vNBubC+09vbvbjRW1mvrta1qdXlpefGNe69XL6ytLzUm86Mvf/r7g2/8JE1rNj/T3Y6L1Gl66SROaiIivnsZwUbgRt6eyVEnwv+lGBHPR8TL2fM/FzeyVxMAuM6SZC6Sue4yAHDdFbM5sEKxks8FzEaxWKl05vBeiJlivdlq33nQ3N1a68yVzUep+GCjXlvM5wrno1RIy0vZ8aNy9VT5XkQ8FxE/m5rOypXVZn1tlP/wAYAxdvPU+P/vqc74HxHJh6NODgC4POVRJwAADJ3xHwDGj/EfAMaP8R8Axk9n/J8e4MKdy08GABgK7/8BYPwY/wFgrHzvnXfSLTnKP/967f293c3m+3fXaq3NSmN3tbLa3NmurDeb69ln9jTOul+92dxeei12P5j/5narvdDa27/faO5ute9nn+t9v1bKrjoYQssAgH6ee+mTPxXSEfnN6WyLrrUcSiPNDLhsxVEnAIzMjVEnAIyM1b5gfJ3jPb7pAbgmeizR+5hyr18QSpIkubyUgEt2+wvm/2Fcdc3/+1/AMGbM/8P4Mv8P4ytJCoOu+R+DXggAXG3m+IE+P/9/Pt//Ov/hwA/XHtX9Nvvz455fd5B3LxebJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwxx+v/VvK1wGejWKxUIp6JiPkoFR5s1GuLEfFsRPxxqjSVlpdGnDMAcF7Fvxby9b9uz706+1jVizdPDicj4se/ePfnH6y02zt/iJgs/HPq+Hz74/x8dfjZAwBnOx6ns33XG/nPDh+uHm/DzOdv34qIcif+0eFkHJ3En4iJbF+OUkTM/KuQlzsKXXMX53HwUUR8vlf7CzGbzYF0Vj49HT+N/cxQ4xcfi1/M6jr79HvxuQvIBcbNJ2n/83av568Yt7J97+e/nPVQ55f3f+mtVo+yPvBR/OP+70af/u/WoDFe+913OkfTT9Z9FPHFiYjj2Edd/c9x/EKf+K8OGP/PX3rx5X51yS8jbkfv+N2xFtqN7YXW3v7djcbKem29tlWtLi8tL75x7/XqQjZHvdB/NPj7m3ee7VeXtn+mT/zyGe3/6oDt/9V/3/vBV54S/+uv9IpfjBeeEj8dE782YPyVmd+U+9Wl8df6tP+s1//OgPE//cv+2oCXAgBD0Nrb31yp12s7Dp48SJLkw/SbdFXycZC+GlcgjZ4Hbw0r1mSfv5A/faXzTJ+qSpKn3/Ct3lX9eoyLmHUDroKThz4i/jPqZAAAAAAAAAAAAAAAgJ6G8RtLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//99m9kb") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 9m13.905919247s ago: executing program 5 (id=12000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 9m12.579837054s ago: executing program 5 (id=12026): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000900000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0xa, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000, 0x3400000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffb0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000280)="$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") name_to_handle_at(r5, &(0x7f0000000540)='./file2\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1400) r6 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r6, 0x409, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) write$sndseq(r1, &(0x7f0000000a40)=[{0xff, 0x6, 0x41, 0xe5, @tick=0x5, {0x9, 0x6}, {0x7, 0xb7}, @control={0x6, 0x5, 0xfffffe01}}, {0x8, 0x8, 0x9, 0x7f, @tick=0x1, {0x6, 0x21}, {0x2, 0x16}, @ext={0xf4, &(0x7f0000000800)="a12c74957e452e8af852b19d5c511e0d6a6e984d988efbee51bcd22b5a95918de29f1dae8d5ca44a73ece2f0c9557ac50031ed3d7aa5cf518f5ad7beb0f0f05d2a8b5f96dc0d9f5357ae19a06739423070d428f0805da34eb6662b0042a30c44fce7ad7d5d5b9431f8f98f198d8886b8829da5fa2724902492038911981ec50f7311b4c74fc57c26719e613b6cc86cb8beb2523b135aed6545273b31154a196567937dd1f2babb316d36f0c1082c8da54f8de7bc045f80b8eca130840cf2e98c97d1b54829821afba8ad3b9cee15683ad521c635c9ebb4d9c3bdd1a1c279053d90501aa2ced15997adbd1f1c201c250b3d381386"}}, {0x4, 0x6, 0x2, 0x9, @time={0x1, 0x5}, {0x4, 0x1}, {0x73, 0x8}, @ext={0x52, &(0x7f0000000900)="17db41f6a7ee6a0b3e9fa6493068fb95f946ebfe2104aec02861e65ef708a032c9149d313f7c02cca7f3a949cfd8791965d513820d061ce54251c18ae00c4e605cd59986435792f24296d710fbded8d5af05"}}, {0x0, 0x9, 0xda, 0x7, @time={0x5e, 0x9}, {0x1, 0x2}, {0x2, 0x7}, @note={0x0, 0x80, 0x80, 0x7, 0x1}}, {0x5, 0x6, 0xa, 0xf, @tick=0x7, {0x7, 0x5}, {0x5, 0x5}, @queue={0x5, {0xc4, 0x5}}}, {0x1b, 0x1, 0x3, 0xf5, @time={0x3, 0x5}, {0x4, 0x3}, {0xf8, 0x23}, @control={0x3, 0x3, 0x7}}], 0xa8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m12.522504834s ago: executing program 5 (id=12027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x8041}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200080001800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000000)) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000b3c42ccb612200000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r13, 0x800448d2, &(0x7f0000000000)) 9m12.124025596s ago: executing program 5 (id=12032): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 9m12.123499716s ago: executing program 36 (id=12032): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 9m2.260776986s ago: executing program 9 (id=12295): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)="3e9babd3e32b", 0x6}, {&(0x7f0000000c00)="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", 0xdb7}], 0x3}}], 0x1, 0x9200000000000000) dup3(r1, r0, 0x0) 9m2.213957776s ago: executing program 9 (id=12298): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 9m2.141216297s ago: executing program 9 (id=12300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc8"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x200000005c832, 0xffffffffffffffff, 0x200000) (fail_nth: 4) 9m1.801258798s ago: executing program 9 (id=12302): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000080000000900000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0xa, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000, 0x3400000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffb0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2ad, &(0x7f0000000280)="$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") name_to_handle_at(r4, &(0x7f0000000540)='./file2\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1400) r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r5, 0x409, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) write$sndseq(r1, &(0x7f0000000a40)=[{0xff, 0x6, 0x41, 0xe5, @tick=0x5, {0x9, 0x6}, {0x7, 0xb7}, @control={0x6, 0x5, 0xfffffe01}}, {0x8, 0x8, 0x9, 0x7f, @tick=0x1, {0x6, 0x21}, {0x2, 0x16}, @ext={0xf4, &(0x7f0000000800)="a12c74957e452e8af852b19d5c511e0d6a6e984d988efbee51bcd22b5a95918de29f1dae8d5ca44a73ece2f0c9557ac50031ed3d7aa5cf518f5ad7beb0f0f05d2a8b5f96dc0d9f5357ae19a06739423070d428f0805da34eb6662b0042a30c44fce7ad7d5d5b9431f8f98f198d8886b8829da5fa2724902492038911981ec50f7311b4c74fc57c26719e613b6cc86cb8beb2523b135aed6545273b31154a196567937dd1f2babb316d36f0c1082c8da54f8de7bc045f80b8eca130840cf2e98c97d1b54829821afba8ad3b9cee15683ad521c635c9ebb4d9c3bdd1a1c279053d90501aa2ced15997adbd1f1c201c250b3d381386"}}, {0x4, 0x6, 0x2, 0x9, @time={0x1, 0x5}, {0x4, 0x1}, {0x73, 0x8}, @ext={0x52, &(0x7f0000000900)="17db41f6a7ee6a0b3e9fa6493068fb95f946ebfe2104aec02861e65ef708a032c9149d313f7c02cca7f3a949cfd8791965d513820d061ce54251c18ae00c4e605cd59986435792f24296d710fbded8d5af05"}}, {0x0, 0x9, 0xda, 0x7, @time={0x5e, 0x9}, {0x1, 0x2}, {0x2, 0x7}, @note={0x0, 0x80, 0x80, 0x7, 0x1}}, {0x5, 0x6, 0xa, 0xf, @tick=0x7, {0x7, 0x5}, {0x5, 0x5}, @queue={0x5, {0xc4, 0x5}}}, {0x1b, 0x1, 0x3, 0xf5, @time={0x3, 0x5}, {0x4, 0x3}, {0xf8, 0x23}, @control={0x3, 0x3, 0x7}}], 0xa8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m1.691149809s ago: executing program 9 (id=12307): r0 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040", 0x91}], 0x1}, 0x0, 0x80840, 0x1}) io_uring_enter(r0, 0x1d2d, 0x0, 0x0, 0x0, 0x0) 9m1.40796971s ago: executing program 9 (id=12312): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r1, 0x1d2d, 0x0, 0x0, 0x0, 0x0) 9m1.40783336s ago: executing program 37 (id=12312): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r1, 0x1d2d, 0x0, 0x0, 0x0, 0x0) 5m53.096836493s ago: executing program 7 (id=17284): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x900) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0x924, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x76}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x80c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) umount2(&(0x7f0000000240)='./file0\x00', 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f0000000280)="42c41974d77136be75646f9d181bbf56490ac3ad19e4f65d40820dc638cf4f5324756d6832a272546290b1479de05556962c24d51a00b002d8b585aba29dd3771eabe3f9f0e9ebfd1c9f547a46c30d1e33805b26", &(0x7f0000000300)=""/111}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x1c0000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x2f, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = dup2(r3, r3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @exit, @printk={@lx}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x736e}}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x9, 0x6, 0x2}, 0x10, r6, r7, 0x0, &(0x7f0000000880)=[r0, r0, r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000980)={0xa, 0x4e24, 0x8, @private1, 0xc74}, 0x1c) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4, {r8, r9}}, './file0\x00'}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000b80)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r7) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x110, r11, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xa1, 0xa9, @random="b1aa061c5fef6077d725a53fbd73cf46e2ba8b28b059dd0f7a17472bceb9c094871a14e6ad6ff05aa935650aafa49e3b4b4713f3a40cf95c2961251b6db3716e6f736bbd2ee02f58f2515634c0db6d5a81eb1058f5d9c6dfb783cbdf553062745839ba838f351d4e7232d498c9de0eccf1fce1d4cc0f7fab1fc027e2e63626fcbdb7890564ad534a2622059784ce75dbfdeb529c70c0c377b015af9ecb"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000040}, 0x15) preadv(r4, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/115, 0x73}, {&(0x7f0000000e80)=""/126, 0x7e}], 0x2, 0x7, 0x70efb887) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000f40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000fc0)={r12, 0x0, r4, 0xd, 0x80000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='cpuacct.usage_sys\x00', 0x0, 0x0) r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0xe280, 0x170, 0x23}, 0x18) openat(r13, &(0x7f00000010c0)='./file0\x00', 0x200, 0x47) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x19, 0x5, 0x89, 0xffffffcc, 0x40080, r7, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r14, &(0x7f0000001180)="a3d5d2c9e9c0505943970e9045d5571a548d59cfcd3567c8c6c1b52a353054ef65be6f5399cb19d459508b0519dcf955d0d1138eebdf7d5bf337531972338181c8df88f8a185bb3eb3e2eda069f1360cb619b47b56d8f6281a28cead4e3c6d03b71206b23ac3fc34c074c86c1d251e82f11f29c41ab32cd3c5c3fe0f4f9f9480e152aef00c38e138", &(0x7f0000001240)=""/172}, 0x20) r15 = open(&(0x7f0000001340)='./file0\x00', 0x8000, 0xc3) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r15) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xb0, r16, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x2, 0x71}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfa8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xfffffffc}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4d}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xcf7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x389}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0xb0}}, 0x8004) 5m53.067172794s ago: executing program 7 (id=17285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c2eb6c59fff4699e56d2f340560cab05aae539f94990623"]) 5m53.046237554s ago: executing program 7 (id=17286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000001980)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x4}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) shutdown(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xe3a9, 0x80000003}) 5m53.022345464s ago: executing program 7 (id=17287): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_track_inode\x00', r0, 0x0, 0x5b6f}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x9, 0x20, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef300", [0x0, 0x4]}) 5m52.898922874s ago: executing program 7 (id=17288): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014"], 0x7c}}, 0x0) 5m52.360662327s ago: executing program 7 (id=17303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000002086670000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) accept(r1, &(0x7f0000000080)=@can, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000500)=0x68, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)="fe", 0x1, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) syz_open_dev$tty1(0xc, 0x4, 0x1) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m52.323971337s ago: executing program 38 (id=17303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000002086670000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) accept(r1, &(0x7f0000000080)=@can, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000500)=0x68, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)="fe", 0x1, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) syz_open_dev$tty1(0xc, 0x4, 0x1) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.93072157s ago: executing program 3 (id=24435): r0 = add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0xfffff, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000002c0)='e8dab99234bb312e') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') faccessat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), 0x0, &(0x7f00000004c0)={0x0, "fd8f3e2e844ac33f969e3e24d8c1a8a973bcbf73037369151c02a4284e715264cedb7f95edf6327a506f82ad7edb738990bc1a017ccae19d57150f76ff5303c7", 0x34}, 0x48, 0xfffffffffffffffb) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 3.836353761s ago: executing program 3 (id=24437): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, &(0x7f0000000d40)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a000000140007800500150006000000080012"], 0x60}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800faffffff00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000951105d099ad8c8b5fdb62766cce3b2ffb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0x36, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000440)="76b65a1a851ca2e8a6bd9dea974f3b8f8d8fcf9b5788e3c9957014464760581746f615cb42bcc808ca43239a123b1f93a9c767cb8ddfe557f41cf33e8a066abfc824b3356fd67834e3b46328492f18923cc289fbf5835d37eeab145a2f92538a1ffa140b005850a5ab4ffb7c852a5d7804e2a989e631cbe30e13cdccaca0f912227fb3f646d0", 0x86}], 0x2}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r10 = socket(0x10, 0xa, 0xc805) write(r10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xa000000a}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.147972794s ago: executing program 2 (id=24449): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000064000/0x1000)=nil, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 3.127652164s ago: executing program 2 (id=24450): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0004f3ff080000df0000000000000000008586fe45cd849ce74197f25daecda2b806d3cf41100677fed145540a0100000036d9d0a6254501fd231944688a1d71b09e519d3fab5f5009392d18aca8fda05e3777f33730b3a5a5096b64eec58158cd2e038e00f5b83027e650de", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) r1 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000050c0)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x1000, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x0, 0x1, 0x4, {0x3, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x80a0, 0x4, 0x6, 0x1}, 0x8, 0xc457, 0x40f4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x400d4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.063925705s ago: executing program 8 (id=24451): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0004f3ff080000df0000000000000000008586fe45cd849ce74197f25daecda2b806d3cf41100677fed145540a0100000036d9d0a6254501fd231944688a1d71b09e519d3fab5f5009392d18aca8fda05e3777f33730b3a5a5096b64eec58158cd2e038e00f5b83027e650de", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) 2.134005759s ago: executing program 2 (id=24457): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x40000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semtimedop(0x0, &(0x7f0000000340)=[{0x2, 0x40, 0x800}, {0x1, 0x9, 0x1000}], 0x2, &(0x7f0000001480)={0x0, 0x989680}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xb, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x8004745a, 0x2000000c) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000001500)=ANY=[@ANYBLOB="2b63707520c6e9dde88a151624cb813b6f53c8ba9d15b0fccf097f7be0d1ad6dc79767f899ef4bd6a481a993a3103f57e2f74ffac72b80262ad973d41fad16c01ce2c4e11a412898ec8547f8f463843b612ecabd8a705a9810b3225ddb4ade6e02a13d8223223b3a20e371f90a43bae8994a5c16fb810bc09d53ac1a874b41d7c64d5e0f3f3463659b0f5be2f943811bc4fb67a8b17df9eb7cc8cd24335a4deae50b"], 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 2.112557629s ago: executing program 8 (id=24458): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000000000580192a5e4fe93c60000000000cf737d3d50546d4268ac4286e68a284e156963cdc9097df7696658ae5bab6f4c6d6d8097e55f7c459c855b5a1d3db5a137f8593bdf6a60c677503d2e0ca53307ae17c92f82dbb2ed6cac68cfaa1d69cd6335686985b2d095e1b62d07fbbd20d774165f1e587767f5bd307a9048ceab378954e90fdde1820faa03219a3baef8e2b9c3bad6244fdd6a199901a16bb28c2cf1072aed2d4727ca0582fd5a25", @ANYRES64=0x0, @ANYBLOB="00000000000000000000000000000000000000e0", @ANYRES64=r1, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000002000000180100002020702500000000002020207b1af8ff00000000bda000000000000027000000f8ff3f00b702000008000000b7030000000000002500f8ff0600100095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fspick(r2, &(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) pselect6(0x40, &(0x7f0000001680)={0x9, 0x40000000400000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000000), 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x1}}, 0x18) 1.197128944s ago: executing program 2 (id=24467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0004f3ff080000df0000000000000000008586fe45cd849ce74197f25daecda2b806d3cf41100677fed145540a0100000036d9d0a6254501fd231944688a1d71b09e519d3fab5f5009392d18aca8fda05e3777f33730b3a5a5096b64eec58158cd2e038e00f5b83027e650de", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) r1 = gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f0000000140)=""/192, 0x20000057) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000050c0)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f2, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000001, 0x0, 0x8, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0x7, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x1000, 0x0, 0xa6, 0x80, 0x0, 0x0, 0x800, 0xfffff0e7, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x0, 0x1, 0x4, {0x3, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x5, 0x2, 0x80a0, 0x4, 0x6, 0x1}, 0x8, 0xc457, 0x40f4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x400d4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.196887104s ago: executing program 8 (id=24468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a300000000014"], 0xfc}}, 0x0) 1.169528874s ago: executing program 6 (id=24469): r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0x6, 0x7, 0x5}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@test_dummy_encryption_v1}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid, 0x32}]}, 0x1b, 0x4ed, &(0x7f0000000a40)="$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") write$sndseq(r2, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x12, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f0000000280)='%\x00', 0x4) io_uring_setup(0x3eae, &(0x7f0000000080)) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x1a, r6, 0x1, 0x3, 0x6, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000900)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1.107827334s ago: executing program 6 (id=24470): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fd8631137e7ca24200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) 1.107392175s ago: executing program 8 (id=24471): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000064000/0x1000)=nil, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 1.101833684s ago: executing program 3 (id=24472): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"]) 1.067384465s ago: executing program 8 (id=24473): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b38c8f8a9a38728c000000000000000000000000000000000002863654347a7d1d7c4111537f55b1f0b0727d75b2fd2dd5eafe01f893ea1752"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() getresuid(&(0x7f0000000340), &(0x7f0000000f40), &(0x7f0000000f80)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.024212655s ago: executing program 6 (id=24474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 1.017532885s ago: executing program 3 (id=24475): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000020000000d0f0000038b69611e27e3c57cebc8d306299bc2450f15eb3a57fe0d0f69034cdc6d9f08c8061f1e84b204e5a704216afc5861bd9721903130740a653f1e3f49535f9b59afef98"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f00000004c0)="7cd1f233f595", 0x6}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0x6, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000a01eed8fae4345358d0a4cdacca3af258c661026055a43301fc0349cf5eeaf08a368ece3f35c1cda989f83cc9484ca5615447fd934e96b8938ad97ef11288edb686cc160f082464e760c0ef353b2ac586d", @ANYRES16, @ANYBLOB="0100000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800060000000000"], 0x38}}, 0x0) 927.126535ms ago: executing program 8 (id=24476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x203}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x1ffffff) munlockall() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000000000000850000005900a00095e9e8d584455a9b5fdc6ce6df02da6228c6abc331169a71600b41224dcc697247054980e952c5a40ab4c88ee3341ec02bdaa8c97eab6f84eb2d2378c3ece990408e6024a983187c300d8b51078ca2745a16e122fd349a2b090f67ed3b846b0fed90d2fa6f25039b02be3095e60cd5fabc14880eb291be1053025d26a97de9894129ef59eaef9854b4ad96b25942f0b2f87129841f9aa54cf16132e24586df806c86169c0fc71a2f97ba0fe9c535266a87f03df4cb9b00"/258], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x2]}, 0x8) read$msr(r7, &(0x7f0000000680)=""/141, 0x8d) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYRES16=r10], 0x28}}, 0x8094) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x108, r12, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "35c7c7d300516630af842c3e88863cd7464cbbba62b15f228c9adc27c34a19c0c3fde9e86900bd896937bd03757b3d38b22bfce76edae70934083b077c5a362c7ed96762e123871a1542d549aba10cd0074251ac67f888829f4e14dc4e874b9eee81b2a6e0cbb3a3278fe480d126553e0a7d9eac51b4389a0f918951881396b03ae876d1d51592d4e5aa4936032d3c96585b59a5e8a9b2b60846a601dbbc81550f185fb3edaf523c4941b71328fbb546d271c41862441b0e90d48245103a9384604bd2"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 346.093108ms ago: executing program 1 (id=24482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) 326.692578ms ago: executing program 1 (id=24483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800f0000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, 0x0, &(0x7f0000000600)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x769, &(0x7f0000000fc0)="$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") dup3(r1, r1, 0x0) 295.747148ms ago: executing program 1 (id=24484): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fd8631137e7ca24200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) 265.217749ms ago: executing program 1 (id=24485): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fd8631137e7ca24200"/28], 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r0}}, 0x24}}, 0x0) 220.327759ms ago: executing program 1 (id=24486): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x78000}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 219.880059ms ago: executing program 1 (id=24487): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 102.980859ms ago: executing program 6 (id=24488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x6d) r1 = io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc, 0x800}) r2 = epoll_create1(0x0) r3 = dup3(r2, r1, 0x0) epoll_pwait2(r3, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 102.54621ms ago: executing program 3 (id=24489): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000100)) close_range(r1, 0xffffffffffffffff, 0x0) 70.06784ms ago: executing program 3 (id=24490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="aeaa7cab4158df12e3cd0dc650b2342a7c192e6d45eb228c6594d5b2ae5ecf8325ec5b872d6305101248957e7048f13230520bdecf7f303020af89f4a2609cecc61b6a7bc7b980c83cad8b47588890bfeff6e4b544c339ca8e4bdf014c560b280e5909a755ee0c36bea316ec5aa178cd36d339260546f4ce578af1d855ace5938df7dc9b693b996179aa92db707c870dd010a1ec02d221be29fc78caf565531d1cb64b9f8f61d4e2bfb83b698c39386ad76c1f475f8b077da5de0670ef8c8831d1c9b1d4910aa8c6203408bb47be566c50581927a2f3bf2800"/229, 0xe5}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000001400020077673000"/26], 0x30}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) symlink(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$binfmt_misc(r8, &(0x7f0000000100), 0x6) 57.849419ms ago: executing program 6 (id=24491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="7e11968290335a2f5dbccc325eea93d7c0794877b24e4c557ae196e4ee3370d1f31a0314ddc1dfc121d9600fe613324b60b49d7a5de01d080ba5eff6db8fdbfec74f1799d3b1dfedb2f7a01ed3c963af1dcc190446e68db1e91dab6b006c104b6d8df34d8761f8cfbc70453c9428125f1299354990fd5c9125a9805267fda24313174d96c8c5793843d1ffc715ed61b09779359d1abf2ae42039", 0x9a}, {&(0x7f0000000040)="636918b126e2588f720608d8856aea3743e648d5c50cf0f2880fbacb975ff819fa5f14742f0bd4dfc5b771595e437683", 0x30}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000480)="8e525b17c51e524b79f07d413ba4acd47a3a7e9d55da168b4b1325510af54e96de9a2facb22622a5b7c7285cc291c0fde7e013dcc804b8b0fe409533531a00f89d8af47179bc3df0dcd822cbcc55c6cde0cd525dc60dc9933e5b40873e9bfa60966df8d7b822d6e353df998f4cd5f5d63495124f53e7915ba772da396028501355c8595137bdaf2812b6f1befd0bca3bce02ba62b29748227d9139274d9f2b02b0ee7b1a15b0b8e308fefa5b87a55c17a1e670816f9c8ee727a501269db9143113c3f82769496307761aa63a02d8611a4b7c93f37f072232e17e67e0ff6f", 0xde}, {&(0x7f0000000600)="6eb89b124559b62608a4238f15d5cfd06e09e7b6a1c1afa2044e289000574113b73c579d397374f39955f5ce55dda081d26673655be618c5b1344e4102ba99352bd1f8d3f3f5d6b62f335ebd3425b200f64c558e0ab694abbf9fadc6acc803e330b6d9e9b9f641c0b80c2d924b33fb58b2ff237c", 0x74}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000001c0)="f38356", 0x3}, {&(0x7f0000000580)="4d21aaba", 0x4}, {&(0x7f0000000680)="54061cb07ca631a2b9ee1ae333b031f89a24e8ce36bf3159", 0x18}], 0x9}, 0x20004050) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0xa1d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x14, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331f", 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00') r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000b80)={'fscrypt:', @desc1}, &(0x7f0000000bc0)={0x0, "0e02b987e64cabad0397665488752d07fde1610998e93498521c4828cd1d32520751887d1fb31efc1c9179e496d0ab884581239fef74daf24ecb660367a5445a", 0x30}, 0x48, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x390, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) clock_gettime(0x0, 0x0) 36.88384ms ago: executing program 6 (id=24492): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x40000005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semtimedop(0x0, &(0x7f0000000340)=[{0x2, 0x40, 0x800}, {0x1, 0x9, 0x1000}], 0x2, &(0x7f0000001480)={0x0, 0x989680}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xb, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x8004745a, 0x2000000c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r9, &(0x7f0000001500)=ANY=[@ANYBLOB="2b63707520c6e9dde88a151624cb813b6f53c8ba9d15b0fccf097f7be0d1ad6dc79767f899ef4bd6a481a993a3103f57e2f74ffac72b80262ad973d41fad16c01ce2c4e11a412898ec8547f8f463843b612ecabd8a705a9810b3225ddb4ade6e02a13d8223223b3a20e371f90a43bae8994a5c16fb810bc09d53ac1a874b41d7c64d5e0f3f3463659b0f5be2f943811bc4fb67a8b17df9eb7cc8cd24335a4deae50b"], 0x5) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 26.82537ms ago: executing program 2 (id=24493): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0x6, 0x7, 0x5}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@test_dummy_encryption_v1}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid, 0x32}]}, 0x1b, 0x4ed, &(0x7f0000000a40)="$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") write$sndseq(r2, &(0x7f0000000080)=[{0x5, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000280)='%\x00', 0x4) io_uring_setup(0x3eae, &(0x7f0000000080)) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x1a, r6, 0x1, 0x3, 0x6, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000900)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 0s ago: executing program 2 (id=24494): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") (async) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x5, 0x1, 0x56, 0x0, 0x0, 0x80400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_config_ext={0xa71, 0x3ff}, 0x80, 0x2757, 0x7, 0x5, 0xd, 0x7, 0x6, 0x0, 0xd, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x20000000000002, 0x100000001}) (async) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x1}) (async) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x40000000000004, 0xfffffffffffffffc}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async) write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000"], 0x78) (async) close(r1) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ain item tag 0x0 [ 1056.652173][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.659648][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.667087][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.674550][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.681956][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.689460][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.697109][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.704542][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.711988][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.719456][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.726914][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.734664][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.742140][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.749688][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.757473][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.765312][ T3374] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1056.774113][ T3374] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1056.874562][ T1532] bond0: (slave bridge0): Releasing backup interface [ 1056.893542][ T1532] bridge_slave_0: left allmulticast mode [ 1056.899248][ T1532] bridge_slave_0: left promiscuous mode [ 1056.904943][ T1532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.918461][ T1532] bridge_slave_1: left allmulticast mode [ 1056.924171][ T1532] bridge_slave_1: left promiscuous mode [ 1056.929866][ T1532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.942371][ T1532] bond0: (slave bond_slave_0): Releasing backup interface [ 1056.953331][ T1532] bond0: (slave bond_slave_1): Releasing backup interface [ 1056.969935][ T1532] team0: Port device team_slave_0 removed [ 1056.983114][ T1532] team0: Port device team_slave_1 removed [ 1056.991073][ T1532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.998581][ T1532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.010646][ T1532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.018274][ T1532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.102000][ T1541] FAULT_INJECTION: forcing a failure. [ 1057.102000][ T1541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.115242][ T1541] CPU: 0 UID: 0 PID: 1541 Comm: syz.1.23685 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1057.127198][ T1541] Tainted: [W]=WARN [ 1057.131100][ T1541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1057.141298][ T1541] Call Trace: [ 1057.144573][ T1541] [ 1057.147551][ T1541] dump_stack_lvl+0xf2/0x150 [ 1057.152280][ T1541] dump_stack+0x15/0x20 [ 1057.156506][ T1541] should_fail_ex+0x223/0x230 [ 1057.161257][ T1541] should_fail+0xb/0x10 [ 1057.165438][ T1541] should_fail_usercopy+0x1a/0x20 [ 1057.170480][ T1541] _copy_to_user+0x20/0xa0 [ 1057.174896][ T1541] pagemap_read+0x3af/0x610 [ 1057.179518][ T1541] ? __pfx_pagemap_read+0x10/0x10 [ 1057.184607][ T1541] vfs_read+0x1a2/0x700 [ 1057.188818][ T1541] ? __fget_files+0x17c/0x1c0 [ 1057.193554][ T1541] ? __rcu_read_unlock+0x4e/0x70 [ 1057.198519][ T1541] ? __fget_files+0x17c/0x1c0 [ 1057.203214][ T1541] __x64_sys_pread64+0xf6/0x150 [ 1057.208142][ T1541] x64_sys_call+0x26ee/0x2dc0 [ 1057.212834][ T1541] do_syscall_64+0xc9/0x1c0 [ 1057.217348][ T1541] ? clear_bhb_loop+0x55/0xb0 [ 1057.222035][ T1541] ? clear_bhb_loop+0x55/0xb0 [ 1057.222921][ T1545] lo speed is unknown, defaulting to 1000 [ 1057.226706][ T1541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.238444][ T1541] RIP: 0033:0x7f4bc13a0809 [ 1057.242855][ T1541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.262499][ T1541] RSP: 002b:00007f4bbfa17058 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1057.270972][ T1541] RAX: ffffffffffffffda RBX: 00007f4bc1565fa0 RCX: 00007f4bc13a0809 [ 1057.278953][ T1541] RDX: 0000000000200000 RSI: 0000000020001240 RDI: 0000000000000003 [ 1057.286937][ T1541] RBP: 00007f4bbfa170a0 R08: 0000000000000000 R09: 0000000000000000 [ 1057.295353][ T1541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.303356][ T1541] R13: 0000000000000000 R14: 00007f4bc1565fa0 R15: 00007fffe5aaead8 [ 1057.311431][ T1541] [ 1057.478044][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x1 [ 1057.485588][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.493085][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.500482][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x1 [ 1057.508055][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.515496][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.522919][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.530610][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.538069][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.545615][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.553048][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.560500][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.567987][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.575388][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.582896][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.590394][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.597863][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.605285][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.612737][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.620162][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.627576][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.635066][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.642496][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.649896][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.657324][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.664740][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.672133][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.679804][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.687294][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.694736][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.702150][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.709631][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.717116][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.724585][ T3374] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1057.737037][ T3374] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1057.773775][ T1566] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1057.872836][ T1570] xt_hashlimit: max too large, truncated to 1048576 [ 1057.882908][ T1570] IPv6: Can't replace route, no match found [ 1057.911174][ T1572] syz.1.23694[1572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.911217][ T1572] syz.1.23694[1572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.923004][ T1572] syz.1.23694[1572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1058.248167][ T1589] macsec1: entered allmulticast mode [ 1058.265751][ T1589] hsr0: entered allmulticast mode [ 1058.270862][ T1589] hsr_slave_0: entered allmulticast mode [ 1058.276565][ T1589] hsr_slave_1: entered allmulticast mode [ 1058.286818][ T1589] hsr0: left allmulticast mode [ 1058.291724][ T1589] hsr_slave_0: left allmulticast mode [ 1058.297396][ T1589] hsr_slave_1: left allmulticast mode [ 1058.301476][ T1591] xt_hashlimit: max too large, truncated to 1048576 [ 1058.333023][ T1593] macsec1: entered allmulticast mode [ 1058.338438][ T1593] hsr0: entered allmulticast mode [ 1058.343455][ T1593] hsr_slave_0: entered allmulticast mode [ 1058.349141][ T1593] hsr_slave_1: entered allmulticast mode [ 1058.356494][ T1593] hsr0: left allmulticast mode [ 1058.361398][ T1593] hsr_slave_0: left allmulticast mode [ 1058.366953][ T1593] hsr_slave_1: left allmulticast mode [ 1058.392263][ T1595] xt_hashlimit: max too large, truncated to 1048576 [ 1058.402086][ T1595] IPv6: Can't replace route, no match found [ 1058.460318][ T1599] macsec1: entered allmulticast mode [ 1058.465730][ T1599] hsr0: entered allmulticast mode [ 1058.470862][ T1599] hsr_slave_0: entered allmulticast mode [ 1058.477657][ T1599] hsr_slave_1: entered allmulticast mode [ 1058.491992][ T1599] hsr0: left allmulticast mode [ 1058.496993][ T1599] hsr_slave_0: left allmulticast mode [ 1058.502447][ T1599] hsr_slave_1: left allmulticast mode [ 1058.576628][ T1607] FAULT_INJECTION: forcing a failure. [ 1058.576628][ T1607] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.589553][ T1607] CPU: 1 UID: 0 PID: 1607 Comm: syz.3.23710 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1058.601981][ T1607] Tainted: [W]=WARN [ 1058.605907][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1058.616363][ T1607] Call Trace: [ 1058.619731][ T1607] [ 1058.622742][ T1607] dump_stack_lvl+0xf2/0x150 [ 1058.627408][ T1607] dump_stack+0x15/0x20 [ 1058.631665][ T1607] should_fail_ex+0x223/0x230 [ 1058.636431][ T1607] should_failslab+0x8f/0xb0 [ 1058.641063][ T1607] __kmalloc_noprof+0xab/0x3f0 [ 1058.645837][ T1607] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 1058.652176][ T1607] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 1058.658531][ T1607] ? ns_capable+0x7d/0xb0 [ 1058.662854][ T1607] genl_rcv_msg+0x470/0x6c0 [ 1058.667396][ T1607] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1058.672784][ T1607] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1058.678620][ T1607] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1058.684272][ T1607] ? __dev_queue_xmit+0xb6e/0x2090 [ 1058.689403][ T1607] ? ref_tracker_free+0x3a5/0x410 [ 1058.694505][ T1607] ? __dev_queue_xmit+0x186/0x2090 [ 1058.699707][ T1607] netlink_rcv_skb+0x12c/0x230 [ 1058.704549][ T1607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1058.709621][ T1607] genl_rcv+0x28/0x40 [ 1058.713632][ T1607] netlink_unicast+0x599/0x670 [ 1058.718395][ T1607] netlink_sendmsg+0x5cc/0x6e0 [ 1058.723157][ T1607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.728468][ T1607] __sock_sendmsg+0x140/0x180 [ 1058.733145][ T1607] ____sys_sendmsg+0x312/0x410 [ 1058.737909][ T1607] __sys_sendmsg+0x19d/0x230 [ 1058.742502][ T1607] __x64_sys_sendmsg+0x46/0x50 [ 1058.747319][ T1607] x64_sys_call+0x2734/0x2dc0 [ 1058.752000][ T1607] do_syscall_64+0xc9/0x1c0 [ 1058.756498][ T1607] ? clear_bhb_loop+0x55/0xb0 [ 1058.761252][ T1607] ? clear_bhb_loop+0x55/0xb0 [ 1058.765922][ T1607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.771823][ T1607] RIP: 0033:0x7f0818320809 [ 1058.776315][ T1607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.796051][ T1607] RSP: 002b:00007f0816997058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.804647][ T1607] RAX: ffffffffffffffda RBX: 00007f08184e5fa0 RCX: 00007f0818320809 [ 1058.812607][ T1607] RDX: 0000000004000054 RSI: 0000000020000480 RDI: 0000000000000003 [ 1058.820660][ T1607] RBP: 00007f08169970a0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.828688][ T1607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.836661][ T1607] R13: 0000000000000000 R14: 00007f08184e5fa0 R15: 00007ffff72ff3f8 [ 1058.844631][ T1607] [ 1058.912444][ T1619] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1058.971351][ T1623] macsec1: entered allmulticast mode [ 1058.976725][ T1623] hsr0: entered allmulticast mode [ 1058.981924][ T1623] hsr_slave_0: entered allmulticast mode [ 1058.987650][ T1623] hsr_slave_1: entered allmulticast mode [ 1058.996519][ T1623] hsr0: left allmulticast mode [ 1059.001409][ T1623] hsr_slave_0: left allmulticast mode [ 1059.006792][ T1623] hsr_slave_1: left allmulticast mode [ 1060.080944][ T1665] netlink: 'syz.3.23732': attribute type 10 has an invalid length. [ 1060.092132][ T1665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1060.951041][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 1060.951054][ T29] audit: type=1326 audit(1041.543:113481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1060.983413][ T29] audit: type=1326 audit(1041.580:113482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.006591][ T29] audit: type=1326 audit(1041.580:113483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.029893][ T29] audit: type=1326 audit(1041.580:113484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.053156][ T29] audit: type=1326 audit(1041.580:113485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c871bf170 code=0x7ffc0000 [ 1061.076905][ T29] audit: type=1326 audit(1041.580:113486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.100725][ T29] audit: type=1326 audit(1041.580:113487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.123808][ T29] audit: type=1326 audit(1041.580:113488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.147012][ T29] audit: type=1326 audit(1041.580:113489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.170274][ T29] audit: type=1326 audit(1041.580:113490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.8.23741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1061.219135][ T1689] macsec1: entered allmulticast mode [ 1061.224574][ T1689] hsr0: entered allmulticast mode [ 1061.229690][ T1689] hsr_slave_0: entered allmulticast mode [ 1061.235525][ T1689] hsr_slave_1: entered allmulticast mode [ 1061.243033][ T1689] hsr0: left allmulticast mode [ 1061.247911][ T1689] hsr_slave_0: left allmulticast mode [ 1061.253319][ T1689] hsr_slave_1: left allmulticast mode [ 1061.350314][ T1700] netlink: 72 bytes leftover after parsing attributes in process `syz.8.23747'. [ 1061.513734][ T1719] lo speed is unknown, defaulting to 1000 [ 1061.597514][ T1722] bond0: (slave bridge0): Releasing backup interface [ 1061.700465][ T1726] macsec1: entered allmulticast mode [ 1061.705886][ T1726] hsr0: entered allmulticast mode [ 1061.710943][ T1726] hsr_slave_0: entered allmulticast mode [ 1061.716653][ T1726] hsr_slave_1: entered allmulticast mode [ 1061.728397][ T1726] hsr0: left allmulticast mode [ 1061.733311][ T1726] hsr_slave_0: left allmulticast mode [ 1061.738858][ T1726] hsr_slave_1: left allmulticast mode [ 1061.897414][ T1734] FAULT_INJECTION: forcing a failure. [ 1061.897414][ T1734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.910610][ T1734] CPU: 0 UID: 0 PID: 1734 Comm: syz.6.23761 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1061.922588][ T1734] Tainted: [W]=WARN [ 1061.926392][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1061.936517][ T1734] Call Trace: [ 1061.940544][ T1734] [ 1061.943680][ T1734] dump_stack_lvl+0xf2/0x150 [ 1061.948393][ T1734] dump_stack+0x15/0x20 [ 1061.952624][ T1734] should_fail_ex+0x223/0x230 [ 1061.958257][ T1734] should_fail+0xb/0x10 [ 1061.962430][ T1734] should_fail_usercopy+0x1a/0x20 [ 1061.967492][ T1734] _copy_to_user+0x20/0xa0 [ 1061.971955][ T1734] simple_read_from_buffer+0xa0/0x110 [ 1061.977353][ T1734] proc_fail_nth_read+0xf9/0x140 [ 1061.982339][ T1734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.987968][ T1734] vfs_read+0x1a2/0x700 [ 1061.992180][ T1734] ? __rcu_read_unlock+0x4e/0x70 [ 1061.997293][ T1734] ? __fget_files+0x17c/0x1c0 [ 1062.001995][ T1734] ksys_read+0xe8/0x1b0 [ 1062.006247][ T1734] __x64_sys_read+0x42/0x50 [ 1062.011211][ T1734] x64_sys_call+0x2874/0x2dc0 [ 1062.016353][ T1734] do_syscall_64+0xc9/0x1c0 [ 1062.021011][ T1734] ? clear_bhb_loop+0x55/0xb0 [ 1062.025860][ T1734] ? clear_bhb_loop+0x55/0xb0 [ 1062.030624][ T1734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.036635][ T1734] RIP: 0033:0x7f583f5af21c [ 1062.041224][ T1734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1062.060869][ T1734] RSP: 002b:00007f583dc27050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1062.069399][ T1734] RAX: ffffffffffffffda RBX: 00007f583f775fa0 RCX: 00007f583f5af21c [ 1062.077544][ T1734] RDX: 000000000000000f RSI: 00007f583dc270b0 RDI: 0000000000000004 [ 1062.085771][ T1734] RBP: 00007f583dc270a0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.093934][ T1734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.101951][ T1734] R13: 0000000000000000 R14: 00007f583f775fa0 R15: 00007ffe887b8918 [ 1062.109943][ T1734] [ 1062.140153][ T1736] netlink: 28 bytes leftover after parsing attributes in process `syz.6.23762'. [ 1062.258822][ T1741] lo speed is unknown, defaulting to 1000 [ 1062.274007][ T1743] syz.2.23765[1743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.274917][ T1743] syz.2.23765[1743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.287365][ T1743] syz.2.23765[1743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.446212][ T1748] bond0: (slave bridge0): Releasing backup interface [ 1062.637284][ T1759] FAULT_INJECTION: forcing a failure. [ 1062.637284][ T1759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.650649][ T1759] CPU: 0 UID: 0 PID: 1759 Comm: syz.2.23773 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1062.662565][ T1759] Tainted: [W]=WARN [ 1062.666424][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1062.676575][ T1759] Call Trace: [ 1062.679955][ T1759] [ 1062.682892][ T1759] dump_stack_lvl+0xf2/0x150 [ 1062.687551][ T1759] dump_stack+0x15/0x20 [ 1062.691714][ T1759] should_fail_ex+0x223/0x230 [ 1062.696420][ T1759] should_fail+0xb/0x10 [ 1062.700598][ T1759] should_fail_usercopy+0x1a/0x20 [ 1062.705655][ T1759] _copy_from_user+0x1e/0xb0 [ 1062.710291][ T1759] __x64_sys_signalfd+0x7c/0xe0 [ 1062.715315][ T1759] x64_sys_call+0x2c70/0x2dc0 [ 1062.720030][ T1759] do_syscall_64+0xc9/0x1c0 [ 1062.724560][ T1759] ? clear_bhb_loop+0x55/0xb0 [ 1062.729322][ T1759] ? clear_bhb_loop+0x55/0xb0 [ 1062.734039][ T1759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.740419][ T1759] RIP: 0033:0x7fbcd9310809 [ 1062.744911][ T1759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.764714][ T1759] RSP: 002b:00007fbcd7987058 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 1062.773173][ T1759] RAX: ffffffffffffffda RBX: 00007fbcd94d5fa0 RCX: 00007fbcd9310809 [ 1062.781285][ T1759] RDX: 0000000000000008 RSI: 0000000020000080 RDI: ffffffffffffffff [ 1062.789274][ T1759] RBP: 00007fbcd79870a0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.797273][ T1759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.805339][ T1759] R13: 0000000000000001 R14: 00007fbcd94d5fa0 R15: 00007fffd03087d8 [ 1062.813442][ T1759] [ 1062.863268][ T1767] xt_hashlimit: max too large, truncated to 1048576 [ 1062.876427][ T1767] IPv6: Can't replace route, no match found [ 1063.011341][ T1777] lo speed is unknown, defaulting to 1000 [ 1063.095355][ T1786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1786 comm=syz.2.23784 [ 1063.197973][ T1788] macsec1: entered allmulticast mode [ 1063.203505][ T1788] hsr0: entered allmulticast mode [ 1063.208594][ T1788] hsr_slave_0: entered allmulticast mode [ 1063.214264][ T1788] hsr_slave_1: entered allmulticast mode [ 1063.265591][ T1788] hsr0: left allmulticast mode [ 1063.270433][ T1788] hsr_slave_0: left allmulticast mode [ 1063.275950][ T1788] hsr_slave_1: left allmulticast mode [ 1063.405968][ T1791] netlink: 'syz.6.23785': attribute type 10 has an invalid length. [ 1063.434092][ T1791] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1063.453080][ T1793] netlink: 'syz.2.23787': attribute type 3 has an invalid length. [ 1063.461335][ T1793] netlink: 'syz.2.23787': attribute type 3 has an invalid length. [ 1063.477021][ T1793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23787'. [ 1063.527778][ T1795] xt_hashlimit: max too large, truncated to 1048576 [ 1063.539313][ T1795] IPv6: Can't replace route, no match found [ 1063.567389][ T1799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23790'. [ 1063.613507][ T1803] FAULT_INJECTION: forcing a failure. [ 1063.613507][ T1803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.626637][ T1803] CPU: 0 UID: 0 PID: 1803 Comm: syz.2.23792 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1063.638879][ T1803] Tainted: [W]=WARN [ 1063.642756][ T1803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1063.652929][ T1803] Call Trace: [ 1063.656295][ T1803] [ 1063.659289][ T1803] dump_stack_lvl+0xf2/0x150 [ 1063.663865][ T1803] dump_stack+0x15/0x20 [ 1063.668067][ T1803] should_fail_ex+0x223/0x230 [ 1063.672821][ T1803] should_fail+0xb/0x10 [ 1063.677008][ T1803] should_fail_usercopy+0x1a/0x20 [ 1063.682043][ T1803] _copy_to_user+0x20/0xa0 [ 1063.686752][ T1803] simple_read_from_buffer+0xa0/0x110 [ 1063.692178][ T1803] proc_fail_nth_read+0xf9/0x140 [ 1063.697169][ T1803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1063.702742][ T1803] vfs_read+0x1a2/0x700 [ 1063.706955][ T1803] ? __rcu_read_unlock+0x4e/0x70 [ 1063.711925][ T1803] ? __fget_files+0x17c/0x1c0 [ 1063.716599][ T1803] ksys_read+0xe8/0x1b0 [ 1063.720802][ T1803] __x64_sys_read+0x42/0x50 [ 1063.725388][ T1803] x64_sys_call+0x2874/0x2dc0 [ 1063.730129][ T1803] do_syscall_64+0xc9/0x1c0 [ 1063.734627][ T1803] ? clear_bhb_loop+0x55/0xb0 [ 1063.739403][ T1803] ? clear_bhb_loop+0x55/0xb0 [ 1063.744105][ T1803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.750279][ T1803] RIP: 0033:0x7fbcd930f21c [ 1063.754704][ T1803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 1063.774440][ T1803] RSP: 002b:00007fbcd7987050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.782861][ T1803] RAX: ffffffffffffffda RBX: 00007fbcd94d5fa0 RCX: 00007fbcd930f21c [ 1063.790923][ T1803] RDX: 000000000000000f RSI: 00007fbcd79870b0 RDI: 0000000000000004 [ 1063.798996][ T1803] RBP: 00007fbcd79870a0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.799012][ T1803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.799025][ T1803] R13: 0000000000000000 R14: 00007fbcd94d5fa0 R15: 00007fffd03087d8 [ 1063.823829][ T1803] [ 1063.851464][ T1811] xt_hashlimit: max too large, truncated to 1048576 [ 1063.874555][ T1813] netlink: 'syz.2.23797': attribute type 3 has an invalid length. [ 1063.882512][ T1813] netlink: 'syz.2.23797': attribute type 3 has an invalid length. [ 1063.890720][ T1813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23797'. [ 1063.962645][ T1821] netlink: 268 bytes leftover after parsing attributes in process `syz.2.23800'. [ 1064.016848][ T1826] xt_hashlimit: max too large, truncated to 1048576 [ 1064.030021][ T1826] IPv6: Can't replace route, no match found [ 1064.062960][ T1830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.104969][ T1830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.157464][ T1830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.210712][ T1830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.239910][ T1842] xt_hashlimit: max too large, truncated to 1048576 [ 1064.268793][ T1830] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.284171][ T1830] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.296719][ T1830] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.308406][ T1830] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.636567][ T1865] netlink: 'syz.1.23815': attribute type 10 has an invalid length. [ 1064.646772][ T1865] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1065.065770][ T1878] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.098131][ T1880] syz.2.23822[1880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1065.098173][ T1880] syz.2.23822[1880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1065.109766][ T1880] syz.2.23822[1880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1065.131656][ T1878] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.195411][ T1878] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.268782][ T1878] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.322648][ T1878] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.333532][ T1878] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.344712][ T1878] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.356629][ T1878] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.432917][ T1891] xt_hashlimit: max too large, truncated to 1048576 [ 1065.443933][ T1891] IPv6: Can't replace route, no match found [ 1065.444308][ T1893] xt_hashlimit: max too large, truncated to 1048576 [ 1066.120074][ T1907] lo speed is unknown, defaulting to 1000 [ 1066.385337][ T1910] syz.8.23833[1910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1066.385395][ T1910] syz.8.23833[1910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1066.400485][ T1910] syz.8.23833[1910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1066.436676][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 1066.436691][ T29] audit: type=1326 audit(1046.678:113794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.487211][ T29] audit: type=1326 audit(1046.725:113795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.510440][ T29] audit: type=1326 audit(1046.725:113796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.533640][ T29] audit: type=1326 audit(1046.725:113797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.557007][ T29] audit: type=1326 audit(1046.725:113798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.580286][ T29] audit: type=1326 audit(1046.725:113799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.603455][ T29] audit: type=1326 audit(1046.725:113800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.626649][ T29] audit: type=1326 audit(1046.725:113801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.649987][ T29] audit: type=1326 audit(1046.725:113802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.673339][ T29] audit: type=1326 audit(1046.725:113803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1911 comm="syz.2.23834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1066.815814][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x1 [ 1066.823310][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.830811][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.838482][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x1 [ 1066.846049][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.853511][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.861047][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.868741][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.876308][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.883738][ T1924] xt_hashlimit: max too large, truncated to 1048576 [ 1066.883929][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.897904][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.905442][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.912987][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.920703][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.928830][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.936275][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.943692][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.951144][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.958554][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.966012][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.973452][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.980899][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.988473][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.989077][ T1927] lo speed is unknown, defaulting to 1000 [ 1066.995909][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1066.995937][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.017368][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.024843][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.032309][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.039754][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.047151][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.054972][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.062619][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.070052][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.078041][ T9] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1067.091385][ T9] hid-generic 0000:0000:0000.00B3: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1067.500066][ T1944] lo speed is unknown, defaulting to 1000 [ 1067.550618][ T1948] netlink: 'syz.6.23842': attribute type 10 has an invalid length. [ 1068.071688][ T1958] xt_hashlimit: max too large, truncated to 1048576 [ 1068.256045][ T1963] lo speed is unknown, defaulting to 1000 [ 1068.454369][ T1972] netlink: 'syz.3.23853': attribute type 10 has an invalid length. [ 1068.881297][ T1987] xt_hashlimit: max too large, truncated to 1048576 [ 1068.890424][ T1987] IPv6: Can't replace route, no match found [ 1070.010187][ T2005] netlink: 'syz.8.23869': attribute type 3 has an invalid length. [ 1070.018116][ T2005] netlink: 'syz.8.23869': attribute type 3 has an invalid length. [ 1070.026209][ T2005] netlink: 16 bytes leftover after parsing attributes in process `syz.8.23869'. [ 1070.119095][ T2008] lo speed is unknown, defaulting to 1000 [ 1070.371563][ T2020] lo speed is unknown, defaulting to 1000 [ 1071.200293][ T2035] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1071.253337][ T2038] netlink: 'syz.3.23881': attribute type 10 has an invalid length. [ 1071.276283][ T2040] macsec1: entered allmulticast mode [ 1071.281688][ T2040] hsr0: entered allmulticast mode [ 1071.286779][ T2040] hsr_slave_0: entered allmulticast mode [ 1071.292615][ T2040] hsr_slave_1: entered allmulticast mode [ 1071.303776][ T2040] hsr0: left allmulticast mode [ 1071.308589][ T2040] hsr_slave_0: left allmulticast mode [ 1071.314191][ T2040] hsr_slave_1: left allmulticast mode [ 1071.490259][ T2054] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.550537][ T2054] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.621581][ T2054] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.653407][ T2068] lo speed is unknown, defaulting to 1000 [ 1071.693097][ T2054] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.823334][ T2054] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.862712][ T2054] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.877248][ T2054] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.888795][ T2054] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.002451][ T2082] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.056213][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 1072.056228][ T29] audit: type=1326 audit(1051.935:113934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.097988][ T2082] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.106761][ T29] audit: type=1326 audit(1051.963:113935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.131238][ T29] audit: type=1326 audit(1051.963:113936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.154784][ T29] audit: type=1326 audit(1051.963:113937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.178296][ T29] audit: type=1326 audit(1051.963:113938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.202517][ T29] audit: type=1326 audit(1051.963:113939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.225810][ T29] audit: type=1326 audit(1051.963:113940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.249023][ T29] audit: type=1326 audit(1051.963:113941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.272256][ T29] audit: type=1326 audit(1051.963:113942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.295434][ T29] audit: type=1326 audit(1051.963:113943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2086 comm="syz.8.23901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1072.366824][ T2082] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.440676][ T2082] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.470392][ T2096] xt_hashlimit: max too large, truncated to 1048576 [ 1072.679295][ T2106] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.717911][ T2106] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.772081][ T2106] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.824614][ T2106] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.869645][ T2106] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.881388][ T2106] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.892802][ T2106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.904121][ T2106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.060071][ T2116] lo speed is unknown, defaulting to 1000 [ 1073.618013][ T2125] netlink: 'syz.8.23916': attribute type 10 has an invalid length. [ 1073.629194][ T2125] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1073.995694][ T2128] lo speed is unknown, defaulting to 1000 [ 1074.141191][ T2135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.184225][ T2135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.239237][ T2135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.302123][ T2135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.649458][ T2082] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.660459][ T2082] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.671537][ T2082] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.682874][ T2082] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.743289][ T2146] macsec1: entered allmulticast mode [ 1075.748632][ T2146] hsr0: entered allmulticast mode [ 1075.753692][ T2146] hsr_slave_0: entered allmulticast mode [ 1075.759346][ T2146] hsr_slave_1: entered allmulticast mode [ 1075.766940][ T2146] hsr0: left allmulticast mode [ 1075.771851][ T2146] hsr_slave_0: left allmulticast mode [ 1075.777434][ T2146] hsr_slave_1: left allmulticast mode [ 1075.859677][ T2150] xt_hashlimit: max too large, truncated to 1048576 [ 1075.938065][ T2159] netlink: 'syz.6.23928': attribute type 10 has an invalid length. [ 1076.122887][ T2166] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.160362][ T2166] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.213718][ T2166] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.277793][ T2166] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.322971][ T2166] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.336952][ T2166] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.348527][ T2166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.364944][ T2166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.377601][ T2171] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1076.395688][ T2171] bond0: (slave bridge0): Releasing backup interface [ 1076.449152][ T2175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23938'. [ 1076.607496][ T2185] lo speed is unknown, defaulting to 1000 [ 1076.808749][ T2194] lo speed is unknown, defaulting to 1000 [ 1077.308025][ T2135] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.319460][ T2135] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.333531][ T2135] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.372358][ T2135] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.433160][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 1077.433176][ T29] audit: type=1326 audit(1056.967:114043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.463937][ T29] audit: type=1326 audit(1056.967:114044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.474823][ T2203] xt_hashlimit: max too large, truncated to 1048576 [ 1077.487318][ T29] audit: type=1326 audit(1056.967:114045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.517005][ T29] audit: type=1326 audit(1056.967:114046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.540924][ T29] audit: type=1326 audit(1056.967:114047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.564395][ T29] audit: type=1326 audit(1056.967:114048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.588001][ T29] audit: type=1326 audit(1056.967:114049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.611269][ T29] audit: type=1326 audit(1056.967:114050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.634414][ T29] audit: type=1326 audit(1056.967:114051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.657708][ T29] audit: type=1326 audit(1056.967:114052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1077.685249][ T2205] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.743686][ T2205] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.810714][ T2205] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.879220][ T2205] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.947273][ T2210] macsec1: entered allmulticast mode [ 1077.952690][ T2210] hsr0: entered allmulticast mode [ 1077.957815][ T2210] hsr_slave_0: entered allmulticast mode [ 1077.963990][ T2210] hsr_slave_1: entered allmulticast mode [ 1077.971901][ T2210] hsr0: left allmulticast mode [ 1077.976779][ T2210] hsr_slave_0: left allmulticast mode [ 1077.982193][ T2210] hsr_slave_1: left allmulticast mode [ 1078.801079][ T2236] lo speed is unknown, defaulting to 1000 [ 1079.188291][ T2240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23961'. [ 1079.201333][ T2240] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.248241][ T2240] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.312253][ T2240] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.376840][ T2240] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.434166][ T2240] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.445704][ T2240] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.456823][ T2240] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.468149][ T2240] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.166300][ T2255] netlink: 'syz.2.23967': attribute type 10 has an invalid length. [ 1080.176400][ T2255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1080.636771][ T2259] macsec1: entered allmulticast mode [ 1080.642236][ T2259] hsr0: entered allmulticast mode [ 1080.647304][ T2259] hsr_slave_0: entered allmulticast mode [ 1080.652955][ T2259] hsr_slave_1: entered allmulticast mode [ 1080.661039][ T2259] hsr0: left allmulticast mode [ 1080.665912][ T2259] hsr_slave_0: left allmulticast mode [ 1080.671405][ T2259] hsr_slave_1: left allmulticast mode [ 1080.689455][ T2261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1080.804461][ T2269] lo speed is unknown, defaulting to 1000 [ 1080.812432][ T2268] lo speed is unknown, defaulting to 1000 [ 1081.626005][ T2275] macsec1: entered allmulticast mode [ 1081.631422][ T2275] hsr0: entered allmulticast mode [ 1081.636524][ T2275] hsr_slave_0: entered allmulticast mode [ 1081.642388][ T2275] hsr_slave_1: entered allmulticast mode [ 1081.649658][ T2275] hsr0: left allmulticast mode [ 1081.654574][ T2275] hsr_slave_0: left allmulticast mode [ 1081.659944][ T2275] hsr_slave_1: left allmulticast mode [ 1081.726591][ T2277] netlink: 'syz.8.23975': attribute type 3 has an invalid length. [ 1081.734583][ T2277] netlink: 'syz.8.23975': attribute type 3 has an invalid length. [ 1081.742651][ T2277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.23975'. [ 1081.902658][ T2205] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.927924][ T2205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.956686][ T2205] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.986503][ T2205] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.109047][ T2291] netlink: 'syz.3.23981': attribute type 3 has an invalid length. [ 1082.117009][ T2291] netlink: 'syz.3.23981': attribute type 3 has an invalid length. [ 1082.129372][ T2291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23981'. [ 1082.168833][ T2298] macsec1: entered allmulticast mode [ 1082.174188][ T2298] hsr0: entered allmulticast mode [ 1082.179456][ T2298] hsr_slave_0: entered allmulticast mode [ 1082.185116][ T2298] hsr_slave_1: entered allmulticast mode [ 1082.194056][ T2298] hsr0: left allmulticast mode [ 1082.198948][ T2298] hsr_slave_0: left allmulticast mode [ 1082.204474][ T2298] hsr_slave_1: left allmulticast mode [ 1082.292511][ T2307] lo speed is unknown, defaulting to 1000 [ 1082.312654][ T2309] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.370997][ T2309] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.433813][ T2309] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.508537][ T2309] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.568648][ T2309] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.584423][ T2309] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.600257][ T2309] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.617375][ T2309] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.791853][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 1082.791867][ T29] audit: type=1326 audit(1061.972:114475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1082.821224][ T29] audit: type=1326 audit(1061.972:114476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc133c149 code=0x7ffc0000 [ 1082.844378][ T29] audit: type=1326 audit(1061.972:114477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1082.877641][ T29] audit: type=1326 audit(1062.056:114478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1082.901537][ T29] audit: type=1326 audit(1062.056:114479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc133c149 code=0x7ffc0000 [ 1082.925094][ T29] audit: type=1326 audit(1062.056:114480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1082.948784][ T29] audit: type=1326 audit(1062.056:114481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1082.972020][ T29] audit: type=1326 audit(1062.056:114482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc133c149 code=0x7ffc0000 [ 1082.995107][ T29] audit: type=1326 audit(1062.056:114483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1083.018926][ T29] audit: type=1326 audit(1062.178:114484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2302 comm="syz.1.23987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1083.084915][ T2328] syz.2.23996[2328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.085004][ T2328] syz.2.23996[2328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.096805][ T2328] syz.2.23996[2328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.324041][ T2344] @ÿ: renamed from veth0_vlan (while UP) [ 1083.346050][ T2345] netlink: 'syz.6.24002': attribute type 10 has an invalid length. [ 1083.470189][ T2353] FAULT_INJECTION: forcing a failure. [ 1083.470189][ T2353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.483408][ T2353] CPU: 1 UID: 0 PID: 2353 Comm: syz.2.24009 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1083.495340][ T2353] Tainted: [W]=WARN [ 1083.499147][ T2353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1083.510048][ T2353] Call Trace: [ 1083.513335][ T2353] [ 1083.516272][ T2353] dump_stack_lvl+0xf2/0x150 [ 1083.520952][ T2353] dump_stack+0x15/0x20 [ 1083.525104][ T2353] should_fail_ex+0x223/0x230 [ 1083.529914][ T2353] should_fail+0xb/0x10 [ 1083.534081][ T2353] should_fail_usercopy+0x1a/0x20 [ 1083.539119][ T2353] _copy_from_user+0x1e/0xb0 [ 1083.543712][ T2353] copy_msghdr_from_user+0x54/0x2a0 [ 1083.548923][ T2353] ? __fget_files+0x17c/0x1c0 [ 1083.553713][ T2353] __sys_sendmsg+0x13e/0x230 [ 1083.558343][ T2353] __x64_sys_sendmsg+0x46/0x50 [ 1083.563282][ T2353] x64_sys_call+0x2734/0x2dc0 [ 1083.568025][ T2353] do_syscall_64+0xc9/0x1c0 [ 1083.572541][ T2353] ? clear_bhb_loop+0x55/0xb0 [ 1083.577239][ T2353] ? clear_bhb_loop+0x55/0xb0 [ 1083.581940][ T2353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.587860][ T2353] RIP: 0033:0x7fbcd9310809 [ 1083.592287][ T2353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.600773][ T2358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2358 comm=syz.8.24003 [ 1083.612236][ T2353] RSP: 002b:00007fbcd7987058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.612259][ T2353] RAX: ffffffffffffffda RBX: 00007fbcd94d5fa0 RCX: 00007fbcd9310809 [ 1083.612272][ T2353] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1083.612286][ T2353] RBP: 00007fbcd79870a0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.625159][ T2360] netlink: 'syz.8.24003': attribute type 1 has an invalid length. [ 1083.633068][ T2353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.633099][ T2353] R13: 0000000000000000 R14: 00007fbcd94d5fa0 R15: 00007fffd03087d8 [ 1083.680837][ T2353] [ 1083.690509][ T2360] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1083.743170][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24010'. [ 1083.767111][ T2373] xt_hashlimit: max too large, truncated to 1048576 [ 1083.782429][ T2373] IPv6: Can't replace route, no match found [ 1083.808708][ T2368] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24011'. [ 1083.809629][ T2380] syz.3.24015[2380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.822713][ T2380] syz.3.24015[2380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.837234][ T2380] syz.3.24015[2380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1083.855768][ T2383] netlink: 'syz.8.24016': attribute type 3 has an invalid length. [ 1083.875253][ T2383] netlink: 'syz.8.24016': attribute type 3 has an invalid length. [ 1083.900546][ T2383] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24016'. [ 1083.978458][ T2389] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1083.999027][ T2389] bond0: (slave bridge0): Releasing backup interface [ 1084.162537][ T2403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24024'. [ 1084.172178][ T2403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=82 sclass=netlink_audit_socket pid=2403 comm=syz.8.24024 [ 1084.291475][ T2408] lo speed is unknown, defaulting to 1000 [ 1084.782607][ T2413] netlink: 'syz.2.24028': attribute type 3 has an invalid length. [ 1084.790846][ T2413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24028'. [ 1084.816319][ T2415] syz.2.24029[2415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.816598][ T2415] syz.2.24029[2415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.828259][ T2415] syz.2.24029[2415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1084.952179][ T2419] macsec1: entered allmulticast mode [ 1084.969133][ T2419] hsr0: entered allmulticast mode [ 1084.974139][ T2419] hsr_slave_0: entered allmulticast mode [ 1084.979812][ T2419] hsr_slave_1: entered allmulticast mode [ 1084.987169][ T2419] hsr0: left allmulticast mode [ 1084.992102][ T2419] hsr_slave_0: left allmulticast mode [ 1084.997495][ T2419] hsr_slave_1: left allmulticast mode [ 1085.062007][ T2427] syz.2.24034[2427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1085.173269][ T2432] bond0: (slave bridge0): Releasing backup interface [ 1085.377684][ T2445] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1085.490776][ T2455] xt_hashlimit: max too large, truncated to 1048576 [ 1085.499860][ T2455] IPv6: Can't replace route, no match found [ 1085.721908][ T2463] lo speed is unknown, defaulting to 1000 [ 1086.084362][ T2472] macsec1: entered allmulticast mode [ 1086.089757][ T2472] hsr0: entered allmulticast mode [ 1086.094824][ T2472] hsr_slave_0: entered allmulticast mode [ 1086.100778][ T2472] hsr_slave_1: entered allmulticast mode [ 1086.109162][ T2472] hsr0: left allmulticast mode [ 1086.114024][ T2472] hsr_slave_0: left allmulticast mode [ 1086.119482][ T2472] hsr_slave_1: left allmulticast mode [ 1086.236330][ T2482] xt_hashlimit: max too large, truncated to 1048576 [ 1086.245882][ T2482] IPv6: Can't replace route, no match found [ 1086.328134][ T2489] lo speed is unknown, defaulting to 1000 [ 1086.360032][ T2490] lo speed is unknown, defaulting to 1000 [ 1086.602213][ T2498] validate_nla: 1 callbacks suppressed [ 1086.602229][ T2498] netlink: 'syz.8.24064': attribute type 3 has an invalid length. [ 1086.615654][ T2498] netlink: 'syz.8.24064': attribute type 3 has an invalid length. [ 1086.646801][ T2498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24064'. [ 1086.719619][ T2500] macsec1: entered allmulticast mode [ 1086.724964][ T2500] hsr0: entered allmulticast mode [ 1086.730069][ T2500] hsr_slave_0: entered allmulticast mode [ 1086.735699][ T2500] hsr_slave_1: entered allmulticast mode [ 1086.763744][ T2500] hsr0: left allmulticast mode [ 1086.768667][ T2500] hsr_slave_0: left allmulticast mode [ 1086.774235][ T2500] hsr_slave_1: left allmulticast mode [ 1087.017934][ T2508] xt_hashlimit: max too large, truncated to 1048576 [ 1087.045112][ T2508] IPv6: Can't replace route, no match found [ 1087.358138][ T2514] xt_hashlimit: max too large, truncated to 1048576 [ 1087.370908][ T2514] IPv6: Can't replace route, no match found [ 1087.438112][ T2516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24073'. [ 1087.546305][ T2530] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1087.588914][ T2530] bond0: (slave bridge0): Releasing backup interface [ 1087.754716][ T2545] lo speed is unknown, defaulting to 1000 [ 1087.777029][ T2546] netlink: 'syz.3.24082': attribute type 10 has an invalid length. [ 1087.787641][ T2546] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1088.726773][ T2576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24095'. [ 1088.756053][ T2580] macsec1: entered allmulticast mode [ 1088.761618][ T2580] hsr0: entered allmulticast mode [ 1088.766667][ T2580] hsr_slave_0: entered allmulticast mode [ 1088.772362][ T2580] hsr_slave_1: entered allmulticast mode [ 1088.779917][ T2580] hsr0: left allmulticast mode [ 1088.784769][ T2580] hsr_slave_0: left allmulticast mode [ 1088.785575][ T2582] xt_hashlimit: max too large, truncated to 1048576 [ 1088.790157][ T2580] hsr_slave_1: left allmulticast mode [ 1088.807845][ T2582] IPv6: Can't replace route, no match found [ 1088.828217][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 1088.828231][ T29] audit: type=1326 audit(1067.622:114754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.857965][ T29] audit: type=1326 audit(1067.622:114755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.881256][ T29] audit: type=1326 audit(1067.622:114756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.904586][ T29] audit: type=1326 audit(1067.622:114757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.927729][ T29] audit: type=1326 audit(1067.622:114758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.950890][ T29] audit: type=1326 audit(1067.622:114759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.974154][ T29] audit: type=1326 audit(1067.622:114760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1088.997353][ T29] audit: type=1326 audit(1067.622:114761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1089.021477][ T29] audit: type=1326 audit(1067.622:114762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1089.044608][ T29] audit: type=1326 audit(1067.622:114763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.8.24098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1089.122461][ T2592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24102'. [ 1089.208572][ T2598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24105'. [ 1089.289657][ T2607] netlink: 'syz.8.24107': attribute type 10 has an invalid length. [ 1089.300311][ T2607] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1089.407154][ T2609] netlink: 'syz.2.24108': attribute type 3 has an invalid length. [ 1089.415068][ T2609] netlink: 'syz.2.24108': attribute type 3 has an invalid length. [ 1089.423046][ T2609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24108'. [ 1089.680450][ T2629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24117'. [ 1090.665940][ T2643] bpf_get_probe_write_proto: 8 callbacks suppressed [ 1090.665951][ T2643] syz.3.24124[2643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.672709][ T2643] syz.3.24124[2643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.684538][ T2643] syz.3.24124[2643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.699226][ T2643] FAULT_INJECTION: forcing a failure. [ 1090.699226][ T2643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.723820][ T2643] CPU: 1 UID: 0 PID: 2643 Comm: syz.3.24124 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1090.735799][ T2643] Tainted: [W]=WARN [ 1090.739592][ T2643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1090.749681][ T2643] Call Trace: [ 1090.753085][ T2643] [ 1090.756026][ T2643] dump_stack_lvl+0xf2/0x150 [ 1090.760741][ T2643] dump_stack+0x15/0x20 [ 1090.764889][ T2643] should_fail_ex+0x223/0x230 [ 1090.769675][ T2643] should_fail+0xb/0x10 [ 1090.773827][ T2643] should_fail_usercopy+0x1a/0x20 [ 1090.778874][ T2643] _copy_from_user+0x1e/0xb0 [ 1090.783514][ T2643] get_user_ifreq+0x8c/0x160 [ 1090.788103][ T2643] sock_do_ioctl+0xc6/0x260 [ 1090.792606][ T2643] sock_ioctl+0x46a/0x640 [ 1090.796984][ T2643] ? __pfx_sock_ioctl+0x10/0x10 [ 1090.801939][ T2643] __se_sys_ioctl+0xc9/0x140 [ 1090.806794][ T2643] __x64_sys_ioctl+0x43/0x50 [ 1090.811383][ T2643] x64_sys_call+0x1690/0x2dc0 [ 1090.816095][ T2643] do_syscall_64+0xc9/0x1c0 [ 1090.820614][ T2643] ? clear_bhb_loop+0x55/0xb0 [ 1090.825302][ T2643] ? clear_bhb_loop+0x55/0xb0 [ 1090.829968][ T2643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.835905][ T2643] RIP: 0033:0x7f0818320809 [ 1090.840594][ T2643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.860255][ T2643] RSP: 002b:00007f0816997058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.868682][ T2643] RAX: ffffffffffffffda RBX: 00007f08184e5fa0 RCX: 00007f0818320809 [ 1090.876715][ T2643] RDX: 0000000020002280 RSI: 0000000000008943 RDI: 0000000000000004 [ 1090.884691][ T2643] RBP: 00007f08169970a0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.892666][ T2643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.900734][ T2643] R13: 0000000000000000 R14: 00007f08184e5fa0 R15: 00007ffff72ff3f8 [ 1090.908727][ T2643] [ 1091.004110][ T2652] xt_hashlimit: max too large, truncated to 1048576 [ 1091.026313][ T2652] IPv6: Can't replace route, no match found [ 1091.095837][ T2654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24129'. [ 1091.187180][ T2662] netlink: 'syz.2.24131': attribute type 10 has an invalid length. [ 1091.240862][ T2662] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1091.309022][ T2671] sit0: entered allmulticast mode [ 1091.340265][ T2671] lo speed is unknown, defaulting to 1000 [ 1091.400721][ T2676] macsec1: entered allmulticast mode [ 1091.406213][ T2676] hsr0: entered allmulticast mode [ 1091.411281][ T2676] hsr_slave_0: entered allmulticast mode [ 1091.417314][ T2676] hsr_slave_1: entered allmulticast mode [ 1091.425670][ T2676] hsr0: left allmulticast mode [ 1091.430525][ T2676] hsr_slave_0: left allmulticast mode [ 1091.436032][ T2676] hsr_slave_1: left allmulticast mode [ 1091.598678][ T2682] xt_hashlimit: max too large, truncated to 1048576 [ 1091.607979][ T2682] IPv6: Can't replace route, no match found [ 1092.050718][ T2694] FAULT_INJECTION: forcing a failure. [ 1092.050718][ T2694] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.063436][ T2694] CPU: 0 UID: 0 PID: 2694 Comm: syz.8.24147 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1092.075345][ T2694] Tainted: [W]=WARN [ 1092.079186][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1092.089336][ T2694] Call Trace: [ 1092.092707][ T2694] [ 1092.095646][ T2694] dump_stack_lvl+0xf2/0x150 [ 1092.100345][ T2694] dump_stack+0x15/0x20 [ 1092.104643][ T2694] should_fail_ex+0x223/0x230 [ 1092.109358][ T2694] should_failslab+0x8f/0xb0 [ 1092.113973][ T2694] __kmalloc_node_noprof+0xad/0x410 [ 1092.119203][ T2694] ? __vmalloc_node_range_noprof+0x3dc/0xe80 [ 1092.125208][ T2694] __vmalloc_node_range_noprof+0x3dc/0xe80 [ 1092.131159][ T2694] ? ___kmalloc_large_node+0xba/0x120 [ 1092.136625][ T2694] ? __kmalloc_node_noprof+0x2f3/0x410 [ 1092.142136][ T2694] ? cgroup_rstat_updated+0x9f/0x570 [ 1092.147420][ T2694] ? __kvmalloc_node_noprof+0x72/0x170 [ 1092.152895][ T2694] ? bpf_check+0xdd/0xcfe0 [ 1092.157302][ T2694] vzalloc_noprof+0x5e/0x70 [ 1092.162065][ T2694] ? bpf_check+0xdd/0xcfe0 [ 1092.166470][ T2694] bpf_check+0xdd/0xcfe0 [ 1092.170777][ T2694] ? obj_cgroup_charge_pages+0x13d/0x1a0 [ 1092.176568][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.181576][ T2694] ? __alloc_pages_noprof+0x1bc/0x340 [ 1092.187151][ T2694] ? alloc_pages_bulk_noprof+0x324/0x650 [ 1092.192802][ T2694] ? policy_nodemask+0x2ba/0x3e0 [ 1092.197782][ T2694] ? __vmap_pages_range_noflush+0x940/0x960 [ 1092.203772][ T2694] ? _find_next_zero_bit+0x60/0x90 [ 1092.208932][ T2694] ? pcpu_block_refresh_hint+0x11f/0x180 [ 1092.214623][ T2694] ? pcpu_block_update_hint_alloc+0x1f4/0x6a0 [ 1092.220810][ T2694] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 1092.226951][ T2694] ? pcpu_chunk_relocate+0x183/0x280 [ 1092.232304][ T2694] ? __mod_memcg_state+0x122/0x280 [ 1092.237432][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.242388][ T2694] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 1092.248369][ T2694] ? bpf_prog_alloc+0x59/0x150 [ 1092.253128][ T2694] ? should_fail_ex+0xd7/0x230 [ 1092.257990][ T2694] ? selinux_bpf_prog_load+0x35/0xe0 [ 1092.263320][ T2694] ? should_failslab+0x8f/0xb0 [ 1092.268109][ T2694] ? __kmalloc_cache_noprof+0x186/0x320 [ 1092.273830][ T2694] ? selinux_bpf_prog_load+0xbb/0xe0 [ 1092.279173][ T2694] bpf_prog_load+0xed4/0x1070 [ 1092.283886][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.289001][ T2694] __sys_bpf+0x463/0x7a0 [ 1092.293259][ T2694] __x64_sys_bpf+0x43/0x50 [ 1092.297684][ T2694] x64_sys_call+0x2914/0x2dc0 [ 1092.302397][ T2694] do_syscall_64+0xc9/0x1c0 [ 1092.306907][ T2694] ? clear_bhb_loop+0x55/0xb0 [ 1092.311597][ T2694] ? clear_bhb_loop+0x55/0xb0 [ 1092.316363][ T2694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.322321][ T2694] RIP: 0033:0x7f7c871c0809 [ 1092.326756][ T2694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.346376][ T2694] RSP: 002b:00007f7c85837058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.354856][ T2694] RAX: ffffffffffffffda RBX: 00007f7c87385fa0 RCX: 00007f7c871c0809 [ 1092.362919][ T2694] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 1092.370895][ T2694] RBP: 00007f7c858370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.378864][ T2694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.386835][ T2694] R13: 0000000000000001 R14: 00007f7c87385fa0 R15: 00007ffc8160f588 [ 1092.394914][ T2694] [ 1092.398217][ T2694] syz.8.24147: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1092.415616][ T2694] CPU: 0 UID: 0 PID: 2694 Comm: syz.8.24147 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1092.427591][ T2694] Tainted: [W]=WARN [ 1092.431403][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1092.441460][ T2694] Call Trace: [ 1092.444805][ T2694] [ 1092.447828][ T2694] dump_stack_lvl+0xf2/0x150 [ 1092.452489][ T2694] dump_stack+0x15/0x20 [ 1092.456647][ T2694] warn_alloc+0x145/0x1b0 [ 1092.461035][ T2694] ? should_failslab+0x8f/0xb0 [ 1092.465888][ T2694] __vmalloc_node_range_noprof+0x473/0xe80 [ 1092.471731][ T2694] ? ___kmalloc_large_node+0xba/0x120 [ 1092.477101][ T2694] ? __kmalloc_node_noprof+0x2f3/0x410 [ 1092.482704][ T2694] ? cgroup_rstat_updated+0x9f/0x570 [ 1092.488109][ T2694] ? __kvmalloc_node_noprof+0x72/0x170 [ 1092.493565][ T2694] ? bpf_check+0xdd/0xcfe0 [ 1092.498020][ T2694] vzalloc_noprof+0x5e/0x70 [ 1092.502601][ T2694] ? bpf_check+0xdd/0xcfe0 [ 1092.507015][ T2694] bpf_check+0xdd/0xcfe0 [ 1092.511250][ T2694] ? obj_cgroup_charge_pages+0x13d/0x1a0 [ 1092.517017][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.521949][ T2694] ? __alloc_pages_noprof+0x1bc/0x340 [ 1092.527329][ T2694] ? alloc_pages_bulk_noprof+0x324/0x650 [ 1092.532976][ T2694] ? policy_nodemask+0x2ba/0x3e0 [ 1092.537917][ T2694] ? __vmap_pages_range_noflush+0x940/0x960 [ 1092.543859][ T2694] ? _find_next_zero_bit+0x60/0x90 [ 1092.549017][ T2694] ? pcpu_block_refresh_hint+0x11f/0x180 [ 1092.554822][ T2694] ? pcpu_block_update_hint_alloc+0x1f4/0x6a0 [ 1092.560918][ T2694] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 1092.566993][ T2694] ? pcpu_chunk_relocate+0x183/0x280 [ 1092.572350][ T2694] ? __mod_memcg_state+0x122/0x280 [ 1092.577466][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.582506][ T2694] ? pcpu_memcg_post_alloc_hook+0x158/0x1c0 [ 1092.588470][ T2694] ? bpf_prog_alloc+0x59/0x150 [ 1092.593255][ T2694] ? should_fail_ex+0xd7/0x230 [ 1092.598087][ T2694] ? selinux_bpf_prog_load+0x35/0xe0 [ 1092.603419][ T2694] ? should_failslab+0x8f/0xb0 [ 1092.608174][ T2694] ? __kmalloc_cache_noprof+0x186/0x320 [ 1092.613812][ T2694] ? selinux_bpf_prog_load+0xbb/0xe0 [ 1092.619171][ T2694] bpf_prog_load+0xed4/0x1070 [ 1092.623919][ T2694] ? __rcu_read_unlock+0x4e/0x70 [ 1092.628963][ T2694] __sys_bpf+0x463/0x7a0 [ 1092.633310][ T2694] __x64_sys_bpf+0x43/0x50 [ 1092.637781][ T2694] x64_sys_call+0x2914/0x2dc0 [ 1092.642468][ T2694] do_syscall_64+0xc9/0x1c0 [ 1092.647066][ T2694] ? clear_bhb_loop+0x55/0xb0 [ 1092.651779][ T2694] ? clear_bhb_loop+0x55/0xb0 [ 1092.656487][ T2694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.662402][ T2694] RIP: 0033:0x7f7c871c0809 [ 1092.666864][ T2694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.686565][ T2694] RSP: 002b:00007f7c85837058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.694994][ T2694] RAX: ffffffffffffffda RBX: 00007f7c87385fa0 RCX: 00007f7c871c0809 [ 1092.702956][ T2694] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 1092.710920][ T2694] RBP: 00007f7c858370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.718882][ T2694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.726890][ T2694] R13: 0000000000000001 R14: 00007f7c87385fa0 R15: 00007ffc8160f588 [ 1092.735831][ T2694] [ 1092.738977][ T2694] Mem-Info: [ 1092.742356][ T2694] active_anon:11390 inactive_anon:46 isolated_anon:0 [ 1092.742356][ T2694] active_file:7873 inactive_file:20487 isolated_file:0 [ 1092.742356][ T2694] unevictable:0 dirty:307 writeback:0 [ 1092.742356][ T2694] slab_reclaimable:3512 slab_unreclaimable:30196 [ 1092.742356][ T2694] mapped:29573 shmem:404 pagetables:919 [ 1092.742356][ T2694] sec_pagetables:0 bounce:0 [ 1092.742356][ T2694] kernel_misc_reclaimable:0 [ 1092.742356][ T2694] free:1860874 free_pcp:7000 free_cma:0 [ 1092.787615][ T2694] Node 0 active_anon:45560kB inactive_anon:184kB active_file:31492kB inactive_file:81948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118292kB dirty:1228kB writeback:0kB shmem:1616kB writeback_tmp:0kB kernel_stack:4032kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no [ 1092.815940][ T2694] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.824182][ T2701] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1092.843640][ T2694] lowmem_reserve[]: 0 2866 7844 0 [ 1092.860174][ T2694] Node 0 DMA32 free:2950408kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953940kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 1092.889023][ T2694] lowmem_reserve[]: 0 0 4978 0 [ 1092.893847][ T2694] Node 0 Normal free:4477728kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:45560kB inactive_anon:184kB active_file:31492kB inactive_file:81948kB unevictable:0kB writepending:1228kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:24440kB local_pcp:23772kB free_cma:0kB [ 1092.924386][ T2694] lowmem_reserve[]: 0 0 0 0 [ 1092.929002][ T2694] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1092.941807][ T2694] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950408kB [ 1092.957837][ T2694] Node 0 Normal: 443*4kB (UE) 1432*8kB (UME) 1506*16kB (UME) 1310*32kB (UME) 683*64kB (UME) 422*128kB (UM) 470*256kB (UM) 339*512kB (UME) 237*1024kB (UME) 134*2048kB (UME) 852*4096kB (UM) = 4477772kB [ 1092.977846][ T2694] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1092.987136][ T2694] 28806 total pagecache pages [ 1092.991863][ T2694] 47 pages in swap cache [ 1092.996116][ T2694] Free swap = 124176kB [ 1093.000288][ T2694] Total swap = 124996kB [ 1093.005124][ T2694] 2097051 pages RAM [ 1093.008948][ T2694] 0 pages HighMem/MovableOnly [ 1093.013739][ T2694] 80174 pages reserved [ 1093.018488][ T2701] bond0: (slave bridge0): Releasing backup interface [ 1093.128546][ T2711] xt_hashlimit: max too large, truncated to 1048576 [ 1093.154149][ T2711] IPv6: Can't replace route, no match found [ 1093.200361][ T2719] netlink: 'syz.3.24155': attribute type 10 has an invalid length. [ 1093.215294][ T2719] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1093.320651][ T2729] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1093.440502][ T2737] macsec1: entered allmulticast mode [ 1093.445936][ T2737] hsr0: entered allmulticast mode [ 1093.450970][ T2737] hsr_slave_0: entered allmulticast mode [ 1093.456684][ T2737] hsr_slave_1: entered allmulticast mode [ 1093.464036][ T2737] hsr0: left allmulticast mode [ 1093.468929][ T2737] hsr_slave_0: left allmulticast mode [ 1093.474461][ T2737] hsr_slave_1: left allmulticast mode [ 1093.594405][ T2746] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24169'. [ 1094.152612][ T2792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.168836][ T2792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.183180][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 1094.183195][ T29] audit: type=1326 audit(1072.635:115124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.215683][ T2792] netlink: 'syz.2.24187': attribute type 3 has an invalid length. [ 1094.217846][ T29] audit: type=1326 audit(1072.635:115125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.223517][ T2792] netlink: 514 bytes leftover after parsing attributes in process `syz.2.24187'. [ 1094.246721][ T29] audit: type=1326 audit(1072.635:115126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.246749][ T29] audit: type=1326 audit(1072.654:115127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2747 comm="syz.1.24170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1094.303196][ T29] audit: type=1326 audit(1072.654:115128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2747 comm="syz.1.24170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc133c149 code=0x7ffc0000 [ 1094.327362][ T29] audit: type=1326 audit(1072.654:115129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2747 comm="syz.1.24170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4bc13a0809 code=0x7ffc0000 [ 1094.350617][ T29] audit: type=1326 audit(1072.663:115130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.378096][ T29] audit: type=1326 audit(1072.757:115131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.401340][ T29] audit: type=1326 audit(1072.757:115132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.2.24187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd9310809 code=0x7ffc0000 [ 1094.424614][ T29] audit: type=1326 audit(1072.757:115133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2747 comm="syz.1.24170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc13977a7 code=0x7ffc0000 [ 1094.499952][ T2799] FAULT_INJECTION: forcing a failure. [ 1094.499952][ T2799] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.512838][ T2799] CPU: 0 UID: 0 PID: 2799 Comm: syz.6.24191 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1094.524738][ T2799] Tainted: [W]=WARN [ 1094.528561][ T2799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1094.538614][ T2799] Call Trace: [ 1094.541938][ T2799] [ 1094.544866][ T2799] dump_stack_lvl+0xf2/0x150 [ 1094.549463][ T2799] dump_stack+0x15/0x20 [ 1094.553607][ T2799] should_fail_ex+0x223/0x230 [ 1094.558338][ T2799] should_failslab+0x8f/0xb0 [ 1094.562968][ T2799] kmem_cache_alloc_noprof+0x52/0x320 [ 1094.568469][ T2799] ? audit_log_start+0x34c/0x6b0 [ 1094.573465][ T2799] audit_log_start+0x34c/0x6b0 [ 1094.578260][ T2799] audit_seccomp+0x4b/0x130 [ 1094.582778][ T2799] __seccomp_filter+0x6fa/0x1180 [ 1094.587710][ T2799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1094.593337][ T2799] ? vfs_write+0x596/0x920 [ 1094.597813][ T2799] __secure_computing+0x9f/0x1c0 [ 1094.602744][ T2799] syscall_trace_enter+0xd1/0x1f0 [ 1094.607865][ T2799] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1094.613997][ T2799] do_syscall_64+0xaa/0x1c0 [ 1094.618493][ T2799] ? clear_bhb_loop+0x55/0xb0 [ 1094.623172][ T2799] ? clear_bhb_loop+0x55/0xb0 [ 1094.627885][ T2799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.633778][ T2799] RIP: 0033:0x7f583f5b0809 [ 1094.638184][ T2799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.657923][ T2799] RSP: 002b:00007f583dc27058 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1094.666415][ T2799] RAX: ffffffffffffffda RBX: 00007f583f775fa0 RCX: 00007f583f5b0809 [ 1094.674395][ T2799] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 1094.682386][ T2799] RBP: 00007f583dc270a0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.690372][ T2799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.698388][ T2799] R13: 0000000000000000 R14: 00007f583f775fa0 R15: 00007ffe887b8918 [ 1094.706369][ T2799] [ 1094.914669][ T2822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24198'. [ 1094.971749][ T2826] xt_hashlimit: max too large, truncated to 1048576 [ 1095.154250][ T2851] lo speed is unknown, defaulting to 1000 [ 1095.360760][ T2863] xt_hashlimit: max too large, truncated to 1048576 [ 1095.361209][ T2861] lo speed is unknown, defaulting to 1000 [ 1095.399433][ T2866] xt_hashlimit: max too large, truncated to 1048576 [ 1095.414641][ T2866] IPv6: Can't replace route, no match found [ 1095.951764][ T2886] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.034680][ T2886] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.141978][ T2886] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.168154][ T2896] netlink: 'syz.3.24228': attribute type 10 has an invalid length. [ 1096.203124][ T2886] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.274310][ T2886] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.285697][ T2898] xt_hashlimit: max too large, truncated to 1048576 [ 1096.295379][ T2886] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.310245][ T2886] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.318753][ T2898] IPv6: Can't replace route, no match found [ 1096.331229][ T2886] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.437190][ T2909] netlink: 'syz.8.24231': attribute type 10 has an invalid length. [ 1096.611609][ T2920] lo speed is unknown, defaulting to 1000 [ 1096.864213][ T2928] lo speed is unknown, defaulting to 1000 [ 1097.425934][ T2933] xt_hashlimit: max too large, truncated to 1048576 [ 1097.437695][ T2933] IPv6: Can't replace route, no match found [ 1097.460833][ T2935] xt_hashlimit: max too large, truncated to 1048576 [ 1097.493686][ T2937] FAULT_INJECTION: forcing a failure. [ 1097.493686][ T2937] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.506442][ T2937] CPU: 0 UID: 0 PID: 2937 Comm: syz.6.24243 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1097.518592][ T2937] Tainted: [W]=WARN [ 1097.522406][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1097.532555][ T2937] Call Trace: [ 1097.535915][ T2937] [ 1097.538894][ T2937] dump_stack_lvl+0xf2/0x150 [ 1097.543497][ T2937] dump_stack+0x15/0x20 [ 1097.547708][ T2937] should_fail_ex+0x223/0x230 [ 1097.552407][ T2937] should_failslab+0x8f/0xb0 [ 1097.557014][ T2937] kmem_cache_alloc_noprof+0x52/0x320 [ 1097.562565][ T2937] ? audit_log_start+0x34c/0x6b0 [ 1097.567505][ T2937] audit_log_start+0x34c/0x6b0 [ 1097.572279][ T2937] audit_seccomp+0x4b/0x130 [ 1097.576811][ T2937] __seccomp_filter+0x6fa/0x1180 [ 1097.581759][ T2937] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1097.587398][ T2937] ? vfs_write+0x596/0x920 [ 1097.591891][ T2937] ? __schedule+0x6fa/0x930 [ 1097.596403][ T2937] __secure_computing+0x9f/0x1c0 [ 1097.601526][ T2937] syscall_trace_enter+0xd1/0x1f0 [ 1097.606610][ T2937] do_syscall_64+0xaa/0x1c0 [ 1097.611167][ T2937] ? clear_bhb_loop+0x55/0xb0 [ 1097.615926][ T2937] ? clear_bhb_loop+0x55/0xb0 [ 1097.620610][ T2937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.626574][ T2937] RIP: 0033:0x7f583f5b0809 [ 1097.631017][ T2937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.650635][ T2937] RSP: 002b:00007f583dc27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 1097.659104][ T2937] RAX: ffffffffffffffda RBX: 00007f583f775fa0 RCX: 00007f583f5b0809 [ 1097.667132][ T2937] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000020000040 [ 1097.675104][ T2937] RBP: 00007f583dc270a0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.683077][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.691091][ T2937] R13: 0000000000000000 R14: 00007f583f775fa0 R15: 00007ffe887b8918 [ 1097.699170][ T2937] [ 1097.733343][ T2943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24246'. [ 1097.743859][ T2943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2943 comm=syz.6.24246 [ 1097.949882][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24252'. [ 1097.963543][ T2961] netlink: 'syz.3.24248': attribute type 10 has an invalid length. [ 1097.999553][ T2966] netlink: 'syz.2.24254': attribute type 10 has an invalid length. [ 1098.130826][ T2971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24257'. [ 1098.173505][ T2975] netlink: 'syz.1.24259': attribute type 3 has an invalid length. [ 1098.232442][ T2976] lo speed is unknown, defaulting to 1000 [ 1098.349030][ T2981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24260'. [ 1098.615229][ T2995] lo speed is unknown, defaulting to 1000 [ 1099.027871][ T3011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24270'. [ 1099.091116][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24272'. [ 1099.225735][ T3020] netlink: 'syz.8.24275': attribute type 10 has an invalid length. [ 1099.323560][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24277'. [ 1099.343211][ T3029] macsec1: entered allmulticast mode [ 1099.348703][ T3029] hsr0: entered allmulticast mode [ 1099.353829][ T3029] hsr_slave_0: entered allmulticast mode [ 1099.359779][ T3029] hsr_slave_1: entered allmulticast mode [ 1099.367330][ T3029] hsr0: left allmulticast mode [ 1099.372102][ T3029] hsr_slave_0: left allmulticast mode [ 1099.377539][ T3029] hsr_slave_1: left allmulticast mode [ 1099.406111][ T3033] netlink: 'syz.2.24280': attribute type 3 has an invalid length. [ 1099.414022][ T3033] netlink: 'syz.2.24280': attribute type 3 has an invalid length. [ 1099.422369][ T3033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24280'. [ 1099.566819][ T3042] netlink: 'syz.6.24284': attribute type 10 has an invalid length. [ 1099.576245][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 1099.576322][ T29] audit: type=1326 audit(1077.677:115386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3038 comm="syz.6.24284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1099.605856][ T29] audit: type=1326 audit(1077.677:115387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3038 comm="syz.6.24284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1099.629699][ T29] audit: type=1326 audit(1077.677:115388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3038 comm="syz.6.24284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1099.653039][ T29] audit: type=1326 audit(1077.677:115389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3038 comm="syz.6.24284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1099.735369][ T3046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24281'. [ 1099.789644][ T3052] syz.3.24287[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.789701][ T3052] syz.3.24287[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.800323][ T29] audit: type=1326 audit(1077.874:115390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1099.802071][ T3052] syz.3.24287[3052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1099.813434][ T29] audit: type=1326 audit(1077.874:115391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1099.821390][ T29] audit: type=1326 audit(1077.902:115392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1099.894706][ T29] audit: type=1326 audit(1077.902:115393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1099.917874][ T29] audit: type=1326 audit(1077.902:115394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1099.941170][ T29] audit: type=1326 audit(1077.902:115395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3053 comm="syz.8.24288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c871c0809 code=0x7ffc0000 [ 1100.024174][ T3062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24289'. [ 1100.079415][ T3064] macsec1: entered allmulticast mode [ 1100.084814][ T3064] hsr0: entered allmulticast mode [ 1100.089878][ T3064] hsr_slave_0: entered allmulticast mode [ 1100.095552][ T3064] hsr_slave_1: entered allmulticast mode [ 1100.103436][ T3064] hsr0: left allmulticast mode [ 1100.108328][ T3064] hsr_slave_0: left allmulticast mode [ 1100.113707][ T3064] hsr_slave_1: left allmulticast mode [ 1100.145986][ T3067] lo speed is unknown, defaulting to 1000 [ 1100.196885][ T3070] IPv6: Can't replace route, no match found [ 1100.241138][ T3073] macsec1: entered allmulticast mode [ 1100.246543][ T3073] hsr0: entered allmulticast mode [ 1100.251746][ T3073] hsr_slave_0: entered allmulticast mode [ 1100.257462][ T3073] hsr_slave_1: entered allmulticast mode [ 1100.269667][ T3073] hsr0: left allmulticast mode [ 1100.274476][ T3073] hsr_slave_0: left allmulticast mode [ 1100.279954][ T3073] hsr_slave_1: left allmulticast mode [ 1100.384783][ T3077] netlink: 'syz.2.24294': attribute type 3 has an invalid length. [ 1100.392804][ T3077] netlink: 'syz.2.24294': attribute type 3 has an invalid length. [ 1100.419363][ T3077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24294'. [ 1100.445760][ T3079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.475899][ T3079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.498012][ T3079] netlink: 'syz.8.24296': attribute type 3 has an invalid length. [ 1100.505962][ T3079] netlink: 514 bytes leftover after parsing attributes in process `syz.8.24296'. [ 1100.537064][ T3081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24297'. [ 1100.838176][ T3093] lo speed is unknown, defaulting to 1000 [ 1101.383767][ T3101] lo speed is unknown, defaulting to 1000 [ 1101.475119][ T3104] macsec1: entered allmulticast mode [ 1101.480565][ T3104] hsr0: entered allmulticast mode [ 1101.487081][ T3104] hsr_slave_0: entered allmulticast mode [ 1101.492781][ T3104] hsr_slave_1: entered allmulticast mode [ 1101.522479][ T3104] hsr0: left allmulticast mode [ 1101.527403][ T3104] hsr_slave_0: left allmulticast mode [ 1101.532809][ T3104] hsr_slave_1: left allmulticast mode [ 1101.734373][ T3107] lo speed is unknown, defaulting to 1000 [ 1101.947221][ T3115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24308'. [ 1102.201462][ T3126] lo speed is unknown, defaulting to 1000 [ 1102.237444][ T3128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.259970][ T3128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.300716][ T3128] netlink: 'syz.1.24313': attribute type 3 has an invalid length. [ 1102.308625][ T3128] netlink: 514 bytes leftover after parsing attributes in process `syz.1.24313'. [ 1102.321707][ T3130] IPv6: Can't replace route, no match found [ 1102.715450][ T3146] lo speed is unknown, defaulting to 1000 [ 1102.936516][ T3152] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1102.988677][ T3152] bond0: (slave bridge0): Releasing backup interface [ 1103.073749][ T3161] netlink: 'syz.2.24324': attribute type 3 has an invalid length. [ 1103.081736][ T3161] netlink: 'syz.2.24324': attribute type 3 has an invalid length. [ 1103.135965][ T3163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1103.151371][ T3161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24324'. [ 1103.435466][ T3182] lo speed is unknown, defaulting to 1000 [ 1104.351140][ T3197] lo speed is unknown, defaulting to 1000 [ 1104.622910][ T3205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24336'. [ 1104.659538][ T3207] macsec1: entered allmulticast mode [ 1104.664916][ T3207] hsr0: entered allmulticast mode [ 1104.670143][ T3207] hsr_slave_0: entered allmulticast mode [ 1104.675790][ T3207] hsr_slave_1: entered allmulticast mode [ 1104.687342][ T3207] hsr0: left allmulticast mode [ 1104.692259][ T3207] hsr_slave_0: left allmulticast mode [ 1104.697683][ T3207] hsr_slave_1: left allmulticast mode [ 1104.872807][ T3210] lo speed is unknown, defaulting to 1000 [ 1104.934714][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 1104.934729][ T29] audit: type=1326 audit(1082.682:115741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08183177a7 code=0x7ffc0000 [ 1104.965010][ T29] audit: type=1326 audit(1082.682:115742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08182bc149 code=0x7ffc0000 [ 1104.988152][ T29] audit: type=1326 audit(1082.682:115743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1105.011416][ T29] audit: type=1326 audit(1082.691:115744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08183177a7 code=0x7ffc0000 [ 1105.035055][ T29] audit: type=1326 audit(1082.691:115745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08182bc149 code=0x7ffc0000 [ 1105.058379][ T29] audit: type=1326 audit(1082.691:115746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1105.081679][ T29] audit: type=1326 audit(1082.700:115747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08183177a7 code=0x7ffc0000 [ 1105.105600][ T29] audit: type=1326 audit(1082.700:115748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08182bc149 code=0x7ffc0000 [ 1105.128682][ T29] audit: type=1326 audit(1082.700:115749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1105.152333][ T29] audit: type=1326 audit(1082.719:115750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3199 comm="syz.3.24335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08183177a7 code=0x7ffc0000 [ 1105.428467][ T3218] validate_nla: 1 callbacks suppressed [ 1105.428484][ T3218] netlink: 'syz.8.24339': attribute type 3 has an invalid length. [ 1105.442109][ T3218] netlink: 'syz.8.24339': attribute type 3 has an invalid length. [ 1105.450693][ T3218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24339'. [ 1105.506786][ T3220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24342'. [ 1105.590598][ T3231] netlink: 'syz.3.24344': attribute type 10 has an invalid length. [ 1105.830321][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24347'. [ 1105.930517][ T3240] lo speed is unknown, defaulting to 1000 [ 1106.441788][ T3244] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1106.459712][ T3244] bond0: (slave bridge0): Releasing backup interface [ 1106.496160][ T3246] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1106.631169][ T3263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24358'. [ 1106.662490][ T3269] FAULT_INJECTION: forcing a failure. [ 1106.662490][ T3269] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.675344][ T3269] CPU: 1 UID: 0 PID: 3269 Comm: syz.8.24361 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1106.687299][ T3269] Tainted: [W]=WARN [ 1106.691173][ T3269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1106.701422][ T3269] Call Trace: [ 1106.704797][ T3269] [ 1106.707758][ T3269] dump_stack_lvl+0xf2/0x150 [ 1106.712448][ T3269] dump_stack+0x15/0x20 [ 1106.716604][ T3269] should_fail_ex+0x223/0x230 [ 1106.721348][ T3269] should_failslab+0x8f/0xb0 [ 1106.725970][ T3269] kmem_cache_alloc_noprof+0x52/0x320 [ 1106.731411][ T3269] ? audit_log_start+0x34c/0x6b0 [ 1106.736423][ T3269] audit_log_start+0x34c/0x6b0 [ 1106.741220][ T3269] audit_seccomp+0x4b/0x130 [ 1106.745730][ T3269] __seccomp_filter+0x6fa/0x1180 [ 1106.750741][ T3269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1106.756383][ T3269] ? vfs_write+0x596/0x920 [ 1106.760843][ T3269] ? __schedule+0x6fa/0x930 [ 1106.765425][ T3269] __secure_computing+0x9f/0x1c0 [ 1106.770384][ T3269] syscall_trace_enter+0xd1/0x1f0 [ 1106.775456][ T3269] do_syscall_64+0xaa/0x1c0 [ 1106.779953][ T3269] ? clear_bhb_loop+0x55/0xb0 [ 1106.784634][ T3269] ? clear_bhb_loop+0x55/0xb0 [ 1106.789436][ T3269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.795430][ T3269] RIP: 0033:0x7f7c871c0809 [ 1106.799870][ T3269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.819530][ T3269] RSP: 002b:00007f7c85837058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 1106.828003][ T3269] RAX: ffffffffffffffda RBX: 00007f7c87385fa0 RCX: 00007f7c871c0809 [ 1106.835966][ T3269] RDX: 0000000000000000 RSI: ffffffff80000202 RDI: 0000000000000003 [ 1106.843983][ T3269] RBP: 00007f7c858370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.851964][ T3269] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 1106.859998][ T3269] R13: 0000000000000000 R14: 00007f7c87385fa0 R15: 00007ffc8160f588 [ 1106.867995][ T3269] [ 1106.872842][ T3271] netlink: 'syz.3.24357': attribute type 10 has an invalid length. [ 1106.885710][ T3271] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1106.939938][ T3273] lo speed is unknown, defaulting to 1000 [ 1107.169324][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24371'. [ 1107.249197][ T3301] FAULT_INJECTION: forcing a failure. [ 1107.249197][ T3301] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.261949][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz.2.24375 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1107.273940][ T3301] Tainted: [W]=WARN [ 1107.277745][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1107.284630][ T3298] lo speed is unknown, defaulting to 1000 [ 1107.287797][ T3301] Call Trace: [ 1107.287808][ T3301] [ 1107.287816][ T3301] dump_stack_lvl+0xf2/0x150 [ 1107.304398][ T3301] dump_stack+0x15/0x20 [ 1107.308571][ T3301] should_fail_ex+0x223/0x230 [ 1107.313353][ T3301] should_failslab+0x8f/0xb0 [ 1107.317992][ T3301] __kmalloc_noprof+0xab/0x3f0 [ 1107.322829][ T3301] ? ip_options_get+0x51/0x330 [ 1107.327665][ T3301] ip_options_get+0x51/0x330 [ 1107.332312][ T3301] do_ip_setsockopt+0x1b23/0x2340 [ 1107.337438][ T3301] ip_setsockopt+0x63/0x100 [ 1107.341980][ T3301] raw_setsockopt+0x101/0x150 [ 1107.346720][ T3301] sock_common_setsockopt+0x64/0x80 [ 1107.351952][ T3301] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1107.358058][ T3301] __sys_setsockopt+0x187/0x200 [ 1107.362930][ T3301] __x64_sys_setsockopt+0x66/0x80 [ 1107.367976][ T3301] x64_sys_call+0x282e/0x2dc0 [ 1107.372737][ T3301] do_syscall_64+0xc9/0x1c0 [ 1107.377328][ T3301] ? clear_bhb_loop+0x55/0xb0 [ 1107.382110][ T3301] ? clear_bhb_loop+0x55/0xb0 [ 1107.386888][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.392820][ T3301] RIP: 0033:0x7fbcd9310809 [ 1107.397270][ T3301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.417153][ T3301] RSP: 002b:00007fbcd7987058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1107.425637][ T3301] RAX: ffffffffffffffda RBX: 00007fbcd94d5fa0 RCX: 00007fbcd9310809 [ 1107.433861][ T3301] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 1107.442001][ T3301] RBP: 00007fbcd79870a0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.450797][ T3301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.459085][ T3301] R13: 0000000000000000 R14: 00007fbcd94d5fa0 R15: 00007fffd03087d8 [ 1107.467313][ T3301] [ 1107.941012][ T3324] lo speed is unknown, defaulting to 1000 [ 1108.017694][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 1108.126265][ T3338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24382'. [ 1108.142191][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.149333][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.186279][ T3324] bridge_slave_0: entered allmulticast mode [ 1108.195847][ T3324] bridge_slave_0: entered promiscuous mode [ 1108.232529][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.239757][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.263904][ T3324] bridge_slave_1: entered allmulticast mode [ 1108.270720][ T3324] bridge_slave_1: entered promiscuous mode [ 1108.296691][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.309896][ T3359] FAULT_INJECTION: forcing a failure. [ 1108.309896][ T3359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.314625][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.323389][ T3359] CPU: 0 UID: 0 PID: 3359 Comm: syz.6.24389 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1108.344271][ T3359] Tainted: [W]=WARN [ 1108.348084][ T3359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1108.358152][ T3359] Call Trace: [ 1108.361483][ T3359] [ 1108.364418][ T3359] dump_stack_lvl+0xf2/0x150 [ 1108.369015][ T3359] dump_stack+0x15/0x20 [ 1108.373173][ T3359] should_fail_ex+0x223/0x230 [ 1108.377980][ T3359] should_fail+0xb/0x10 [ 1108.382279][ T3359] should_fail_usercopy+0x1a/0x20 [ 1108.387334][ T3359] _copy_from_user+0x1e/0xb0 [ 1108.391985][ T3359] move_addr_to_kernel+0x82/0x120 [ 1108.397033][ T3359] __sys_bind+0x9e/0x190 [ 1108.401337][ T3359] __x64_sys_bind+0x41/0x50 [ 1108.405860][ T3359] x64_sys_call+0x20ab/0x2dc0 [ 1108.410552][ T3359] do_syscall_64+0xc9/0x1c0 [ 1108.415105][ T3359] ? clear_bhb_loop+0x55/0xb0 [ 1108.419829][ T3359] ? clear_bhb_loop+0x55/0xb0 [ 1108.424536][ T3359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.430512][ T3359] RIP: 0033:0x7f583f5b0809 [ 1108.435189][ T3359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.454893][ T3359] RSP: 002b:00007f583dc27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1108.463325][ T3359] RAX: ffffffffffffffda RBX: 00007f583f775fa0 RCX: 00007f583f5b0809 [ 1108.471325][ T3359] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 1108.479399][ T3359] RBP: 00007f583dc270a0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.487422][ T3359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.495524][ T3359] R13: 0000000000000000 R14: 00007f583f775fa0 R15: 00007ffe887b8918 [ 1108.503583][ T3359] [ 1108.527175][ T3324] team0: Port device team_slave_0 added [ 1108.543288][ T3324] team0: Port device team_slave_1 added [ 1108.628191][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.635236][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.661216][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.693768][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.700860][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.726817][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.779918][ T3388] lo speed is unknown, defaulting to 1000 [ 1108.798461][ T3324] hsr_slave_0: entered promiscuous mode [ 1108.817087][ T3324] hsr_slave_1: entered promiscuous mode [ 1108.827466][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.838346][ T3324] Cannot create hsr debugfs directory [ 1108.895746][ T3391] FAULT_INJECTION: forcing a failure. [ 1108.895746][ T3391] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.908587][ T3391] CPU: 1 UID: 0 PID: 3391 Comm: syz.8.24395 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1108.920570][ T3391] Tainted: [W]=WARN [ 1108.924442][ T3391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1108.934512][ T3391] Call Trace: [ 1108.937784][ T3391] [ 1108.940721][ T3391] dump_stack_lvl+0xf2/0x150 [ 1108.945393][ T3391] dump_stack+0x15/0x20 [ 1108.949563][ T3391] should_fail_ex+0x223/0x230 [ 1108.954261][ T3391] should_failslab+0x8f/0xb0 [ 1108.958862][ T3391] kmem_cache_alloc_noprof+0x52/0x320 [ 1108.964341][ T3391] ? audit_log_start+0x34c/0x6b0 [ 1108.969382][ T3391] audit_log_start+0x34c/0x6b0 [ 1108.974211][ T3391] audit_seccomp+0x4b/0x130 [ 1108.978727][ T3391] __seccomp_filter+0x6fa/0x1180 [ 1108.983698][ T3391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1108.989348][ T3391] ? vfs_write+0x596/0x920 [ 1108.994000][ T3391] ? putname+0xcf/0xf0 [ 1108.998227][ T3391] __secure_computing+0x9f/0x1c0 [ 1109.003161][ T3391] syscall_trace_enter+0xd1/0x1f0 [ 1109.008274][ T3391] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1109.014545][ T3391] do_syscall_64+0xaa/0x1c0 [ 1109.019197][ T3391] ? clear_bhb_loop+0x55/0xb0 [ 1109.023907][ T3391] ? clear_bhb_loop+0x55/0xb0 [ 1109.028576][ T3391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.034472][ T3391] RIP: 0033:0x7f7c871c0809 [ 1109.038881][ T3391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.058495][ T3391] RSP: 002b:00007f7c85837058 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1109.066942][ T3391] RAX: ffffffffffffffda RBX: 00007f7c87385fa0 RCX: 00007f7c871c0809 [ 1109.075066][ T3391] RDX: ffffffffffffffff RSI: 00000000200001c0 RDI: ffffffffffffffff [ 1109.083059][ T3391] RBP: 00007f7c858370a0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.091138][ T3391] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 1109.099101][ T3391] R13: 0000000000000000 R14: 00007f7c87385fa0 R15: 00007ffc8160f588 [ 1109.107071][ T3391] [ 1109.244088][ T3324] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.257431][ T3395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24396'. [ 1109.299106][ T3324] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.334563][ T3405] xt_hashlimit: max too large, truncated to 1048576 [ 1109.384852][ T3324] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.451692][ T3324] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.499858][ T3420] netlink: 'syz.8.24403': attribute type 3 has an invalid length. [ 1109.507798][ T3420] netlink: 'syz.8.24403': attribute type 3 has an invalid length. [ 1109.556611][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1109.576402][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1109.595510][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1109.601084][ T3420] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24403'. [ 1109.615373][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1109.720687][ T3429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24407'. [ 1109.729298][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.742813][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.753454][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.760659][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.816981][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.827497][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.843212][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.850389][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.970128][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.981215][ T3449] xt_hashlimit: max too large, truncated to 1048576 [ 1110.007195][ T3449] IPv6: Can't replace route, no match found [ 1110.130900][ T3324] veth0_vlan: entered promiscuous mode [ 1110.164662][ T3468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24420'. [ 1110.178146][ T3324] veth1_vlan: entered promiscuous mode [ 1110.206558][ T3324] veth0_macvtap: entered promiscuous mode [ 1110.218702][ T3324] veth1_macvtap: entered promiscuous mode [ 1110.254431][ T3472] macsec1: entered allmulticast mode [ 1110.259837][ T3472] hsr0: entered allmulticast mode [ 1110.264962][ T3472] hsr_slave_0: entered allmulticast mode [ 1110.270670][ T3472] hsr_slave_1: entered allmulticast mode [ 1110.295283][ T3472] hsr0: left allmulticast mode [ 1110.300103][ T3472] hsr_slave_0: left allmulticast mode [ 1110.305580][ T3472] hsr_slave_1: left allmulticast mode [ 1110.334555][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.345079][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.354916][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.365384][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.375223][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.385703][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.395555][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.406160][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.416044][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.426709][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.436561][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.447176][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.457047][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.467598][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.478414][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.489092][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.499095][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.509708][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.519586][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.530116][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.542289][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.570300][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.571536][ T3477] xt_hashlimit: max too large, truncated to 1048576 [ 1110.581026][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.597616][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.608302][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.618168][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.628843][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.638722][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.651344][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.661306][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.672156][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.681716][ T3479] xt_hashlimit: max too large, truncated to 1048576 [ 1110.681995][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.699042][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.708865][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.708882][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.708955][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.739724][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.749808][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.760427][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.770412][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.780861][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.792903][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.802075][ T3479] IPv6: Can't replace route, no match found [ 1110.810295][ T3324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.819087][ T3324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.828620][ T3324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.837604][ T3324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.002293][ T3495] lo speed is unknown, defaulting to 1000 [ 1111.130798][ T3503] lo speed is unknown, defaulting to 1000 [ 1111.257784][ T3506] xt_hashlimit: max too large, truncated to 1048576 [ 1111.343493][ T3508] xt_hashlimit: max too large, truncated to 1048576 [ 1111.480670][ T3515] netlink: 'syz.3.24437': attribute type 10 has an invalid length. [ 1111.493775][ T3517] xt_hashlimit: max too large, truncated to 1048576 [ 1111.507580][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 1111.507593][ T29] audit: type=1326 audit(1088.836:116210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.3.24437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1111.512563][ T3517] IPv6: Can't replace route, no match found [ 1111.516354][ T29] audit: type=1326 audit(1088.846:116211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.3.24437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1111.610684][ T29] audit: type=1326 audit(1088.893:116212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.3.24437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1111.633999][ T29] audit: type=1326 audit(1088.893:116213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.3.24437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0818320809 code=0x7ffc0000 [ 1111.903458][ T3525] xt_hashlimit: max too large, truncated to 1048576 [ 1112.205293][ T3548] netlink: 'syz.6.24452': attribute type 3 has an invalid length. [ 1112.213241][ T3548] netlink: 'syz.6.24452': attribute type 3 has an invalid length. [ 1112.229096][ T3548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24452'. [ 1112.256869][ T29] audit: type=1326 audit(1089.538:116214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.280782][ T29] audit: type=1326 audit(1089.538:116215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.304128][ T29] audit: type=1326 audit(1089.538:116216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.327482][ T29] audit: type=1326 audit(1089.547:116217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.350700][ T29] audit: type=1326 audit(1089.547:116218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.373874][ T29] audit: type=1326 audit(1089.547:116219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3549 comm="syz.6.24453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f583f5b0809 code=0x7ffc0000 [ 1112.449539][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24455'. [ 1112.542121][ T3557] lo speed is unknown, defaulting to 1000 [ 1113.173824][ T3563] lo speed is unknown, defaulting to 1000 [ 1113.804279][ T3576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24462'. [ 1113.879742][ T3582] macsec1: entered allmulticast mode [ 1113.885158][ T3582] hsr0: entered allmulticast mode [ 1113.890222][ T3582] hsr_slave_0: entered allmulticast mode [ 1113.896166][ T3582] hsr_slave_1: entered allmulticast mode [ 1113.903919][ T3582] hsr0: left allmulticast mode [ 1113.908846][ T3582] hsr_slave_0: left allmulticast mode [ 1113.914230][ T3582] hsr_slave_1: left allmulticast mode [ 1113.985209][ T3584] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1114.004527][ T3584] bond0: (slave bridge0): Releasing backup interface [ 1114.063827][ T3586] netlink: 'syz.8.24468': attribute type 3 has an invalid length. [ 1114.071765][ T3586] netlink: 'syz.8.24468': attribute type 3 has an invalid length. [ 1114.083246][ T3586] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24468'. [ 1114.752389][ T3615] bond0: (slave bridge0): Releasing backup interface [ 1115.233983][ T3650] netlink: 'syz.3.24490': attribute type 39 has an invalid length. [ 1115.256090][ T3652] ================================================================== [ 1115.264203][ T3652] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 1115.271066][ T3652] [ 1115.273387][ T3652] write to 0xffff8881043f5a08 of 8 bytes by task 3651 on cpu 1: [ 1115.279783][ T3656] lo speed is unknown, defaulting to 1000 [ 1115.281015][ T3652] call_rcu+0x47/0x430 [ 1115.290825][ T3652] mas_wmb_replace+0xcc0/0x14d0 [ 1115.295695][ T3652] mas_wr_store_entry+0x1681/0x2d10 [ 1115.300905][ T3652] mas_store_prealloc+0x6bf/0x960 [ 1115.305940][ T3652] vma_complete+0x3a7/0x760 [ 1115.310458][ T3652] __split_vma+0x620/0x6a0 [ 1115.314893][ T3652] vma_modify+0x17d/0x1e0 [ 1115.319242][ T3652] vma_modify_flags+0xf1/0x120 [ 1115.324027][ T3652] mprotect_fixup+0x31a/0x5e0 [ 1115.328727][ T3652] do_mprotect_pkey+0x653/0x960 [ 1115.333602][ T3652] __x64_sys_mprotect+0x48/0x60 [ 1115.338465][ T3652] x64_sys_call+0x2770/0x2dc0 [ 1115.343160][ T3652] do_syscall_64+0xc9/0x1c0 [ 1115.347674][ T3652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.353592][ T3652] [ 1115.355919][ T3652] read to 0xffff8881043f5a08 of 8 bytes by task 3652 on cpu 0: [ 1115.363468][ T3652] mtree_range_walk+0x140/0x460 [ 1115.368331][ T3652] mas_walk+0x16e/0x320 [ 1115.372491][ T3652] lock_vma_under_rcu+0x95/0x260 [ 1115.377443][ T3652] exc_page_fault+0x150/0x650 [ 1115.382134][ T3652] asm_exc_page_fault+0x26/0x30 [ 1115.387008][ T3652] [ 1115.389329][ T3652] Reported by Kernel Concurrency Sanitizer on: [ 1115.395484][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: syz.2.24494 Tainted: G W 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 1115.407386][ T3652] Tainted: [W]=WARN [ 1115.411195][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1115.421257][ T3652] ==================================================================