last executing test programs:

9m31.346316837s ago: executing program 3 (id=798):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x3}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9m31.313831497s ago: executing program 3 (id=799):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) (async, rerun: 64)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) (async, rerun: 32)
fcntl$setstatus(r3, 0x4, 0x42000) (async, rerun: 32)
ppoll(&(0x7f00000000c0)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
socket$inet(0x2, 0x802, 0x1) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES32=r3, @ANYRESHEX]) (rerun: 32)
syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], 0x48) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32)
r4 = syz_io_uring_setup(0x3332, &(0x7f0000000080)={0x0, 0x967b, 0x10100, 0x5, 0x800298}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r4, 0xd81, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
write(r8, 0x0, 0x0) (async, rerun: 32)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x62205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x1182a0, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) (async)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)

9m31.231856197s ago: executing program 3 (id=801):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

9m31.154885447s ago: executing program 3 (id=805):
inotify_init()
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x39, 0xa, 0x0, 0x0, 0x1ca, 0x18f1ef, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x1, 0x0, 0x3, 0x0, 0x80, 0x7fe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioperm(0x0, 0x6, 0xd644)
futex(&(0x7f0000001d40)=0x1, 0x5, 0x1, 0x0, 0x0, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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")
sendto$packet(r1, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x11, 0x1, r3, 0x1, 0x1}, 0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x2, 0x5, 0x528, 0x388, 0x298, 0xffffffff, 0x0, 0x0, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@remote, [], @ipv4=@multicast2, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @gre_key}}}, {{@ipv6={@mcast2, @private2, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="2c1c7e7d00000000000000eb406eed", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a00000020000103000000000004000100"/28], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_route(0x10, 0x3, 0x0)

9m30.736649526s ago: executing program 3 (id=809):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
getdents64(r1, &(0x7f0000003f80)=""/4098, 0x1002)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r3, r4, 0x0)
io_uring_setup(0x2cc6, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x22b, 0x0, r4})
r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r6 = dup(r5)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000003c0)={0x23, 0x3, 0x12, 0x4, 0x0, 0x8000, 0x0})

9m30.256665735s ago: executing program 3 (id=818):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000001"], 0x20}, 0x4000000)
unshare(0x20000400)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r12}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06"], 0x20)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={r11, 0x20, &(0x7f0000000f00)={&(0x7f0000000e80)=""/74, 0x4a, <r13=>0x0, &(0x7f0000002680)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x16, &(0x7f0000000440)=@raw=[@alu={0x2, 0x1, 0x6, 0xb, 0x9, 0x40, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x15, '\x00', r5, @fallback=0x15, r11, 0x8, &(0x7f0000000e00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0x9, 0x5, 0x3}, 0x10, r13, r12, 0x2, &(0x7f0000000f80)=[r3, r3, r11, r3, r10, r11], &(0x7f0000000fc0)=[{0x3, 0x1, 0x8, 0x3}, {0x1, 0x1, 0x9}], 0x10, 0x80000001, @void, @value}, 0x94)

9m30.256358675s ago: executing program 32 (id=818):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000001"], 0x20}, 0x4000000)
unshare(0x20000400)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r12}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06"], 0x20)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={r11, 0x20, &(0x7f0000000f00)={&(0x7f0000000e80)=""/74, 0x4a, <r13=>0x0, &(0x7f0000002680)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x16, &(0x7f0000000440)=@raw=[@alu={0x2, 0x1, 0x6, 0xb, 0x9, 0x40, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x15, '\x00', r5, @fallback=0x15, r11, 0x8, &(0x7f0000000e00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0x9, 0x5, 0x3}, 0x10, r13, r12, 0x2, &(0x7f0000000f80)=[r3, r3, r11, r3, r10, r11], &(0x7f0000000fc0)=[{0x3, 0x1, 0x8, 0x3}, {0x1, 0x1, 0x9}], 0x10, 0x80000001, @void, @value}, 0x94)

4m51.498424502s ago: executing program 4 (id=8328):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000500)=""/158, 0x9e}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x44804)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
io_uring_setup(0x36f7, &(0x7f00000002c0)={0x0, 0x572c, 0x400, 0x1, 0x243})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x100000, 0x5dd5, 0x5, 0x7, 0x0, 0xa, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
waitid(0x1, 0x0, 0x0, 0x4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r6, 0x400, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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")
r7 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg(r7, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000000380)=""/60, 0x3c}], 0x1}, 0x0)

4m50.621316969s ago: executing program 4 (id=8358):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==")
creat(&(0x7f0000000040)='./bus\x00', 0x176)
kexec_load(0x9, 0x4, &(0x7f0000000d00)=[{&(0x7f0000000580)="21efd292a27c274dcf395d5853d45bec31561a86f07c1f5ebba4498a946180612ba09a66fc6dd283e5b90bbc1504efb28f188bc397cca84daa4c9117a5d54645618b729ebcdc0c682bb7bf8573ffe282edc341531f687a57f67486098c915dcbcae2ad5e7f66d7991de10b38c651", 0x6e, 0x1, 0x1}, {&(0x7f000001a240)="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", 0x1000, 0x7, 0x7}, {&(0x7f0000000740)="8750f50861b69307727740991a5f9ea24cb8e933b674adb73d0d653e9e620027e3c1a45a0cefdb02a58b0d4750dc8e5bf17265b584b8ec1d2e73ba48a68b59ea0b1859f59afe03730c8751f4c9ce411897f2950160a329a48903cca3b568ff2304823510377347c6279d53693d61357097808692e3d2b3af836f1155f06673ee3e68985f3fd69b43df1a3d412149ec98dd358f2c686bcdf1bb62987605d25f436ea421449d23cc4a14351f86c6ddbf305f12ab3e2ad274e1aac9862225c850bfd6282fcdfd09337ecd86297a4bc417e0936ab552c918b75dfe83d9bef8438bec9ec85a0b59d5692cc13a87e1de68758afc", 0xf1, 0xfffffffffffffffc, 0xffffffffffffffff}, {&(0x7f0000000c80)="67dc670573ef9676a2400fbde6066de9e789bb42eede915a7bc8f5872caec5de1e5b6e0a98c89282682642e5aea9989041662adfc44b2e63bfaa1e40962ac9867d0cada557a391a7a78d67959cdaa8d0a4807ca4c11b49cef3fc2ffbf9369f23d47617490c548fe7", 0x68, 0x15ac00000000, 0x3}], 0x80000)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f00000000c0)=0x32)
read(r7, &(0x7f00000019c0)=""/4107, 0x100b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r10 = shmat(r9, &(0x7f0000feb000/0x2000)=nil, 0x400c)
mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r10)
open(&(0x7f00000003c0)='./bus\x00', 0x147b00, 0x49)

4m50.558895219s ago: executing program 4 (id=8359):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
sendto$packet(r3, &(0x7f0000000840)="71f1e2e0a9144733699963f2ab8172ac78382ef6a9ecf4cdee19a3cd1ef6bd37f731aabe54078815da839d7948041549957ba46b1baa9f27462872ccb42d26cabe1ac5ee3d2b329802af8ce02caf56", 0x4f, 0x40855, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r2}, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)

4m50.486947529s ago: executing program 4 (id=8361):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80010e, &(0x7f0000000600)={[{@errors_remount}, {@nodelalloc}, {@noblock_validity}, {@sysvgroups}, {@block_validity}, {@data_err_abort}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
r2 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x73)
fallocate(r2, 0x3, 0x1, 0x2328)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', <r4=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x2, 0x6, 0x3ff, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x4000, 0x76}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fbdbdf25150000005c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d0000000800030002000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020073797a6b616c6c657231000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80801)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='cachefiles_coherency\x00', r1}, 0x18)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=")
r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents(r8, 0xfffffffffffffffd, 0x58)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000002c0)=0x20)
statx(r9, &(0x7f0000001580)='./file1\x00', 0x400, 0x723dbdb736dd296a, &(0x7f0000001a40))
write$sndseq(r7, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x2, 0x1}, {}, {}, @result={0x0, 0xfc0}}], 0x78)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x48000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}, {@nodioread_nolock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r11, 0x540d)
write$sndseq(r7, &(0x7f00000017c0)=[{0x0, 0xfe, 0x0, 0xf, @tick=0x9, {0xb4, 0x7}, {0xad, 0x34}, @raw32={[0x1, 0x8, 0x9]}}, {0x9, 0x4, 0x6, 0x1, @time={0x200, 0xb2b}, {0xfb, 0x5}, {0x4, 0x86}, @note={0x7, 0x9, 0x80, 0x7, 0x7}}, {0xf1, 0x5, 0xc, 0x8, @time={0x6, 0x4}, {0x7, 0x5}, {0x3, 0x7}, @result={0x1}}], 0x54)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x168, 0x10, 0x168, 0xb, 0x280, 0x250, 0x250, 0x280, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a, 0xff], [0xff], 'vlan1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0xb6, 0xb6ab27a4338c2f28, 0x20}, 0x6000000, 0x100, 0x168, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e22, 0x4e21], [0x4e21, 0x4e20], 0xa, 0x6, 0xd4ee, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10001, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x10, 0x2, 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
writev(r11, &(0x7f0000001680)=[{&(0x7f0000001380)="2647c001a0963e6e10863271582da96b35a70caa22a9443fa6a4b85dd2024b53020c9a4480", 0x25}, {&(0x7f00000013c0)="1bd5ed5718c8e58a4b59f78ee8499b2918f4b9cd11ac75a354a364504e584765f079ba2e21960ea9a6e4b1fb563fb9bf34952a8e0abae9b68b707c1a", 0x3c}, {&(0x7f0000001400)="6c821d0b0519a199ef01943e8d20c33ae448b20dc2c164247db2cb346c53fa652be5a2245477c51ba0200ae14599e04c81c61f4c5cbf05370b320e5101b18987846e59c1fc9297ffe946f3a097c216aadcdfb47caaeed82af88611f3307d3c0ad25c03b57ac2dd466be165b994a951cb9b25c176d9456f0e2d", 0x79}, {&(0x7f0000001480)="30de40bbc1e6e9af318970056205e9db75b86b1af8afa03868159d6f9e88accf29a64e48c5895ffc901b0a72e9331544eac4", 0x32}, {&(0x7f00000014c0)="bb00cee02a9d7810aed0064fb07b5669e7ecc4dcbbd5567062d283f5167faa66a873884bdc4127a777bee93fa462f4ae1802096f9b0ed7d235860c1381541bdb5246edf89adc229b895147d4b621dd8c3eadb5289d254efe44e4476ab5c24b3b30955fcc75885b2bc66116161755d6a75d94fd1d6cc7006fb9e5b5a323854e0836b2f0d0bd89", 0x86}, {&(0x7f0000001900)="bbe752ae8f39b6dcd7a5ecffcf2bb6ba2113e52ccbc0a009424e72c88d3ce036081f010bef82f150b2cbf4c681cbb9a77f5dde782dc05acca79aff57f2c06a7022d68ca3858cdd40e3f996c928626287b70bd6162982d3714addd0aef372efffc230d98b41d480e75e5eeb609cea05e266df302aa27ba17fe3133d621d210c24ed4129ef09b0dc3859a9504a55b45f7c119260eeeeb8aaa3415c3de136bfd9b2d533e0165af8ba61d931ec2b119b4632cdfb5230296950a0ce9664cd00000069bef42584278a5afa4f46f2349be2d95116c97ded47a9261a9454adf6480200000000000000527decfe43649c453c6fe8713e9a66c6ff1328c6f2874f9969c8377a2407287995d3b3d02ddb619dc8dfbedb76090107a509cc69fb6dfe753d1b8e12c9c970fedd60fedb0568a22eed56b37730b05aa97be75e1f8a15dd", 0x13c}, {&(0x7f00000015c0)="a234ecf0b73243b5b843e0b06481f49b6762e0a4bc2e089489dc0a89bd4776b79a03adb5aa144d5ab64b9245c6e4053902db039cb7c37420f36fa6996f95e77886d35813f9ca6dc7a98e6e65b4602220812ddb9a6819a12072c4890bea140f3fae17", 0x62}, {&(0x7f0000001640)="992e9ef46ce5c0051e1fd7", 0xb}], 0x8)

4m50.418719499s ago: executing program 4 (id=8365):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netkit={@void, @value}}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xf78}, 0x18)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

4m50.304785419s ago: executing program 4 (id=8369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xb5, @private0, 0x10000}, 0x1c)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r1, 0xffffffffffffffff, 0x0)

4m50.304665629s ago: executing program 33 (id=8369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0xb5, @private0, 0x10000}, 0x1c)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close_range(r1, 0xffffffffffffffff, 0x0)

3.472435419s ago: executing program 2 (id=14514):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x0, 0xcf, 0x7ffc1ff8}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
syz_clone(0x10000, &(0x7f0000000300)="6dc6f23ebc16cf531397a9939378fbca41f13267a8e5ed73c3592d5c7be2084604ef503fa66811ad629e90e4ae782909fc645a113f22c689f6403d85d9b3dd3447bbbdd08a6bb3a6fe2d673ef9cbcacec81fb826404cbad294a31e0dda82132c4e4c94", 0x63, &(0x7f0000000200), &(0x7f00000004c0), &(0x7f0000000600)="6fc298e945e004acc3267457e66e0d93df4c4348730dcd047478afcca6723864c3fb5247a64d93d38dbce590cc57ce4f3cc34e9254c1bae8cc4e162987dfcaf4d8662fb4ececca025b441912376ee24499e1a7c13a51")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

3.209719448s ago: executing program 2 (id=14522):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @private=0xa010102}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'virt_wifi0\x00', @local})
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

3.076193298s ago: executing program 6 (id=14528):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000"], 0x50)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
rt_sigsuspend(&(0x7f0000000300)={[0x7]}, 0x8)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

2.530267217s ago: executing program 0 (id=14534):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xa966, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000070000000300000007"], 0x48)
pipe2(&(0x7f0000000440)={<r5=>0xffffffffffffffff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000003c0)='host1x_channel_submitted\x00', r5, 0x0, 0x9}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r7}, 0x10)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

2.448613546s ago: executing program 5 (id=14536):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000180)={0x75, 0x8, 0x180000}, 0x20)

2.411694256s ago: executing program 5 (id=14537):
r0 = socket$netlink(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x8000)

2.392805286s ago: executing program 1 (id=14538):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704f550b82d7f1bbb00000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setns(r1, 0x24020000)
setuid(0x0) (async)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

2.379119636s ago: executing program 0 (id=14539):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="8100000000000000000000000ee437f0d16e2f8e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
brk(0x20001000)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x36, 0x0, @thr={&(0x7f0000000080)="2d2529ca77aee7cdad6fcadca440ec3599246b6e203d5ea69478fd5b0455910e0e959f1c52893b7a9f0be0c84739da7cab3d38fb16bc8a7019ddf22d", &(0x7f0000000300)="adadcdc86e525e593f05f2f413ed7b6e37deaaefa024ee26e6429c022ca1cdfc7cabe51251f86d6257b221997b99dbafe49fb50853d847359d3cc8c52df0515c1316ab039fbb022757ace356497087b722cdc6353f8e856c2d18205e4388b8e60047dbaefaf10f339a84defb"}}, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f700"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)

2.298431496s ago: executing program 5 (id=14540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = socket(0x200000000000011, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2b, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x24008844)

2.274024476s ago: executing program 5 (id=14541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
pread64(0xffffffffffffffff, 0x0, 0x0, 0x12)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
modify_ldt$write(0x1, &(0x7f00000001c0)={0x803, 0x0, 0x2000}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0))
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})
socket$packet(0x11, 0x3, 0x300)
sigaltstack(&(0x7f0000000140)={&(0x7f0000000900)=""/4096, 0x80000000, 0x1000}, &(0x7f0000000200)={&(0x7f0000000180)=""/7, 0x0, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.379983884s ago: executing program 2 (id=14542):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000046b96ce3009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring)
write$binfmt_elf64(r1, &(0x7f0000001680)=ANY=[], 0x5b0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000740)=0xffffffff, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.379188984s ago: executing program 6 (id=14543):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000))

874.512123ms ago: executing program 0 (id=14544):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
acct(0x0)

853.613693ms ago: executing program 6 (id=14545):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (fail_nth: 2)

711.749032ms ago: executing program 0 (id=14546):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x2, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e9701203605bed34adda9a047"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
lsm_set_self_attr(0x66, &(0x7f0000000100)={0x65, 0x100, 0x23, 0x3, "cc9487"}, 0x23, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

496.996832ms ago: executing program 1 (id=14547):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r0 = socket$inet(0x2, 0x801, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
epoll_create1(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

496.537862ms ago: executing program 6 (id=14548):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

495.930532ms ago: executing program 2 (id=14549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
preadv2(r0, &(0x7f00000014c0)=[{}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/235, 0xeb}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000000300)=""/227, 0xe3}], 0x7, 0x7f, 0x4, 0xf113bc4d79d19c0a)
accept4$llc(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
preadv2(r0, &(0x7f00000014c0)=[{}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/235, 0xeb}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000000300)=""/227, 0xe3}], 0x7, 0x7f, 0x4, 0xf113bc4d79d19c0a) (async)
accept4$llc(r2, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async)

435.141361ms ago: executing program 1 (id=14550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0)

434.222672ms ago: executing program 0 (id=14551):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000180)={0x75, 0x8, 0x180000}, 0x20)

390.748031ms ago: executing program 0 (id=14552):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0bc70bd49418d60895467325da5d54be878c5a5be30bb8a3635f3d84f2de2a27e1f04270f6c1f5cb07e27951aa4f080a5b44fb19e2e42dd44f01efddc26b32dda134fc937ce398832d332e0a381353", @ANYRES32=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000901db8d2904e42342314a2c86c4012000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000001c0), 0x4)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x2, 0xfffffffc}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x7, 0x3, 0x3ff, 0x0, 0x3})
close(0x3)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r8, &(0x7f00000008c0)=""/143, 0x8f)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="000000000000000000000000005c0000000000009d8d3f619a07c3669051cf69a99d8b09efa4678d25adf5f45353b7be841dbd9ce6aef2ee17a119c7f71e63d0ff57d18a252069c63e110814818735d3da401fe9beef386d2d092e773bd21707a12f1deaaec4ce6207afb6bda2dbb5936a84dd812673a625e657d7618585e4aa01af5998e056f5028dfdf92b3e377185885da448aa007171763c5e22d357a6b797cfdd0feba323348610775ed6a403f6f1de908359bcbc27b753cc9c97e1d4eef18f2d8b2f8ce6072da12721edf615a0b1d0c6de1119", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800800010006232f0efbb5b0ac70000f1ffffff0000000018110000000000512600d0b23906335d7d61b46eb301b924a3a9b43711daffa8", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
dup(r0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

360.723971ms ago: executing program 6 (id=14553):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x7f, 0x2}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x20040005, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000001c0)={@val={0x2000, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x32, 0x0, @private=0xa010101, @rand_addr=0xdd4}}}}}}, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r6 = socket$inet6(0x10, 0x2, 0x6)
sendto$inet6(r6, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18)
r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"])
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r11, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x0, r13, 0x3}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

320.596491ms ago: executing program 1 (id=14554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="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"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="8100000000000000000000000ee437f0d16e2f8e", @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r4 = signalfd(r3, &(0x7f0000000040)={[0xc39e]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
brk(0x20001000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
timer_create(0x1, &(0x7f0000000200)={0x0, 0x36, 0x0, @thr={&(0x7f0000000080)="2d2529ca77aee7cdad6fcadca440ec3599246b6e203d5ea69478fd5b0455910e0e959f1c52893b7a9f0be0c84739da7cab3d38fb16bc8a7019ddf22d", &(0x7f0000000300)="adadcdc86e525e593f05f2f413ed7b6e37deaaefa024ee26e6429c022ca1cdfc7cabe51251f86d6257b221997b99dbafe49fb50853d847359d3cc8c52df0515c1316ab039fbb022757ace356497087b722cdc6353f8e856c2d18205e4388b8e60047dbaefaf10f339a84defb"}}, &(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendto$inet(r1, &(0x7f0000000480)="b6e646778775705492ddd3a57bb70dba51ed32de06907d8f6c785b1dc256468d1c45eab7393c0c1e0336859313a61e464a5d9f33ca339c90843d3141c8ae5d9f570eed3e0408f0782badaec819852e5e94313a2fb16f6f4e19a99eb52131c2f33f63fcdb12e5843f808e6ef5b7312550bc005c114906cb4a8e7f1e5c64b771ff40bdce34b09a543f100fc8566f7bc41379d6463f9394aedc86281a07d23cb366ed134a11a94bcd82670baf09e3c779c1edf6113a2d2b25a3291efe3624040f5600f4dbedc36fda288a66d0dfed2b", 0xce, 0x8000, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f700"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)

269.650301ms ago: executing program 2 (id=14555):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x84, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, 0x13, @default, @val, @void, [{0xdd, 0x36, "8b7668a217299f9625ae380ad943c7d165bf16f6f67fb2b11c5126fed87f8ba743ce875b937afa83211c578cca264f638de50d63bc88"}, {0xdd, 0x26, "d8a062cc132f8c370f255947985b88cb9f22e02d96f87d9c0a6796070053adb1a2d1fbc742d2"}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x2a000000000, 0x4000)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff000000a6", @ANYRES32=r3, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
timer_create(0x0, &(0x7f0000000400)={0x0, 0x3e, 0x1}, &(0x7f0000000440)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000480)={<r10=>0x0, <r11=>0x0})
clock_gettime(0x0, &(0x7f00000004c0)={<r12=>0x0, <r13=>0x0})
timer_settime(r9, 0x0, &(0x7f0000000500)={{r10, r11+60000000}, {r12, r13+60000000}}, &(0x7f0000000540))
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r14, 0xffffffffffffffff, 0x0)
fchdir(r6)
r15 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x40, 0x0)
statx(r15, &(0x7f00000005c0)='./file0\x00', 0x4000, 0x28b, &(0x7f0000000240))

131.389721ms ago: executing program 1 (id=14556):
r0 = socket$netlink(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x8000)

80.652331ms ago: executing program 2 (id=14557):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@nobarrier}, {@nodioread_nolock}]}, 0x1, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
ioctl$TCSETA(r4, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"})

79.987021ms ago: executing program 5 (id=14558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = epoll_create1(0x80000)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0)={0x60000015})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000dc0))

78.19187ms ago: executing program 6 (id=14559):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@noblock_validity}, {@noquota}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@noquota}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127b, &(0x7f00000011c0)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
sendfile(r0, r0, 0x0, 0x7a680003)
r1 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a)
fallocate(r1, 0x10, 0x3, 0x7c27)
r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec8500000050000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10)
writev(r2, &(0x7f0000002940)=[{&(0x7f0000002440)="8e3969102ce00cb8f2d88b18444c2771dbdc61de50b5c0ab19ea0d889b454f273cf9c7d058247c6e65ad796a0a6a99c401222b2e882c29e4e428c73e498eee131514906d7f422e8b38c2c61afffaaec409182448db40de6f5ffa2493ae5abb2d7534fabee33fd8fb916ca48c6b9fceb1af02be868e7fb77041738a5a266f15d5a46bcd38e4809ea1bb5c62eecd9d2b452df84cec4aba62353d7f3cd8e61085a6cc08da4fc1", 0xa5}, {&(0x7f0000000600)="ab81f0f767b9b05d931785481ea9ccd6bc4b4a4f5c39d8502d5bfdbe44b849c6a449c5eb068d147b1e8c41a26924a2fc07e35d3b6f697831b074d04389433197c8101bb81ffec3be98", 0x49}, {&(0x7f0000002500)="47cee628d1aa0801e9bef0ce7dd822fb85d53022b80484e6a01f55211110eb6639479fdbd5bc3aeba461ed931cbb98fd3a88111a4a4cce6f7a0400a9c7c6333be66c6bcb7d47a4a71c8bdfb162fec0dd9f1f9ca64eb645809f1931cb996aef2ed7c61b57b1db91bdb4e3f9ce29df407a36587f44174e347e2c43f47294a9519875f51ce4f304e8ee5f60c6fc69a961b402d4ec17520aa98bd5616d2fee6279460966a9e283947c64e1d3112bccebfc59ee805d8aeb7cb3ce8f477dd0001f6f50d48858eaffd9e99b08ce29da86fcb13aa9535dbf94b820fb37b5c63c2d6bf7dd31d37a994ed613", 0xe7}, {&(0x7f0000002600)="7f0ab7ffc3ec3c60d113e7d4b07145d9312f6f259f52a8fc18e6362ee572b1487be15fc538fe8314f241346589bed299c86fdf87f96267dcf39945361d9bf0db4cbe77c21c82399877dab6e39224ff523b3760f06f7fcb", 0x57}, {&(0x7f0000002680)="ed4e03af5cdffc58bcfc1a9926f4535225c88ee9108192f89c1f3b49a99fa593a6d0b45c04c0bebf04027b1c0ee37e0d2f3df4d60adb54d4ab8bbd9030f704992f24d7cfc47b6b306b5c7aaabcf16482916c6ef358f924c71e", 0x59}, {&(0x7f0000002700)="e12cb8d13f1a49f319c37482437fd0f98837f1e2a549ae7c5e90971a43f033d79accf0bc840f0f62284b74f305fbde5390ac83ea57a465543bd780d8dd448240ba61c39e331e13466a4c8b6aa8fba4dc5ed07536f6b0c4e03eeb9dad0303eb0da79f960f9323ad9782ca7ffd374a7560c4ab45c46727254d2b61a60ff9e40d56a74feaae8d7eb4e6f8abeaf6cbdc463e1ab0a397e20b22242804576a4bb96586a6dc957fbe131f018e7783ebac3134f8c3fc467969090722ad1f9e95e31be362670d1c24fc2ec978a7014f10d1bf1ac01edac25e982ab7557c59e1d0cff069b463adbf53ca6a289937f7", 0xea}, {&(0x7f0000002800)="4388f71842114fe5fd9452d3c42432f69f97611628bde1ca36148a7e38aa87c6df72770a7dd20687849ae90c4b8e0eec33ada8bfa48fa3be3607635f585fc1f9836b6a301a11070bb88e3ca51cbd099d56935448ac9176ee3f92c5b501d3e9813ff88514a67816a9ddaae9a7d77c79cd2141ad4208b2f9ca7215a6b450166998ff5dda8e0429818b46f23dde009b801d", 0x90}, {&(0x7f00000028c0)="e81d96459d50c32e1c543c2c0baa1fb7aa050f7f67ad7aec9cbee71761c2ba7712954af26ef5ace27ca80f0e6a0ea6a1e777ef7c536f8565dabfa6f3114b83dcf4dce27da84f7cb96b", 0x49}], 0x8)
write$selinux_validatetrans(r2, 0x0, 0x67)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xac}]}, 0x44}, 0x1, 0x0, 0x0, 0xf465187a07d0b69}, 0x10)
fallocate(r1, 0x20, 0x4000, 0x8000)

39.037391ms ago: executing program 5 (id=14560):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r0 = socket$inet(0x2, 0x801, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
epoll_create1(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

0s ago: executing program 1 (id=14561):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
gettid()
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

device batadv9
[  584.164475][ T5361] bond4: (slave batadv9): Enslaving as a backup interface with an up link
[  584.176411][ T5361] bond4 (unregistering): (slave batadv9): Releasing backup interface
[  584.201871][ T5361] bond4 (unregistering): Released all slaves
[  584.238209][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13210'.
[  584.661873][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13214'.
[  584.670923][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13214'.
[  584.724907][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13214'.
[  584.804892][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13225'.
[  584.819817][ T5414] Cannot find add_set index 0 as target
[  584.826584][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13225'.
[  584.938894][ T5416] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  585.599659][ T5440] netlink: 'syz.1.13235': attribute type 3 has an invalid length.
[  585.621143][ T5440] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  585.697326][ T5442] lo speed is unknown, defaulting to 1000
[  585.891336][ T5457] tmpfs: Bad value for 'size'
[  585.932789][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13243'.
[  585.982243][ T5460] tmpfs: Bad value for 'size'
[  586.015786][ T5463] syz.6.13246[5463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  586.015899][ T5463] syz.6.13246[5463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  586.056021][ T5468] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  586.059756][ T5463] netlink: 'syz.6.13246': attribute type 10 has an invalid length.
[  586.126525][ T5463] team0: Device hsr_slave_0 failed to register rx_handler
[  586.239078][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13256'.
[  586.538802][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13263'.
[  586.626144][ T5511] netlink: 'syz.6.13265': attribute type 1 has an invalid length.
[  586.668964][ T5511] bond2: entered promiscuous mode
[  586.678575][ T5511] 8021q: adding VLAN 0 to HW filter on device bond2
[  586.706589][ T5518] bond2: (slave bridge3): making interface the new active one
[  586.714019][ T5517] netlink: 'syz.2.13268': attribute type 3 has an invalid length.
[  586.714185][ T5518] bridge3: entered promiscuous mode
[  586.729440][ T5518] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  586.750579][ T5517] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  586.804665][ T5524] tmpfs: Bad value for 'size'
[  586.859880][ T5528] netlink: 'syz.2.13273': attribute type 1 has an invalid length.
[  586.905715][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv4
[  586.914135][ T5528] bond1: (slave batadv4): Enslaving as a backup interface with an up link
[  586.924490][ T5533] netlink: 'syz.0.13274': attribute type 1 has an invalid length.
[  586.943948][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv4
[  586.952751][ T5533] bond2: (slave batadv4): Enslaving as a backup interface with an up link
[  586.964549][ T5533] bond2 (unregistering): (slave batadv4): Releasing backup interface
[  586.974702][ T5533] bond2 (unregistering): Released all slaves
[  586.986705][ T5528] bond1 (unregistering): (slave batadv4): Releasing backup interface
[  586.996668][ T5528] bond1 (unregistering): Released all slaves
[  587.112825][ T5549] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  587.123558][ T5551] bond_slave_1: entered promiscuous mode
[  587.131285][ T5551] bond_slave_1: left promiscuous mode
[  587.169107][ T5553] netlink: 'syz.0.13280': attribute type 1 has an invalid length.
[  587.250120][ T5553] 8021q: adding VLAN 0 to HW filter on device batadv5
[  587.270151][ T5553] bond2: (slave batadv5): Enslaving as a backup interface with an up link
[  587.300246][ T5553] bond2 (unregistering): (slave batadv5): Releasing backup interface
[  587.318125][ T5570] netlink: 'syz.5.13286': attribute type 1 has an invalid length.
[  587.327438][ T5553] bond2 (unregistering): Released all slaves
[  587.383090][ T5570] 8021q: adding VLAN 0 to HW filter on device bond4
[  587.410504][ T5576] bond4: (slave gretap1): making interface the new active one
[  587.420458][ T5576] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  587.446364][ T5574] netlink: 'syz.1.13288': attribute type 1 has an invalid length.
[  587.483283][ T5580] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  587.509605][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv10
[  587.534707][ T5574] bond2: (slave batadv10): Enslaving as a backup interface with an up link
[  587.570176][ T5574] bond2 (unregistering): (slave batadv10): Releasing backup interface
[  587.586907][ T5574] bond2 (unregistering): Released all slaves
[  587.602194][ T5588] netlink: 'syz.0.13292': attribute type 1 has an invalid length.
[  587.660954][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv6
[  587.688936][ T5588] bond2: (slave batadv6): Enslaving as a backup interface with an up link
[  587.736230][ T5588] bond2 (unregistering): (slave batadv6): Releasing backup interface
[  587.774964][ T5588] bond2 (unregistering): Released all slaves
[  587.802206][   T29] kauditd_printk_skb: 276 callbacks suppressed
[  587.802224][   T29] audit: type=1326 audit(2000000365.520:46580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.855879][   T29] audit: type=1326 audit(2000000365.550:46581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.880351][   T29] audit: type=1326 audit(2000000365.550:46582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.904058][   T29] audit: type=1326 audit(2000000365.550:46583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.928509][   T29] audit: type=1326 audit(2000000365.550:46584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.930423][ T5612] netlink: 'syz.6.13300': attribute type 3 has an invalid length.
[  587.952591][   T29] audit: type=1326 audit(2000000365.550:46585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  587.984476][   T29] audit: type=1326 audit(2000000365.550:46586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  588.008795][   T29] audit: type=1326 audit(2000000365.550:46587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  588.032495][   T29] audit: type=1326 audit(2000000365.550:46588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  588.056695][   T29] audit: type=1326 audit(2000000365.550:46589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.1.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  588.090353][ T5619] FAULT_INJECTION: forcing a failure.
[  588.090353][ T5619] name failslab, interval 1, probability 0, space 0, times 0
[  588.103069][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz.2.13303 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  588.113930][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  588.124071][ T5619] Call Trace:
[  588.127452][ T5619]  <TASK>
[  588.130462][ T5619]  dump_stack_lvl+0xf2/0x150
[  588.135211][ T5619]  dump_stack+0x15/0x1a
[  588.139407][ T5619]  should_fail_ex+0x223/0x230
[  588.144212][ T5619]  should_failslab+0x8f/0xb0
[  588.148996][ T5619]  kmem_cache_alloc_noprof+0x52/0x320
[  588.154426][ T5619]  ? skb_clone+0x154/0x1f0
[  588.158909][ T5619]  skb_clone+0x154/0x1f0
[  588.163185][ T5619]  __netlink_deliver_tap+0x2bd/0x4f0
[  588.168518][ T5619]  netlink_unicast+0x64a/0x670
[  588.173399][ T5619]  netlink_sendmsg+0x5cc/0x6e0
[  588.178192][ T5619]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.183548][ T5619]  __sock_sendmsg+0x140/0x180
[  588.186392][ T5612] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  588.188275][ T5619]  ____sys_sendmsg+0x312/0x410
[  588.188369][ T5619]  __sys_sendmsg+0x19d/0x230
[  588.188414][ T5619]  __x64_sys_sendmsg+0x46/0x50
[  588.211035][ T5619]  x64_sys_call+0x2734/0x2dc0
[  588.215806][ T5619]  do_syscall_64+0xc9/0x1c0
[  588.220340][ T5619]  ? clear_bhb_loop+0x55/0xb0
[  588.225052][ T5619]  ? clear_bhb_loop+0x55/0xb0
[  588.229838][ T5619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.235797][ T5619] RIP: 0033:0x7f7f6eef5d29
[  588.240267][ T5619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.259987][ T5619] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.268515][ T5619] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  588.276505][ T5619] RDX: 000000000004c814 RSI: 0000000020000240 RDI: 0000000000000006
[  588.284541][ T5619] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  588.292563][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.300550][ T5619] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  588.308550][ T5619]  </TASK>
[  588.363239][ T5618] bond5: entered promiscuous mode
[  588.369613][ T5618] 8021q: adding VLAN 0 to HW filter on device bond5
[  588.393447][ T5618] bond5: (slave bridge0): making interface the new active one
[  588.401806][ T5618] bridge0: entered promiscuous mode
[  588.408903][ T5618] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  588.421164][ T5629] bond_slave_1: entered promiscuous mode
[  588.429150][ T5629] bond_slave_1: left promiscuous mode
[  588.566861][ T5641] FAULT_INJECTION: forcing a failure.
[  588.566861][ T5641] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  588.572068][ T5646] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  588.580837][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz.2.13312 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  588.599363][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  588.609446][ T5641] Call Trace:
[  588.612744][ T5641]  <TASK>
[  588.615694][ T5641]  dump_stack_lvl+0xf2/0x150
[  588.620343][ T5641]  dump_stack+0x15/0x1a
[  588.624570][ T5641]  should_fail_ex+0x223/0x230
[  588.629274][ T5641]  should_fail+0xb/0x10
[  588.633504][ T5641]  should_fail_usercopy+0x1a/0x20
[  588.638563][ T5641]  _copy_from_user+0x1e/0xb0
[  588.643357][ T5641]  __sys_bpf+0x14e/0x7a0
[  588.647688][ T5641]  __x64_sys_bpf+0x43/0x50
[  588.652181][ T5641]  x64_sys_call+0x2914/0x2dc0
[  588.656890][ T5641]  do_syscall_64+0xc9/0x1c0
[  588.661499][ T5641]  ? clear_bhb_loop+0x55/0xb0
[  588.666260][ T5641]  ? clear_bhb_loop+0x55/0xb0
[  588.670973][ T5641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.676912][ T5641] RIP: 0033:0x7f7f6eef5d29
[  588.681564][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  588.701366][ T5641] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  588.709874][ T5641] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  588.717869][ T5641] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a
[  588.725864][ T5641] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  588.733859][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.741855][ T5641] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  588.749931][ T5641]  </TASK>
[  588.808203][ T5656] bond_slave_1: entered promiscuous mode
[  588.815046][ T5656] bond_slave_1: left promiscuous mode
[  588.826871][ T5658] Cannot find add_set index 0 as target
[  588.833218][ T5657] bond_slave_1: entered promiscuous mode
[  588.840271][ T5657] bond_slave_1: left promiscuous mode
[  588.905335][ T5662] tmpfs: Bad value for 'size'
[  589.142422][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv6
[  589.176912][ T5693] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  589.183704][ T5677] bond3: (slave batadv6): Enslaving as a backup interface with an up link
[  589.200502][ T5695] bond3 (unregistering): (slave batadv6): Releasing backup interface
[  589.229179][ T5695] bond3 (unregistering): Released all slaves
[  589.374472][ T5713] FAULT_INJECTION: forcing a failure.
[  589.374472][ T5713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  589.387738][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: syz.2.13344 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  589.398536][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  589.408625][ T5713] Call Trace:
[  589.411913][ T5713]  <TASK>
[  589.414859][ T5713]  dump_stack_lvl+0xf2/0x150
[  589.419482][ T5713]  dump_stack+0x15/0x1a
[  589.423749][ T5713]  should_fail_ex+0x223/0x230
[  589.428535][ T5713]  should_fail+0xb/0x10
[  589.432725][ T5713]  should_fail_usercopy+0x1a/0x20
[  589.437793][ T5713]  _copy_from_iter+0xd5/0xd00
[  589.442510][ T5713]  ? kmalloc_reserve+0x16e/0x190
[  589.447460][ T5713]  ? __build_skb_around+0x196/0x1f0
[  589.452673][ T5713]  ? __alloc_skb+0x21f/0x310
[  589.457285][ T5713]  ? __virt_addr_valid+0x1ed/0x250
[  589.462480][ T5713]  ? __check_object_size+0x364/0x520
[  589.467794][ T5713]  netlink_sendmsg+0x460/0x6e0
[  589.472642][ T5713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.477960][ T5713]  __sock_sendmsg+0x140/0x180
[  589.482752][ T5713]  ____sys_sendmsg+0x312/0x410
[  589.487541][ T5713]  __sys_sendmsg+0x19d/0x230
[  589.492245][ T5713]  __x64_sys_sendmsg+0x46/0x50
[  589.497037][ T5713]  x64_sys_call+0x2734/0x2dc0
[  589.501737][ T5713]  do_syscall_64+0xc9/0x1c0
[  589.506269][ T5713]  ? clear_bhb_loop+0x55/0xb0
[  589.510963][ T5713]  ? clear_bhb_loop+0x55/0xb0
[  589.515664][ T5713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.521651][ T5713] RIP: 0033:0x7f7f6eef5d29
[  589.526091][ T5713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.545814][ T5713] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  589.554251][ T5713] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  589.562279][ T5713] RDX: 0000000004000000 RSI: 00000000200002c0 RDI: 0000000000000004
[  589.570255][ T5713] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  589.578326][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  589.586301][ T5713] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  589.594289][ T5713]  </TASK>
[  589.603101][ T5720] __nla_validate_parse: 12 callbacks suppressed
[  589.603115][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13346'.
[  589.640895][ T5720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13346'.
[  589.652094][ T5725] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  589.719608][ T5731] tmpfs: Bad value for 'size'
[  589.829368][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13354'.
[  589.868485][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv10
[  589.869534][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13360'.
[  589.889412][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13360'.
[  589.908694][ T5744] bond6: (slave batadv10): Enslaving as a backup interface with an up link
[  589.939110][ T5758] bond6 (unregistering): (slave batadv10): Releasing backup interface
[  589.958006][ T5764] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  589.989714][ T5758] bond6 (unregistering): Released all slaves
[  589.997837][ T5770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13366'.
[  590.022595][ T5768] bond_slave_1: entered promiscuous mode
[  590.035041][ T5768] bond_slave_1: left promiscuous mode
[  590.109365][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13369'.
[  590.138408][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13369'.
[  590.138421][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13371'.
[  590.153232][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13371'.
[  590.438722][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv7
[  590.447267][ T5799] bond2: (slave batadv7): Enslaving as a backup interface with an up link
[  590.489362][ T5811] bond_slave_1: entered promiscuous mode
[  590.503259][ T5811] bond_slave_1: left promiscuous mode
[  590.536900][ T5814] tmpfs: Bad value for 'size'
[  590.608632][ T5799] bond2 (unregistering): (slave batadv7): Releasing backup interface
[  590.620400][ T5799] bond2 (unregistering): Released all slaves
[  590.663619][ T5824] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  590.845847][ T5840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  590.852443][ T5840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  590.860042][ T5840] vhci_hcd vhci_hcd.0: Device attached
[  590.883192][ T5848] bond_slave_1: entered promiscuous mode
[  590.889602][ T5850] tmpfs: Bad value for 'size'
[  590.898577][ T5848] bond_slave_1: left promiscuous mode
[  590.900532][ T5844] vhci_hcd: connection closed
[  590.904533][T25655] vhci_hcd: stop threads
[  590.913724][T25655] vhci_hcd: release socket
[  590.918224][T25655] vhci_hcd: disconnect device
[  590.962857][ T5855] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  592.059647][ T5879] validate_nla: 6 callbacks suppressed
[  592.059709][ T5879] netlink: 'syz.6.13409': attribute type 1 has an invalid length.
[  592.120476][ T5885] tmpfs: Bad value for 'size'
[  592.201085][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv7
[  592.220673][ T5886] bond3: (slave batadv7): Enslaving as a backup interface with an up link
[  592.235145][ T5888] bond3 (unregistering): (slave batadv7): Releasing backup interface
[  592.247057][ T5888] bond3 (unregistering): Released all slaves
[  592.730691][ T5911] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  593.312989][ T5923] tmpfs: Bad value for 'size'
[  593.347653][ T5926] Cannot find add_set index 0 as target
[  593.408541][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  593.408560][   T29] audit: type=1326 audit(2000000371.130:46811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.449046][   T29] audit: type=1326 audit(2000000371.130:46812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.472805][   T29] audit: type=1326 audit(2000000371.130:46813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.496903][   T29] audit: type=1326 audit(2000000371.130:46814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.520719][   T29] audit: type=1326 audit(2000000371.130:46815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.544603][   T29] audit: type=1326 audit(2000000371.130:46816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.569434][   T29] audit: type=1326 audit(2000000371.130:46817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.593067][   T29] audit: type=1326 audit(2000000371.130:46818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.616880][   T29] audit: type=1326 audit(2000000371.130:46819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.640662][   T29] audit: type=1326 audit(2000000371.130:46820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.5.13425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  593.808036][ T5943] netlink: 'syz.1.13430': attribute type 3 has an invalid length.
[  593.971138][ T5951] tmpfs: Bad value for 'size'
[  593.990976][ T5952] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  594.081154][ T5960] netlink: 'syz.1.13437': attribute type 1 has an invalid length.
[  594.107351][ T5960] bond2: entered promiscuous mode
[  594.107544][ T5963] msdos: Unknown parameter '184467440737095516150177777777777777777777701777777777777777777777ÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  594.112704][ T5960] 8021q: adding VLAN 0 to HW filter on device bond2
[  594.149948][ T5960] bond2: (slave bridge2): making interface the new active one
[  594.157528][ T5960] bridge2: entered promiscuous mode
[  594.169564][ T5960] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  594.213786][ T5965] netlink: 'syz.6.13439': attribute type 1 has an invalid length.
[  594.240081][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv8
[  594.249110][ T5965] bond3: (slave batadv8): Enslaving as a backup interface with an up link
[  594.278890][ T5965] bond3 (unregistering): (slave batadv8): Releasing backup interface
[  594.311689][ T5965] bond3 (unregistering): Released all slaves
[  594.334456][ T5974] netlink: 'syz.2.13441': attribute type 1 has an invalid length.
[  594.357722][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv5
[  594.367592][ T5974] bond1: (slave batadv5): Enslaving as a backup interface with an up link
[  594.385110][ T5974] bond1 (unregistering): (slave batadv5): Releasing backup interface
[  594.403730][ T5974] bond1 (unregistering): Released all slaves
[  594.694670][ T5994] bond_slave_1: entered promiscuous mode
[  594.719486][ T5994] bond_slave_1: left promiscuous mode
[  594.754636][ T5998] syz.2.13449[5998] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  594.754694][ T5998] syz.2.13449[5998] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  594.766452][ T5998] syz.2.13449[5998] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  594.811857][ T6003] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  594.870166][ T6007] FAULT_INJECTION: forcing a failure.
[  594.870166][ T6007] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  594.883455][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.13452 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  594.894262][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  594.904351][ T6007] Call Trace:
[  594.907654][ T6007]  <TASK>
[  594.910601][ T6007]  dump_stack_lvl+0xf2/0x150
[  594.915242][ T6007]  dump_stack+0x15/0x1a
[  594.919422][ T6007]  should_fail_ex+0x223/0x230
[  594.924149][ T6007]  should_fail+0xb/0x10
[  594.928341][ T6007]  should_fail_usercopy+0x1a/0x20
[  594.933471][ T6007]  _copy_from_user+0x1e/0xb0
[  594.938125][ T6007]  __x64_sys_epoll_ctl+0x8e/0xf0
[  594.943100][ T6007]  x64_sys_call+0x1361/0x2dc0
[  594.947803][ T6007]  do_syscall_64+0xc9/0x1c0
[  594.952318][ T6007]  ? clear_bhb_loop+0x55/0xb0
[  594.957077][ T6007]  ? clear_bhb_loop+0x55/0xb0
[  594.961762][ T6007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.967725][ T6007] RIP: 0033:0x7f7f6eef5d29
[  594.972149][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.991943][ T6007] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  595.000387][ T6007] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  595.008373][ T6007] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000000000000006
[  595.016411][ T6007] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  595.024403][ T6007] R10: 0000000020000dc0 R11: 0000000000000246 R12: 0000000000000001
[  595.032468][ T6007] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  595.040496][ T6007]  </TASK>
[  595.076358][ T6011] __nla_validate_parse: 15 callbacks suppressed
[  595.076380][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13455'.
[  595.189994][ T6026] netlink: 'syz.1.13461': attribute type 3 has an invalid length.
[  595.383512][ T6032] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  595.594437][ T6036] netlink: 'syz.1.13465': attribute type 1 has an invalid length.
[  595.635753][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13465'.
[  595.649202][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv11
[  595.657487][ T6036] bond3: (slave batadv11): Enslaving as a backup interface with an up link
[  595.674290][ T6036] bond3 (unregistering): (slave batadv11): Releasing backup interface
[  595.691614][ T6036] bond3 (unregistering): Released all slaves
[  595.845940][ T6056] netlink: 'syz.1.13472': attribute type 3 has an invalid length.
[  595.900448][ T6057] netlink: 'syz.6.13473': attribute type 1 has an invalid length.
[  595.901345][ T6061] tmpfs: Bad value for 'size'
[  595.914819][ T6063] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  595.918937][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13473'.
[  595.938554][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv9
[  595.946925][ T6057] bond3: (slave batadv9): Enslaving as a backup interface with an up link
[  595.960045][ T6057] bond3 (unregistering): (slave batadv9): Releasing backup interface
[  595.970066][ T6057] bond3 (unregistering): Released all slaves
[  596.143308][ T6080] Cannot find add_set index 0 as target
[  596.308543][ T6085] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  596.795064][ T6095] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  596.916687][ T6100] netlink: 'syz.5.13490': attribute type 1 has an invalid length.
[  596.950568][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13490'.
[  596.972428][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv11
[  596.980807][ T6100] bond6: (slave batadv11): Enslaving as a backup interface with an up link
[  596.999772][ T6100] bond6 (unregistering): (slave batadv11): Releasing backup interface
[  597.018275][ T6100] bond6 (unregistering): Released all slaves
[  597.109852][ T6126] netlink: 'syz.5.13498': attribute type 3 has an invalid length.
[  597.138884][ T6126] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  597.150002][ T6124] netlink: 'syz.1.13499': attribute type 3 has an invalid length.
[  597.217855][ T6129] netlink: 'syz.1.13500': attribute type 3 has an invalid length.
[  597.242910][ T6129] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  597.816116][ T6144] tmpfs: Bad value for 'size'
[  597.852082][ T6148] netlink: 'syz.0.13508': attribute type 3 has an invalid length.
[  597.864127][ T6148] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  597.957537][ T6154] netlink: 'syz.6.13511': attribute type 3 has an invalid length.
[  597.994591][ T6154] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  598.033408][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13514'.
[  598.176012][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13519'.
[  598.281827][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13524'.
[  598.306424][ T6185] netlink: 'syz.2.13524': attribute type 1 has an invalid length.
[  598.356452][ T6185] bond1: entered promiscuous mode
[  598.374977][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[  598.394941][ T6189] bond1: (slave bridge1): making interface the new active one
[  598.402562][ T6189] bridge1: entered promiscuous mode
[  598.410528][ T6189] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  598.418551][ T6193] netlink: 'syz.6.13527': attribute type 3 has an invalid length.
[  598.427659][   T29] kauditd_printk_skb: 526 callbacks suppressed
[  598.427674][   T29] audit: type=1326 audit(2000000376.140:47347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.13524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x0
[  598.469255][ T6193] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  598.479632][ T6197] Cannot find add_set index 0 as target
[  598.503178][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13530'.
[  598.549784][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13531'.
[  598.689313][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13534'.
[  598.707704][T25655] bond0: (slave bond_slave_0): interface is now down
[  598.714540][T25655] bond0: (slave bond_slave_1): interface is now down
[  598.751366][T25655] bond0: now running without any active interface!
[  598.872831][ T6216] tmpfs: Bad value for 'size'
[  598.877605][   T29] audit: type=1326 audit(2000000376.590:47348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  598.901448][   T29] audit: type=1326 audit(2000000376.590:47349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  598.936582][   T29] audit: type=1326 audit(2000000376.650:47350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  598.961291][   T29] audit: type=1326 audit(2000000376.650:47351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  598.984912][   T29] audit: type=1326 audit(2000000376.650:47352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  599.009409][   T29] audit: type=1326 audit(2000000376.650:47353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  599.033197][   T29] audit: type=1326 audit(2000000376.650:47354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  599.057500][   T29] audit: type=1326 audit(2000000376.650:47355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  599.081895][   T29] audit: type=1326 audit(2000000376.650:47356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6217 comm="syz.6.13538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  599.154853][ T6227] netlink: 'syz.6.13542': attribute type 3 has an invalid length.
[  599.157261][ T6230] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  599.172430][ T6227] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  599.271023][ T6236] netlink: 'syz.5.13546': attribute type 1 has an invalid length.
[  599.374448][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv12
[  599.402278][ T6249] tmpfs: Bad value for 'size'
[  599.406356][ T6244] bond6: (slave batadv12): Enslaving as a backup interface with an up link
[  599.477425][ T6236] bond6 (unregistering): (slave batadv12): Releasing backup interface
[  599.521856][ T6236] bond6 (unregistering): Released all slaves
[  599.581208][ T6260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  599.605025][ T6266] lo speed is unknown, defaulting to 1000
[  599.713166][ T6274] Cannot find add_set index 0 as target
[  600.414315][ T6292] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  600.489332][ T6299] __nla_validate_parse: 3 callbacks suppressed
[  600.489357][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13570'.
[  600.619695][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13576'.
[  600.635736][ T6311] netlink: 'syz.2.13576': attribute type 1 has an invalid length.
[  600.669830][ T6311] bond2: entered promiscuous mode
[  600.711590][ T6311] 8021q: adding VLAN 0 to HW filter on device bond2
[  600.773079][ T6317] bond2: (slave bridge2): making interface the new active one
[  600.780737][ T6317] bridge2: entered promiscuous mode
[  600.787799][ T6317] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  600.879515][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13579'.
[  600.907417][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv12
[  600.924239][ T6322] bond3: (slave batadv12): Enslaving as a backup interface with an up link
[  600.945240][ T6322] bond3 (unregistering): (slave batadv12): Releasing backup interface
[  600.954854][ T6322] bond3 (unregistering): Released all slaves
[  601.023028][ T6328] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  601.110084][ T6332] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  601.190851][ T6335] Cannot find add_set index 0 as target
[  601.502917][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13585'.
[  601.533214][ T6343] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  601.592128][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13588'.
[  601.605613][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv10
[  601.613752][ T6345] bond3: (slave batadv10): Enslaving as a backup interface with an up link
[  601.643573][ T6345] bond3 (unregistering): (slave batadv10): Releasing backup interface
[  601.662331][ T6345] bond3 (unregistering): Released all slaves
[  601.692862][ T6355] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  602.174498][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13599'.
[  602.208881][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13600'.
[  602.457114][ T6389] validate_nla: 3 callbacks suppressed
[  602.457134][ T6389] netlink: 'syz.1.13604': attribute type 3 has an invalid length.
[  602.478276][ T6389] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  602.549875][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13607'.
[  602.625175][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13609'.
[  602.794738][ T6408] bond_slave_1: entered promiscuous mode
[  602.818696][ T6408] bond_slave_1: left promiscuous mode
[  602.844734][ T6404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  602.988992][ T6429] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  603.256988][ T6444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  603.447227][ T6450] lo speed is unknown, defaulting to 1000
[  603.886980][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13629'.
[  604.016341][ T6473] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  604.194929][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  604.194943][   T29] audit: type=1326 audit(2000000381.910:47553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.301015][   T29] audit: type=1326 audit(2000000381.950:47554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.324726][   T29] audit: type=1326 audit(2000000381.950:47555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.348371][   T29] audit: type=1326 audit(2000000381.950:47556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.372133][   T29] audit: type=1326 audit(2000000381.950:47557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.395802][   T29] audit: type=1326 audit(2000000381.950:47558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.419573][   T29] audit: type=1326 audit(2000000381.950:47559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.443204][   T29] audit: type=1326 audit(2000000381.950:47560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.466960][   T29] audit: type=1326 audit(2000000381.950:47561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.490627][   T29] audit: type=1326 audit(2000000381.950:47562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.0.13637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  604.749433][ T6504] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  605.025402][ T6523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6523 comm=syz.6.13660
[  605.200157][ T6540] netlink: 'syz.6.13665': attribute type 1 has an invalid length.
[  605.224621][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv11
[  605.232973][ T6540] bond3: (slave batadv11): Enslaving as a backup interface with an up link
[  605.264364][ T6540] bond3 (unregistering): (slave batadv11): Releasing backup interface
[  605.295819][ T6540] bond3 (unregistering): Released all slaves
[  605.309824][ T6550] SET target dimension over the limit!
[  605.674274][ T6566] __nla_validate_parse: 8 callbacks suppressed
[  605.674292][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13675'.
[  606.021383][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13694'.
[  606.043571][ T6604] netlink: 'syz.0.13692': attribute type 1 has an invalid length.
[  606.078233][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13692'.
[  606.134731][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv8
[  606.185130][ T6604] bond2: (slave batadv8): Enslaving as a backup interface with an up link
[  606.270618][ T6614] bond2 (unregistering): (slave batadv8): Releasing backup interface
[  606.296636][ T6614] bond2 (unregistering): Released all slaves
[  606.401187][ T6632] tmpfs: Bad value for 'size'
[  606.503219][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13708'.
[  606.522344][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13709'.
[  606.560169][ T6650] FAULT_INJECTION: forcing a failure.
[  606.560169][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.569022][ T6653] SET target dimension over the limit!
[  606.573445][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.2.13710 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  606.589632][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  606.599735][ T6650] Call Trace:
[  606.603024][ T6650]  <TASK>
[  606.605985][ T6650]  dump_stack_lvl+0xf2/0x150
[  606.610712][ T6650]  dump_stack+0x15/0x1a
[  606.614959][ T6650]  should_fail_ex+0x223/0x230
[  606.619743][ T6650]  should_fail+0xb/0x10
[  606.623983][ T6650]  should_fail_usercopy+0x1a/0x20
[  606.629097][ T6650]  _copy_to_user+0x20/0xa0
[  606.633576][ T6650]  simple_read_from_buffer+0xa0/0x110
[  606.639157][ T6650]  proc_fail_nth_read+0xf9/0x140
[  606.644215][ T6650]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  606.649855][ T6650]  vfs_read+0x1a2/0x700
[  606.654058][ T6650]  ? __rcu_read_unlock+0x4e/0x70
[  606.659012][ T6650]  ? __fget_files+0x17c/0x1c0
[  606.663743][ T6650]  ksys_read+0xe8/0x1b0
[  606.667953][ T6650]  __x64_sys_read+0x42/0x50
[  606.672612][ T6650]  x64_sys_call+0x2874/0x2dc0
[  606.677333][ T6650]  do_syscall_64+0xc9/0x1c0
[  606.681854][ T6650]  ? clear_bhb_loop+0x55/0xb0
[  606.686615][ T6650]  ? clear_bhb_loop+0x55/0xb0
[  606.691306][ T6650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.697237][ T6650] RIP: 0033:0x7f7f6eef473c
[  606.701709][ T6650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  606.721484][ T6650] RSP: 002b:00007f7f6d567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  606.729909][ T6650] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef473c
[  606.737911][ T6650] RDX: 000000000000000f RSI: 00007f7f6d5670a0 RDI: 0000000000000007
[  606.745903][ T6650] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  606.753999][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.761978][ T6650] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  606.770007][ T6650]  </TASK>
[  606.950656][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13721'.
[  607.050461][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13727'.
[  607.089894][ T6692] Cannot find add_set index 0 as target
[  607.103374][ T6693] Cannot find add_set index 0 as target
[  607.241819][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13734'.
[  607.435710][ T6712] lo speed is unknown, defaulting to 1000
[  607.653751][ T6722] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  607.836333][ T6724] SET target dimension over the limit!
[  607.940334][ T6727] netlink: 'syz.2.13743': attribute type 1 has an invalid length.
[  607.965625][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13743'.
[  607.983796][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv6
[  607.992828][ T6727] bond3: (slave batadv6): Enslaving as a backup interface with an up link
[  608.009648][ T6727] bond3 (unregistering): (slave batadv6): Releasing backup interface
[  608.045980][ T6727] bond3 (unregistering): Released all slaves
[  608.131827][ T6743] FAULT_INJECTION: forcing a failure.
[  608.131827][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.145087][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.2.13750 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  608.155961][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  608.166083][ T6743] Call Trace:
[  608.169369][ T6743]  <TASK>
[  608.172304][ T6743]  dump_stack_lvl+0xf2/0x150
[  608.177001][ T6743]  dump_stack+0x15/0x1a
[  608.181186][ T6743]  should_fail_ex+0x223/0x230
[  608.185928][ T6743]  should_fail+0xb/0x10
[  608.190154][ T6743]  should_fail_usercopy+0x1a/0x20
[  608.195265][ T6743]  _copy_from_user+0x1e/0xb0
[  608.199881][ T6743]  __sys_bpf+0x14e/0x7a0
[  608.204143][ T6743]  __x64_sys_bpf+0x43/0x50
[  608.208586][ T6743]  x64_sys_call+0x2914/0x2dc0
[  608.213351][ T6743]  do_syscall_64+0xc9/0x1c0
[  608.217864][ T6743]  ? clear_bhb_loop+0x55/0xb0
[  608.222554][ T6743]  ? clear_bhb_loop+0x55/0xb0
[  608.227317][ T6743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.233234][ T6743] RIP: 0033:0x7f7f6eef5d29
[  608.237733][ T6743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.257461][ T6743] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  608.265881][ T6743] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  608.273867][ T6743] RDX: 0000000000000050 RSI: 0000000020000740 RDI: 0000000000000000
[  608.281845][ T6743] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  608.289910][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.297960][ T6743] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  608.305975][ T6743]  </TASK>
[  608.423923][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13754'.
[  608.484875][ T6757] netlink: 'syz.0.13756': attribute type 3 has an invalid length.
[  608.562776][ T6757] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  608.741305][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.765450][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.041744][ T6797] tmpfs: Bad value for 'size'
[  609.068349][ T6799] netlink: 'syz.0.13772': attribute type 3 has an invalid length.
[  609.087538][ T6799] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  609.267832][ T6811] lo speed is unknown, defaulting to 1000
[  609.376312][ T6815] FAULT_INJECTION: forcing a failure.
[  609.376312][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.389468][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.2.13779 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  609.400273][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  609.410338][ T6815] Call Trace:
[  609.413632][ T6815]  <TASK>
[  609.416566][ T6815]  dump_stack_lvl+0xf2/0x150
[  609.421234][ T6815]  dump_stack+0x15/0x1a
[  609.425423][ T6815]  should_fail_ex+0x223/0x230
[  609.430114][ T6815]  should_fail+0xb/0x10
[  609.434277][ T6815]  should_fail_usercopy+0x1a/0x20
[  609.439364][ T6815]  _copy_from_user+0x1e/0xb0
[  609.443996][ T6815]  do_ipv6_setsockopt+0x1ef/0x2250
[  609.449131][ T6815]  ? kstrtoull+0x110/0x140
[  609.453553][ T6815]  ? kstrtouint+0x77/0xc0
[  609.457911][ T6815]  ? __rcu_read_unlock+0x4e/0x70
[  609.462879][ T6815]  ? avc_has_perm_noaudit+0x1cc/0x210
[  609.468363][ T6815]  ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0
[  609.474776][ T6815]  ipv6_setsockopt+0x57/0x130
[  609.479473][ T6815]  udpv6_setsockopt+0x95/0xb0
[  609.484211][ T6815]  sock_common_setsockopt+0x64/0x80
[  609.489431][ T6815]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  609.495386][ T6815]  __sys_setsockopt+0x187/0x200
[  609.500315][ T6815]  __x64_sys_setsockopt+0x66/0x80
[  609.505374][ T6815]  x64_sys_call+0x282e/0x2dc0
[  609.510157][ T6815]  do_syscall_64+0xc9/0x1c0
[  609.514678][ T6815]  ? clear_bhb_loop+0x55/0xb0
[  609.519475][ T6815]  ? clear_bhb_loop+0x55/0xb0
[  609.524168][ T6815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.530151][ T6815] RIP: 0033:0x7f7f6eef5d29
[  609.534647][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.554344][ T6815] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  609.562852][ T6815] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  609.570833][ T6815] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006
[  609.578916][ T6815] RBP: 00007f7f6d567090 R08: 0000000000000018 R09: 0000000000000000
[  609.586897][ T6815] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[  609.594994][ T6815] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  609.602987][ T6815]  </TASK>
[  609.646599][   T29] kauditd_printk_skb: 306 callbacks suppressed
[  609.646662][   T29] audit: type=1326 audit(2000000387.360:47869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.677213][   T29] audit: type=1326 audit(2000000387.360:47870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.757979][   T29] audit: type=1326 audit(2000000387.360:47871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.781716][   T29] audit: type=1326 audit(2000000387.360:47872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.805361][   T29] audit: type=1326 audit(2000000387.360:47873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.829114][   T29] audit: type=1326 audit(2000000387.370:47874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.852776][   T29] audit: type=1326 audit(2000000387.370:47875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.876388][   T29] audit: type=1326 audit(2000000387.370:47876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.900060][   T29] audit: type=1326 audit(2000000387.390:47877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.923740][   T29] audit: type=1326 audit(2000000387.390:47878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6817 comm="syz.6.13780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff160fa5d29 code=0x7ffc0000
[  609.993689][ T6829] netlink: 'syz.6.13786': attribute type 1 has an invalid length.
[  610.022645][ T6837] Cannot find add_set index 0 as target
[  610.046840][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv12
[  610.057939][ T6829] bond3: (slave batadv12): Enslaving as a backup interface with an up link
[  610.072235][ T6841] tmpfs: Bad value for 'size'
[  610.106905][ T6829] bond3 (unregistering): (slave batadv12): Releasing backup interface
[  610.124260][ T6829] bond3 (unregistering): Released all slaves
[  610.287058][ T6860] netlink: 'syz.5.13797': attribute type 1 has an invalid length.
[  610.313504][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv13
[  610.344667][ T6860] bond6: (slave batadv13): Enslaving as a backup interface with an up link
[  610.375447][ T6860] bond6 (unregistering): (slave batadv13): Releasing backup interface
[  610.406197][ T6860] bond6 (unregistering): Released all slaves
[  610.583180][ T6893] tmpfs: Bad value for 'size'
[  610.623314][ T6895] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  610.758393][ T6904] netlink: 'syz.5.13818': attribute type 1 has an invalid length.
[  610.786100][ T6904] __nla_validate_parse: 6 callbacks suppressed
[  610.786117][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13818'.
[  610.788119][ T6900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  610.797413][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv14
[  610.820469][ T6904] bond6: (slave batadv14): Enslaving as a backup interface with an up link
[  610.838815][ T6904] bond6 (unregistering): (slave batadv14): Releasing backup interface
[  610.863044][ T6904] bond6 (unregistering): Released all slaves
[  610.972507][ T6920] tmpfs: Bad value for 'size'
[  611.094883][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13832'.
[  611.175300][ T6931] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  611.231733][ T6944] netlink: 'syz.2.13835': attribute type 1 has an invalid length.
[  611.247328][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13835'.
[  611.261149][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv7
[  611.269506][ T6944] bond3: (slave batadv7): Enslaving as a backup interface with an up link
[  611.281232][ T6944] bond3 (unregistering): (slave batadv7): Releasing backup interface
[  611.299053][ T6944] bond3 (unregistering): Released all slaves
[  611.404364][ T6951] netlink: 'syz.2.13837': attribute type 3 has an invalid length.
[  611.432627][ T6951] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  611.914961][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13843'.
[  612.198552][ T6993] lo speed is unknown, defaulting to 1000
[  612.372916][ T7003] netlink: 'syz.5.13859': attribute type 3 has an invalid length.
[  612.416854][ T7003] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  612.581067][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13866'.
[  612.613555][ T7025] netlink: 'syz.0.13865': attribute type 1 has an invalid length.
[  612.644657][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13865'.
[  612.688168][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv9
[  612.741878][ T7018] bond2: (slave batadv9): Enslaving as a backup interface with an up link
[  612.772971][ T7025] bond2 (unregistering): (slave batadv9): Releasing backup interface
[  612.825980][ T7025] bond2 (unregistering): Released all slaves
[  612.911195][ T7036] lo speed is unknown, defaulting to 1000
[  613.039129][ T7039] netlink: 'syz.0.13873': attribute type 153 has an invalid length.
[  613.219736][ T7054] bond_slave_1: entered promiscuous mode
[  613.286683][ T7054] bond_slave_1: left promiscuous mode
[  613.400259][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13878'.
[  613.852063][ T7071] netlink: 'syz.5.13887': attribute type 1 has an invalid length.
[  613.867988][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13887'.
[  613.894721][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv15
[  613.896409][ T7077] netlink: 'syz.0.13889': attribute type 3 has an invalid length.
[  613.919630][ T7071] bond6: (slave batadv15): Enslaving as a backup interface with an up link
[  613.939418][ T7080] tmpfs: Bad value for 'size'
[  613.954581][ T7081] bond6 (unregistering): (slave batadv15): Releasing backup interface
[  613.970249][ T7082] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  613.994925][ T7081] bond6 (unregistering): Released all slaves
[  614.135383][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13896'.
[  614.156922][ T7096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7096 comm=syz.5.13896
[  614.299629][ T7062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  614.324543][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13901'.
[  614.482657][ T7119] tmpfs: Bad value for 'size'
[  614.633309][ T7125] netlink: 'syz.2.13907': attribute type 1 has an invalid length.
[  614.674633][   T29] kauditd_printk_skb: 266 callbacks suppressed
[  614.674673][   T29] audit: type=1326 audit(2000000393.363:48145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.705311][   T29] audit: type=1326 audit(2000000393.363:48146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.729803][   T29] audit: type=1326 audit(2000000393.363:48147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.753491][   T29] audit: type=1326 audit(2000000393.363:48148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.777816][   T29] audit: type=1326 audit(2000000393.363:48149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.802116][   T29] audit: type=1326 audit(2000000393.363:48150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.825767][   T29] audit: type=1326 audit(2000000393.363:48151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.850204][   T29] audit: type=1326 audit(2000000393.363:48152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.873850][   T29] audit: type=1326 audit(2000000393.363:48153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.898577][   T29] audit: type=1326 audit(2000000393.363:48154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz.5.13908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  614.999704][ T7125] bond3 (unregistering): Released all slaves
[  615.014568][ T7132] bond_slave_1: entered promiscuous mode
[  615.021504][ T7132] bond_slave_1: left promiscuous mode
[  615.215127][ T7147] tmpfs: Bad value for 'size'
[  615.342399][ T7157] netlink: 'syz.6.13920': attribute type 21 has an invalid length.
[  615.358313][ T7157] netlink: 'syz.6.13920': attribute type 1 has an invalid length.
[  615.369006][ T7155] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  615.384070][ T7155] batman_adv: batadv0: Adding interface: ip6gretap1
[  615.390811][ T7155] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  615.411566][ T7155] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  615.430822][ T7141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  615.858963][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.0.13929
[  616.094234][ T7193] __nla_validate_parse: 5 callbacks suppressed
[  616.094429][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13930'.
[  616.197612][ T7195] tmpfs: Bad value for 'size'
[  616.409486][ T7197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  616.440516][ T7201] ªªªªªª: renamed from vlan0 (while UP)
[  616.491535][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13936'.
[  616.584618][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13935'.
[  616.608840][ T7217] Cannot find add_set index 0 as target
[  616.774014][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13941'.
[  617.049196][ T7232] netlink: 'syz.0.13943': attribute type 1 has an invalid length.
[  617.093771][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13943'.
[  617.140157][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv10
[  617.164402][ T7232] bond2: (slave batadv10): Enslaving as a backup interface with an up link
[  617.199549][ T7232] bond2 (unregistering): (slave batadv10): Releasing backup interface
[  617.220086][ T7232] bond2 (unregistering): Released all slaves
[  617.506079][ T7253] Cannot find add_set index 0 as target
[  617.626995][ T7263] netlink: 'syz.5.13951': attribute type 1 has an invalid length.
[  617.783748][ T7267] netlink: 'syz.2.13955': attribute type 1 has an invalid length.
[  617.810369][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13955'.
[  617.823459][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv8
[  617.833251][ T7267] bond3: (slave batadv8): Enslaving as a backup interface with an up link
[  617.845022][ T7267] bond3 (unregistering): (slave batadv8): Releasing backup interface
[  617.859012][ T7267] bond3 (unregistering): Released all slaves
[  617.992967][ T7278] FAULT_INJECTION: forcing a failure.
[  617.992967][ T7278] name failslab, interval 1, probability 0, space 0, times 0
[  618.005770][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.2.13959 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  618.016584][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  618.026654][ T7278] Call Trace:
[  618.029929][ T7278]  <TASK>
[  618.032857][ T7278]  dump_stack_lvl+0xf2/0x150
[  618.037552][ T7278]  dump_stack+0x15/0x1a
[  618.041717][ T7278]  should_fail_ex+0x223/0x230
[  618.046447][ T7278]  should_failslab+0x8f/0xb0
[  618.051048][ T7278]  kmem_cache_alloc_node_noprof+0x59/0x320
[  618.056948][ T7278]  ? __alloc_skb+0x10b/0x310
[  618.061567][ T7278]  __alloc_skb+0x10b/0x310
[  618.066010][ T7278]  netlink_alloc_large_skb+0xad/0xe0
[  618.071378][ T7278]  netlink_sendmsg+0x3b4/0x6e0
[  618.076174][ T7278]  ? __pfx_netlink_sendmsg+0x10/0x10
[  618.081531][ T7278]  __sock_sendmsg+0x140/0x180
[  618.086276][ T7278]  ____sys_sendmsg+0x312/0x410
[  618.091063][ T7278]  __sys_sendmsg+0x19d/0x230
[  618.095731][ T7278]  __x64_sys_sendmsg+0x46/0x50
[  618.100519][ T7278]  x64_sys_call+0x2734/0x2dc0
[  618.105197][ T7278]  do_syscall_64+0xc9/0x1c0
[  618.109711][ T7278]  ? clear_bhb_loop+0x55/0xb0
[  618.114467][ T7278]  ? clear_bhb_loop+0x55/0xb0
[  618.119165][ T7278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.125118][ T7278] RIP: 0033:0x7f7f6eef5d29
[  618.129621][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  618.149384][ T7278] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  618.157834][ T7278] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  618.165828][ T7278] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[  618.173845][ T7278] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  618.181988][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  618.190018][ T7278] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  618.198010][ T7278]  </TASK>
[  618.248909][ T7285] netlink: 'syz.2.13962': attribute type 3 has an invalid length.
[  618.267343][ T7285] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  618.751840][ T7321] Cannot find add_set index 0 as target
[  618.847116][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13977'.
[  618.856552][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13977'.
[  618.897616][ T7325] lo speed is unknown, defaulting to 1000
[  619.637132][ T7348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  619.693269][ T7353] lo speed is unknown, defaulting to 1000
[  619.779807][   T29] kauditd_printk_skb: 317 callbacks suppressed
[  619.779824][   T29] audit: type=1326 audit(2000000398.483:48472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  619.810439][   T29] audit: type=1326 audit(2000000398.483:48473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  619.917889][   T29] audit: type=1326 audit(2000000398.493:48474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  619.942197][   T29] audit: type=1326 audit(2000000398.493:48475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  619.965877][   T29] audit: type=1326 audit(2000000398.493:48476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  619.989508][   T29] audit: type=1326 audit(2000000398.493:48477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  620.013869][   T29] audit: type=1326 audit(2000000398.493:48478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  620.037606][   T29] audit: type=1326 audit(2000000398.493:48479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  620.061851][   T29] audit: type=1326 audit(2000000398.493:48480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  620.085642][   T29] audit: type=1326 audit(2000000398.493:48481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.1.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f315d29 code=0x7ffc0000
[  620.149355][ T7376] netlink: 'syz.2.13997': attribute type 3 has an invalid length.
[  620.167504][ T7376] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  620.167951][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13996'.
[  620.198860][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13998'.
[  620.274218][ T7387] tmpfs: Bad value for 'size'
[  620.545929][ T7404] netlink: 'syz.0.14009': attribute type 1 has an invalid length.
[  620.587377][ T7404] 8021q: adding VLAN 0 to HW filter on device batadv11
[  620.605270][ T7404] bond2: (slave batadv11): Enslaving as a backup interface with an up link
[  620.615913][ T7398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  620.656831][ T7404] bond2 (unregistering): (slave batadv11): Releasing backup interface
[  620.725381][ T7404] bond2 (unregistering): Released all slaves
[  620.735266][ T7419] tmpfs: Bad value for 'size'
[  620.988441][ T7434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.071455][ T7434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.100699][ T7439] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  621.149775][ T7434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.186745][ T7438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  621.244391][ T7441] __nla_validate_parse: 4 callbacks suppressed
[  621.244410][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14024'.
[  621.340353][ T7434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.425668][ T7434] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.448840][ T7434] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.467895][ T7446] tmpfs: Bad value for 'size'
[  621.481971][ T7434] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.510646][ T7434] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.624390][ T7451] netlink: 'syz.1.14025': attribute type 3 has an invalid length.
[  621.644051][ T7451] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  621.825548][ T7467] IPv6: NLM_F_CREATE should be specified when creating new route
[  621.903887][ T7469] tmpfs: Bad value for 'mpol'
[  622.004457][ T7481] netlink: 'syz.0.14038': attribute type 1 has an invalid length.
[  622.063510][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14038'.
[  622.124856][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv12
[  622.165523][ T7473] bond2: (slave batadv12): Enslaving as a backup interface with an up link
[  622.218796][ T7481] bond2 (unregistering): (slave batadv12): Releasing backup interface
[  622.239037][ T7481] bond2 (unregistering): Released all slaves
[  622.319178][ T7499] netlink: 'syz.1.14044': attribute type 1 has an invalid length.
[  622.343292][ T7501] netlink: 'syz.0.14046': attribute type 3 has an invalid length.
[  622.358676][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14044'.
[  622.369185][ T7501] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  622.392354][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv13
[  622.435106][ T7494] bond3: (slave batadv13): Enslaving as a backup interface with an up link
[  622.448225][ T7499] bond3 (unregistering): (slave batadv13): Releasing backup interface
[  622.467234][ T7499] bond3 (unregistering): Released all slaves
[  622.791175][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14063'.
[  622.908939][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14070'.
[  623.150443][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14079'.
[  623.206858][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14083'.
[  623.572591][ T7620] netlink: 'syz.0.14098': attribute type 3 has an invalid length.
[  623.599230][ T7620] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  623.714442][ T7625] netlink: 'syz.0.14100': attribute type 1 has an invalid length.
[  623.733305][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14100'.
[  623.748901][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv13
[  623.757358][ T7625] bond2: (slave batadv13): Enslaving as a backup interface with an up link
[  623.784753][ T7625] bond2 (unregistering): (slave batadv13): Releasing backup interface
[  623.784948][ T7638] netlink: 'syz.6.14104': attribute type 1 has an invalid length.
[  623.802999][ T7625] bond2 (unregistering): Released all slaves
[  623.899340][ T7644] syzkaller0: entered allmulticast mode
[  623.905369][ T7643] syzkaller0: left allmulticast mode
[  623.970128][ T7652] netlink: 'syz.0.14111': attribute type 3 has an invalid length.
[  623.980454][ T7652] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  624.056895][ T7657] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  624.073464][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14113'.
[  624.118795][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14114'.
[  624.180232][ T7668] netlink: 'syz.1.14118': attribute type 1 has an invalid length.
[  624.244781][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv14
[  624.274163][ T7668] bond3: (slave batadv14): Enslaving as a backup interface with an up link
[  624.293059][ T7666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  624.331163][ T7676] bond3 (unregistering): (slave batadv14): Releasing backup interface
[  624.342036][ T7676] bond3 (unregistering): Released all slaves
[  624.586464][ T7699] xt_hashlimit: size too large, truncated to 1048576
[  624.933915][ T7713] Cannot find add_set index 0 as target
[  624.940522][ T7714] netlink: 'syz.6.14133': attribute type 1 has an invalid length.
[  624.960035][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv13
[  624.970048][ T7708] bond3: (slave batadv13): Enslaving as a backup interface with an up link
[  625.024180][ T7708] bond3 (unregistering): (slave batadv13): Releasing backup interface
[  625.034472][ T7708] bond3 (unregistering): Released all slaves
[  625.212256][ T7719] netlink: 'syz.6.14136': attribute type 1 has an invalid length.
[  625.249798][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv14
[  625.303796][   T29] kauditd_printk_skb: 490 callbacks suppressed
[  625.303811][   T29] audit: type=1326 audit(2000000404.013:48972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.5.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  625.333752][   T29] audit: type=1326 audit(2000000404.013:48973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7698 comm="syz.5.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  625.378583][ T7719] bond3: (slave batadv14): Enslaving as a backup interface with an up link
[  625.406791][ T7719] bond3 (unregistering): (slave batadv14): Releasing backup interface
[  625.450901][ T7719] bond3 (unregistering): Released all slaves
[  625.558660][   T29] audit: type=1326 audit(2000000404.273:48974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.623846][   T29] audit: type=1326 audit(2000000404.273:48975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.647629][   T29] audit: type=1326 audit(2000000404.273:48976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.671982][   T29] audit: type=1326 audit(2000000404.273:48977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.695605][   T29] audit: type=1326 audit(2000000404.273:48978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.719910][   T29] audit: type=1326 audit(2000000404.273:48979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.743790][   T29] audit: type=1326 audit(2000000404.273:48980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  625.768104][   T29] audit: type=1326 audit(2000000404.273:48981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.14141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  626.108151][ T7761] netlink: 'syz.2.14148': attribute type 1 has an invalid length.
[  626.237605][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv9
[  626.260675][ T7765] __nla_validate_parse: 4 callbacks suppressed
[  626.260738][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14149'.
[  626.331836][ T7754] bond3: (slave batadv9): Enslaving as a backup interface with an up link
[  626.422979][ T7761] bond3 (unregistering): (slave batadv9): Releasing backup interface
[  626.571070][ T7761] bond3 (unregistering): Released all slaves
[  627.230068][ T7779] bond_slave_1: entered promiscuous mode
[  627.267279][ T7779] bond_slave_1: left promiscuous mode
[  627.292086][ T7778] bond_slave_1: entered promiscuous mode
[  627.323513][ T7778] bond_slave_1: left promiscuous mode
[  627.429468][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14157'.
[  627.526293][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14158'.
[  627.603667][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14161'.
[  627.678184][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14162'.
[  627.852677][ T7810] netlink: 'syz.6.14168': attribute type 3 has an invalid length.
[  627.907571][ T7810] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  627.918058][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14170'.
[  627.938189][ T7812] netlink: 'syz.2.14169': attribute type 1 has an invalid length.
[  627.954033][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14169'.
[  627.968301][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv10
[  627.983327][ T7812] bond3: (slave batadv10): Enslaving as a backup interface with an up link
[  628.042067][ T7812] bond3 (unregistering): (slave batadv10): Releasing backup interface
[  628.087113][ T7812] bond3 (unregistering): Released all slaves
[  628.358129][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14178'.
[  628.509795][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14176'.
[  628.518837][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14176'.
[  628.610032][ T7845] netlink: 'syz.2.14181': attribute type 3 has an invalid length.
[  628.830584][ T7849] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  629.537337][ T7916] netlink: 'syz.1.14205': attribute type 1 has an invalid length.
[  629.560756][ T7918] FAULT_INJECTION: forcing a failure.
[  629.560756][ T7918] name failslab, interval 1, probability 0, space 0, times 0
[  629.573481][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.2.14204 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  629.584312][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  629.594391][ T7918] Call Trace:
[  629.597751][ T7918]  <TASK>
[  629.600794][ T7918]  dump_stack_lvl+0xf2/0x150
[  629.605410][ T7918]  dump_stack+0x15/0x1a
[  629.609585][ T7918]  should_fail_ex+0x223/0x230
[  629.614376][ T7918]  ? v9fs_mount+0x53/0x570
[  629.618813][ T7918]  should_failslab+0x8f/0xb0
[  629.623420][ T7918]  __kmalloc_cache_noprof+0x4e/0x320
[  629.628732][ T7918]  v9fs_mount+0x53/0x570
[  629.632994][ T7918]  ? __pfx_v9fs_mount+0x10/0x10
[  629.637884][ T7918]  legacy_get_tree+0x77/0xd0
[  629.642543][ T7918]  vfs_get_tree+0x56/0x1e0
[  629.646974][ T7918]  do_new_mount+0x227/0x690
[  629.651499][ T7918]  path_mount+0x49b/0xb30
[  629.655975][ T7918]  __se_sys_mount+0x27c/0x2d0
[  629.660710][ T7918]  __x64_sys_mount+0x67/0x80
[  629.665374][ T7918]  x64_sys_call+0x2c84/0x2dc0
[  629.670060][ T7918]  do_syscall_64+0xc9/0x1c0
[  629.674568][ T7918]  ? clear_bhb_loop+0x55/0xb0
[  629.679284][ T7918]  ? clear_bhb_loop+0x55/0xb0
[  629.684068][ T7918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.690070][ T7918] RIP: 0033:0x7f7f6eef5d29
[  629.694511][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.714136][ T7918] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  629.722604][ T7918] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  629.730618][ T7918] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000
[  629.738603][ T7918] RBP: 00007f7f6d567090 R08: 0000000020000540 R09: 0000000000000000
[  629.746625][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.754599][ T7918] R13: 0000000000000001 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  629.762615][ T7918]  </TASK>
[  629.823218][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv15
[  629.835999][ T7904] bond3: (slave batadv15): Enslaving as a backup interface with an up link
[  629.959504][ T7921] bond3 (unregistering): (slave batadv15): Releasing backup interface
[  630.106184][ T7921] bond3 (unregistering): Released all slaves
[  630.350278][   T29] kauditd_printk_skb: 143 callbacks suppressed
[  630.350294][   T29] audit: type=1326 audit(2000000409.063:49125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.362158][ T7897] lo speed is unknown, defaulting to 1000
[  630.391443][   T29] audit: type=1326 audit(2000000409.103:49126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.418131][   T29] audit: type=1326 audit(2000000409.103:49127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.425105][ T7955] bridge0: port 3(vlan2) entered blocking state
[  630.441822][   T29] audit: type=1326 audit(2000000409.103:49128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.448728][ T7955] bridge0: port 3(vlan2) entered disabled state
[  630.471693][   T29] audit: type=1326 audit(2000000409.103:49129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.501625][   T29] audit: type=1326 audit(2000000409.103:49130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.525448][   T29] audit: type=1326 audit(2000000409.103:49131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.549147][   T29] audit: type=1326 audit(2000000409.103:49132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.572932][   T29] audit: type=1326 audit(2000000409.103:49133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.588305][ T7955] vlan2: entered allmulticast mode
[  630.596599][   T29] audit: type=1326 audit(2000000409.103:49134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.0.14219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3607415d29 code=0x7ffc0000
[  630.630368][ T7955] vlan2: left allmulticast mode
[  630.664022][ T7958] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  630.860834][ T7897] chnl_net:caif_netlink_parms(): no params data found
[  630.894486][ T7985] netlink: 'syz.2.14226': attribute type 1 has an invalid length.
[  630.951768][ T7990] bond_slave_1: entered promiscuous mode
[  630.962089][ T7990] bond_slave_1: left promiscuous mode
[  630.985029][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv11
[  630.993281][ T7973] bond3: (slave batadv11): Enslaving as a backup interface with an up link
[  631.012909][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.020109][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.030208][ T7897] bridge_slave_0: entered allmulticast mode
[  631.036883][ T7897] bridge_slave_0: entered promiscuous mode
[  631.044646][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.051774][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.059562][ T7897] bridge_slave_1: entered allmulticast mode
[  631.066365][ T7897] bridge_slave_1: entered promiscuous mode
[  631.079778][ T7973] bond3 (unregistering): (slave batadv11): Releasing backup interface
[  631.106458][ T7973] bond3 (unregistering): Released all slaves
[  631.138623][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.158088][ T8001] bridge0: port 3(vlan2) entered blocking state
[  631.164474][ T8001] bridge0: port 3(vlan2) entered disabled state
[  631.208180][ T8001] vlan2: entered allmulticast mode
[  631.213968][ T8001] vlan2: left allmulticast mode
[  631.233133][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.283480][ T7897] team0: Port device team_slave_0 added
[  631.300099][ T7897] team0: Port device team_slave_1 added
[  631.343149][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.350210][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.376894][ T7897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.389232][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.396276][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.423005][ T7897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.525611][ T7897] hsr_slave_0: entered promiscuous mode
[  631.539420][ T7897] hsr_slave_1: entered promiscuous mode
[  631.551349][ T7897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  631.568867][ T7897] Cannot create hsr debugfs directory
[  631.706637][ T7897] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.761385][ T7897] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.819192][ T7897] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.846121][ T8033] bond_slave_1: entered promiscuous mode
[  631.853940][ T8033] bond_slave_1: left promiscuous mode
[  631.861430][ T8035] netlink: 'syz.1.14247': attribute type 1 has an invalid length.
[  631.876879][ T8030] __nla_validate_parse: 9 callbacks suppressed
[  631.876898][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14247'.
[  631.896681][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv16
[  631.905378][ T8030] bond3: (slave batadv16): Enslaving as a backup interface with an up link
[  631.916600][ T8030] bond3 (unregistering): (slave batadv16): Releasing backup interface
[  631.926627][ T8030] bond3 (unregistering): Released all slaves
[  631.939544][ T7897] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.017307][ T7897] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  632.028317][ T7897] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  632.040247][ T7897] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  632.049529][ T7897] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  632.074381][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14250'.
[  632.188591][ T7897] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.254069][ T7897] 8021q: adding VLAN 0 to HW filter on device team0
[  632.284075][T25620] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.291189][T25620] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.310450][T25620] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.317596][T25620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.350565][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14252'.
[  632.359626][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14252'.
[  632.368658][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14252'.
[  632.382775][ T8056] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  632.662659][ T7897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.839800][ T7897] veth0_vlan: entered promiscuous mode
[  632.850571][ T7897] veth1_vlan: entered promiscuous mode
[  632.869378][ T7897] veth0_macvtap: entered promiscuous mode
[  632.877475][ T7897] veth1_macvtap: entered promiscuous mode
[  632.899716][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.910268][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.920921][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.931536][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.941754][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.952973][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.962999][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.973783][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.029560][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.043636][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.054210][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.064425][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.075627][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.085637][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.096099][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.106726][ T7897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.117193][ T7897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.130351][ T7897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.140915][ T7897] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.149719][ T7897] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.159155][ T7897] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.167917][ T7897] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.232382][ T8089] netlink: 'syz.2.14260': attribute type 1 has an invalid length.
[  633.247343][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14260'.
[  633.279481][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv12
[  633.297131][ T8089] bond3: (slave batadv12): Enslaving as a backup interface with an up link
[  633.331822][ T8089] bond3 (unregistering): (slave batadv12): Releasing backup interface
[  633.358557][ T8089] bond3 (unregistering): Released all slaves
[  633.601949][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14269'.
[  633.971305][ T8133] bond_slave_1: entered promiscuous mode
[  633.978410][ T8133] bond_slave_1: left promiscuous mode
[  634.041034][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14277'.
[  634.183828][ T8147] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  634.276136][ T8149] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  634.852981][ T8173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  634.953716][ T8194] bond_slave_1: entered promiscuous mode
[  634.971046][ T8194] bond_slave_1: left promiscuous mode
[  635.096599][ T8204] netlink: 'syz.6.14307': attribute type 1 has an invalid length.
[  635.106538][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14307'.
[  635.132440][ T8213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14310'.
[  635.274166][ T8219] netlink: 'syz.2.14313': attribute type 1 has an invalid length.
[  635.315337][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv13
[  635.325626][ T8219] bond3: (slave batadv13): Enslaving as a backup interface with an up link
[  635.338429][ T8219] bond3 (unregistering): (slave batadv13): Releasing backup interface
[  635.350031][ T8219] bond3 (unregistering): Released all slaves
[  635.521534][   T29] kauditd_printk_skb: 399 callbacks suppressed
[  635.521618][   T29] audit: type=1326 audit(2000000414.233:49534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.523100][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  635.527948][   T29] audit: type=1326 audit(2000000414.233:49535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.528041][   T29] audit: type=1326 audit(2000000414.233:49536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.552929][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.560777][   T29] audit: type=1326 audit(2000000414.233:49537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f6eef4690 code=0x7ffc0000
[  635.640433][   T29] audit: type=1326 audit(2000000414.233:49538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f6eef592b code=0x7ffc0000
[  635.664026][   T29] audit: type=1326 audit(2000000414.233:49539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f6eef592b code=0x7ffc0000
[  635.718345][   T29] audit: type=1326 audit(2000000414.333:49540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.742871][   T29] audit: type=1326 audit(2000000414.333:49541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.766533][   T29] audit: type=1326 audit(2000000414.333:49542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  635.790974][   T29] audit: type=1326 audit(2000000414.333:49543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.14325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  636.257209][ T8271] netlink: 'syz.2.14334': attribute type 1 has an invalid length.
[  636.276836][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv14
[  636.285192][ T8271] bond3: (slave batadv14): Enslaving as a backup interface with an up link
[  636.299261][ T8271] bond3 (unregistering): (slave batadv14): Releasing backup interface
[  636.316557][ T8271] bond3 (unregistering): Released all slaves
[  636.386547][ T8277] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  636.429116][ T8281] bond_slave_1: entered promiscuous mode
[  636.435860][ T8281] bond_slave_1: left promiscuous mode
[  636.613592][ T8292] FAULT_INJECTION: forcing a failure.
[  636.613592][ T8292] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.621152][ T8294] sctp: [Deprecated]: syz.5.14342 (pid 8294) Use of int in maxseg socket option.
[  636.621152][ T8294] Use struct sctp_assoc_value instead
[  636.627407][ T8292] CPU: 0 UID: 0 PID: 8292 Comm: syz.2.14343 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  636.641211][ T8295] sctp: [Deprecated]: syz.5.14342 (pid 8295) Use of int in maxseg socket option.
[  636.641211][ T8295] Use struct sctp_assoc_value instead
[  636.651712][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  636.651730][ T8292] Call Trace:
[  636.651737][ T8292]  <TASK>
[  636.651773][ T8292]  dump_stack_lvl+0xf2/0x150
[  636.651818][ T8292]  dump_stack+0x15/0x1a
[  636.651896][ T8292]  should_fail_ex+0x223/0x230
[  636.651926][ T8292]  should_fail+0xb/0x10
[  636.700376][ T8292]  should_fail_usercopy+0x1a/0x20
[  636.705429][ T8292]  _copy_from_user+0x1e/0xb0
[  636.710124][ T8292]  copy_msghdr_from_user+0x54/0x2a0
[  636.715442][ T8292]  ? __fget_files+0x17c/0x1c0
[  636.720187][ T8292]  __sys_sendmsg+0x13e/0x230
[  636.724923][ T8292]  __x64_sys_sendmsg+0x46/0x50
[  636.729786][ T8292]  x64_sys_call+0x2734/0x2dc0
[  636.734585][ T8292]  do_syscall_64+0xc9/0x1c0
[  636.739110][ T8292]  ? clear_bhb_loop+0x55/0xb0
[  636.743814][ T8292]  ? clear_bhb_loop+0x55/0xb0
[  636.748581][ T8292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.754564][ T8292] RIP: 0033:0x7f7f6eef5d29
[  636.759005][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.778739][ T8292] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.787222][ T8292] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  636.795305][ T8292] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  636.803322][ T8292] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  636.811325][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.819412][ T8292] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  636.827421][ T8292]  </TASK>
[  636.952145][ T8308] FAULT_INJECTION: forcing a failure.
[  636.952145][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.965440][ T8308] CPU: 1 UID: 0 PID: 8308 Comm: syz.2.14348 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  636.976325][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  636.986404][ T8308] Call Trace:
[  636.989705][ T8308]  <TASK>
[  636.992660][ T8308]  dump_stack_lvl+0xf2/0x150
[  636.997319][ T8308]  dump_stack+0x15/0x1a
[  637.001500][ T8308]  should_fail_ex+0x223/0x230
[  637.006385][ T8308]  should_fail+0xb/0x10
[  637.010558][ T8308]  should_fail_usercopy+0x1a/0x20
[  637.015600][ T8308]  _copy_to_user+0x20/0xa0
[  637.020051][ T8308]  simple_read_from_buffer+0xa0/0x110
[  637.025447][ T8308]  proc_fail_nth_read+0xf9/0x140
[  637.030456][ T8308]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  637.036066][ T8308]  vfs_read+0x1a2/0x700
[  637.040308][ T8308]  ? __rcu_read_unlock+0x4e/0x70
[  637.045346][ T8308]  ? __fget_files+0x17c/0x1c0
[  637.050102][ T8308]  ksys_read+0xe8/0x1b0
[  637.054405][ T8308]  __x64_sys_read+0x42/0x50
[  637.058941][ T8308]  x64_sys_call+0x2874/0x2dc0
[  637.063686][ T8308]  do_syscall_64+0xc9/0x1c0
[  637.068232][ T8308]  ? clear_bhb_loop+0x55/0xb0
[  637.072996][ T8308]  ? clear_bhb_loop+0x55/0xb0
[  637.077846][ T8308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.083819][ T8308] RIP: 0033:0x7f7f6eef473c
[  637.088245][ T8308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  637.108054][ T8308] RSP: 002b:00007f7f6d567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  637.116474][ T8308] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef473c
[  637.124452][ T8308] RDX: 000000000000000f RSI: 00007f7f6d5670a0 RDI: 0000000000000004
[  637.132441][ T8308] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  637.140419][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.148458][ T8308] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  637.156446][ T8308]  </TASK>
[  637.314327][ T8320] __nla_validate_parse: 6 callbacks suppressed
[  637.314349][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14356'.
[  637.394008][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14362'.
[  637.407065][ T8333] netlink: 'syz.1.14361': attribute type 1 has an invalid length.
[  637.439882][ T8342] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  637.448979][ T8342] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  637.460494][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14361'.
[  637.481129][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv17
[  637.498559][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14359'.
[  637.517703][ T8333] bond3: (slave batadv17): Enslaving as a backup interface with an up link
[  637.540345][ T8348] bond_slave_1: entered promiscuous mode
[  637.559659][ T8348] bond_slave_1: left promiscuous mode
[  637.570375][ T8351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8351 comm=syz.6.14365
[  637.583051][ T8351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8351 comm=syz.6.14365
[  637.608955][ T8351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1792 sclass=netlink_audit_socket pid=8351 comm=syz.6.14365
[  637.620382][ T8350] bond3 (unregistering): (slave batadv17): Releasing backup interface
[  637.642593][ T8350] bond3 (unregistering): Released all slaves
[  637.744445][ T8365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14372'.
[  637.796056][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14374'.
[  637.812637][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14373'.
[  637.934654][ T8381] dccp_close: ABORT with 20 bytes unread
[  637.992925][ T8385] bond_slave_1: entered promiscuous mode
[  638.009062][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14380'.
[  638.019965][ T8385] bond_slave_1: left promiscuous mode
[  638.417873][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14385'.
[  638.532757][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14386'.
[  638.742758][ T8424] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  638.829152][ T8434] lo speed is unknown, defaulting to 1000
[  639.337323][ T8481] netlink: 'syz.1.14418': attribute type 1 has an invalid length.
[  639.357621][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv18
[  639.366945][ T8481] bond3: (slave batadv18): Enslaving as a backup interface with an up link
[  639.378848][ T8481] bond3 (unregistering): (slave batadv18): Releasing backup interface
[  639.389011][ T8481] bond3 (unregistering): Released all slaves
[  639.481835][ T8486] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  639.918763][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  639.926249][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  639.933794][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  639.983291][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  639.990827][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  639.998295][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.005745][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.013254][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.020903][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.028337][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.035745][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.043292][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.050804][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.058245][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.070497][ T8507] tmpfs: Bad value for 'size'
[  640.122107][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.129647][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.137081][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.144543][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.152066][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.159534][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.166930][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.174416][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.181895][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.189444][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.196849][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.204323][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.211786][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.219239][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.221649][ T8516] netlink: 'syz.5.14430': attribute type 1 has an invalid length.
[  640.226682][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.226777][T30959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  640.250044][ T8511] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  640.287193][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv16
[  640.295506][T30959] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID vffffff.fd Device [syz0] on syz1
[  640.305620][ T8513] bond6: (slave batadv16): Enslaving as a backup interface with an up link
[  640.330963][ T8516] bond6 (unregistering): (slave batadv16): Releasing backup interface
[  640.362857][ T8516] bond6 (unregistering): Released all slaves
[  640.381123][ T8522] Cannot find add_set index 0 as target
[  640.689310][ T8542] FAULT_INJECTION: forcing a failure.
[  640.689310][ T8542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  640.702522][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.2.14441 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  640.713322][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  640.723455][ T8542] Call Trace:
[  640.726751][ T8542]  <TASK>
[  640.729704][ T8542]  dump_stack_lvl+0xf2/0x150
[  640.734345][ T8542]  dump_stack+0x15/0x1a
[  640.738613][ T8542]  should_fail_ex+0x223/0x230
[  640.743333][ T8542]  should_fail+0xb/0x10
[  640.747534][ T8542]  should_fail_usercopy+0x1a/0x20
[  640.752595][ T8542]  _copy_from_user+0x1e/0xb0
[  640.757289][ T8542]  copy_msghdr_from_user+0x54/0x2a0
[  640.762543][ T8542]  ? __fget_files+0x17c/0x1c0
[  640.767415][ T8542]  __sys_sendmsg+0x13e/0x230
[  640.772114][ T8542]  __x64_sys_sendmsg+0x46/0x50
[  640.776989][ T8542]  x64_sys_call+0x2734/0x2dc0
[  640.781797][ T8542]  do_syscall_64+0xc9/0x1c0
[  640.786333][ T8542]  ? clear_bhb_loop+0x55/0xb0
[  640.791092][ T8542]  ? clear_bhb_loop+0x55/0xb0
[  640.795809][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.801758][ T8542] RIP: 0033:0x7f7f6eef5d29
[  640.806212][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  640.825916][ T8542] RSP: 002b:00007f7f6d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  640.834442][ T8542] RAX: ffffffffffffffda RBX: 00007f7f6f0e5fa0 RCX: 00007f7f6eef5d29
[  640.842488][ T8542] RDX: 0000000020008000 RSI: 00000000200000c0 RDI: 0000000000000003
[  640.850484][ T8542] RBP: 00007f7f6d567090 R08: 0000000000000000 R09: 0000000000000000
[  640.858620][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.866651][ T8542] R13: 0000000000000000 R14: 00007f7f6f0e5fa0 R15: 00007ffcffd03bd8
[  640.874649][ T8542]  </TASK>
[  640.931846][   T29] kauditd_printk_skb: 486 callbacks suppressed
[  640.931940][   T29] audit: type=1326 audit(2000000419.643:50030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.003761][   T29] audit: type=1326 audit(2000000419.683:50031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.028203][   T29] audit: type=1326 audit(2000000419.683:50032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.051806][   T29] audit: type=1326 audit(2000000419.683:50033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.076154][   T29] audit: type=1326 audit(2000000419.683:50034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.100523][   T29] audit: type=1326 audit(2000000419.683:50035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.124300][   T29] audit: type=1326 audit(2000000419.683:50036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.148643][   T29] audit: type=1326 audit(2000000419.683:50037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f6ef285e5 code=0x7ffc0000
[  641.172403][   T29] audit: type=1326 audit(2000000419.683:50038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.196605][   T29] audit: type=1326 audit(2000000419.693:50039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.14443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7f6eef5d29 code=0x7ffc0000
[  641.362851][ T8565] netlink: 'syz.2.14452': attribute type 1 has an invalid length.
[  641.458147][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv15
[  641.466487][ T8578] bond3: (slave batadv15): Enslaving as a backup interface with an up link
[  641.498390][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.522450][ T8584] netlink: 'syz.0.14456': attribute type 1 has an invalid length.
[  641.534907][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.594650][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv14
[  641.618851][ T8588] bond2: (slave batadv14): Enslaving as a backup interface with an up link
[  641.629737][ T8565] bond3 (unregistering): (slave batadv15): Releasing backup interface
[  641.650471][ T8565] bond3 (unregistering): Released all slaves
[  641.670795][ T8584] bond2 (unregistering): (slave batadv14): Releasing backup interface
[  641.691242][ T8584] bond2 (unregistering): Released all slaves
[  641.859114][ T8610] Cannot find add_set index 0 as target
[  642.121234][ T8619] bond_slave_1: entered promiscuous mode
[  642.127830][ T8619] bond_slave_1: left promiscuous mode
[  642.273781][ T8625] netlink: 'syz.2.14470': attribute type 1 has an invalid length.
[  642.294119][ T8625] 8021q: adding VLAN 0 to HW filter on device batadv16
[  642.319471][ T8625] bond3: (slave batadv16): Enslaving as a backup interface with an up link
[  642.340776][ T8625] bond3 (unregistering): (slave batadv16): Releasing backup interface
[  642.395643][ T8625] bond3 (unregistering): Released all slaves
[  642.499358][ T8636] bond_slave_1: entered promiscuous mode
[  642.506075][ T8636] bond_slave_1: left promiscuous mode
[  642.565122][ T8639] tipc: Started in network mode
[  642.570136][ T8639] tipc: Node identity 7f000001, cluster identity 4711
[  642.577483][ T8639] tipc: Enabled bearer <udp:syz2>, priority 10
[  642.935140][ T8676] __nla_validate_parse: 19 callbacks suppressed
[  642.935157][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14492'.
[  642.962231][ T8682] bond2: entered promiscuous mode
[  642.967448][ T8682] bond2: entered allmulticast mode
[  642.973130][ T8682] 8021q: adding VLAN 0 to HW filter on device bond2
[  642.992375][ T8682] bond2 (unregistering): Released all slaves
[  643.009686][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14491'.
[  643.019627][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14491'.
[  643.028755][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14491'.
[  643.047909][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14491'.
[  643.316592][ T8699] IPVS: lc: UDP 0.0.0.0:0 - no destination available
[  643.619472][ T8709] netlink: 'syz.0.14503': attribute type 4 has an invalid length.
[  643.643460][ T8712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14504'.
[  643.667479][ T8709] netlink: 'syz.0.14503': attribute type 4 has an invalid length.
[  643.688422][ T1046] tipc: Node number set to 2130706433
[  643.706460][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14503'.
[  643.891549][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14507'.
[  643.929429][ T8737] netlink: 'syz.5.14511': attribute type 1 has an invalid length.
[  643.954537][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14511'.
[  643.967990][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv17
[  643.983990][ T8737] bond6: (slave batadv17): Enslaving as a backup interface with an up link
[  644.013398][ T8752] bond6 (unregistering): (slave batadv17): Releasing backup interface
[  644.017202][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14515'.
[  644.047389][ T8752] bond6 (unregistering): Released all slaves
[  644.067420][ T8750] netlink: 'syz.0.14516': attribute type 21 has an invalid length.
[  644.137997][ T8755] netlink: 'syz.0.14516': attribute type 21 has an invalid length.
[  644.370192][ T8785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.434740][ T8785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.512082][ T8785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.530336][ T8790] netlink: 'syz.1.14530': attribute type 1 has an invalid length.
[  644.574904][ T8785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.608616][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv19
[  644.622354][ T8790] bond3: (slave batadv19): Enslaving as a backup interface with an up link
[  644.649396][ T8785] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.669810][ T8785] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.692059][ T8794] bond3 (unregistering): (slave batadv19): Releasing backup interface
[  644.706873][ T8794] bond3 (unregistering): Released all slaves
[  644.734565][ T8785] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.766055][ T8785] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.180167][ T8811] lo speed is unknown, defaulting to 1000
[  646.264251][   T29] kauditd_printk_skb: 364 callbacks suppressed
[  646.264313][   T29] audit: type=1326 audit(2000000424.973:50404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.294894][   T29] audit: type=1326 audit(2000000424.973:50405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.319098][   T29] audit: type=1326 audit(2000000424.973:50406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.342893][   T29] audit: type=1326 audit(2000000424.973:50407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1a7f44690 code=0x7ffc0000
[  646.367121][   T29] audit: type=1326 audit(2000000424.973:50408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.391308][   T29] audit: type=1326 audit(2000000424.973:50409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.415029][   T29] audit: type=1326 audit(2000000424.973:50410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.439308][   T29] audit: type=1326 audit(2000000424.973:50411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.462958][   T29] audit: type=1326 audit(2000000424.973:50412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.487250][   T29] audit: type=1326 audit(2000000424.973:50413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8817 comm="syz.5.14541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a7f45d29 code=0x7ffc0000
[  646.558236][ T8831] FAULT_INJECTION: forcing a failure.
[  646.558236][ T8831] name failslab, interval 1, probability 0, space 0, times 0
[  646.570971][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.6.14545 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  646.581970][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  646.592043][ T8831] Call Trace:
[  646.595400][ T8831]  <TASK>
[  646.598345][ T8831]  dump_stack_lvl+0xf2/0x150
[  646.603037][ T8831]  dump_stack+0x15/0x1a
[  646.607414][ T8831]  should_fail_ex+0x223/0x230
[  646.612157][ T8831]  should_failslab+0x8f/0xb0
[  646.616869][ T8831]  kmem_cache_alloc_noprof+0x52/0x320
[  646.622274][ T8831]  ? dst_alloc+0xc0/0x100
[  646.626645][ T8831]  dst_alloc+0xc0/0x100
[  646.630878][ T8831]  ? __pfx_ip_vs_twos_schedule+0x2/0x10
[  646.636462][ T8831]  ip_route_output_key_hash_rcu+0xb90/0x12d0
[  646.642473][ T8831]  ? path_openat+0x1a5a/0x1fa0
[  646.647262][ T8831]  ip_route_output_key_hash+0x7b/0xb0
[  646.652678][ T8831]  dccp_v4_connect+0x409/0x810
[  646.657564][ T8831]  __inet_stream_connect+0x162/0x790
[  646.662874][ T8831]  ? _raw_spin_unlock_bh+0x36/0x40
[  646.668144][ T8831]  ? release_sock+0x117/0x150
[  646.673022][ T8831]  ? _raw_spin_unlock_bh+0x36/0x40
[  646.678229][ T8831]  ? lock_sock_nested+0x10f/0x140
[  646.683380][ T8831]  ? selinux_netlbl_socket_connect+0x113/0x130
[  646.689583][ T8831]  inet_stream_connect+0x48/0x70
[  646.694577][ T8831]  ? __pfx_inet_stream_connect+0x10/0x10
[  646.700249][ T8831]  __sys_connect+0x18f/0x1b0
[  646.704914][ T8831]  __x64_sys_connect+0x41/0x50
[  646.709723][ T8831]  x64_sys_call+0x22a7/0x2dc0
[  646.714445][ T8831]  do_syscall_64+0xc9/0x1c0
[  646.718972][ T8831]  ? clear_bhb_loop+0x55/0xb0
[  646.723731][ T8831]  ? clear_bhb_loop+0x55/0xb0
[  646.728493][ T8831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.734453][ T8831] RIP: 0033:0x7f64d0915d29
[  646.738902][ T8831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  646.758535][ T8831] RSP: 002b:00007f64cef81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  646.766977][ T8831] RAX: ffffffffffffffda RBX: 00007f64d0b05fa0 RCX: 00007f64d0915d29
[  646.775034][ T8831] RDX: 0000000000000010 RSI: 0000000020772000 RDI: 0000000000000004
[  646.783038][ T8831] RBP: 00007f64cef81090 R08: 0000000000000000 R09: 0000000000000000
[  646.791039][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.799035][ T8831] R13: 0000000000000000 R14: 00007f64d0b05fa0 R15: 00007ffe451b51f8
[  646.807041][ T8831]  </TASK>
[  646.919136][ T8837] netlink: 'syz.0.14546': attribute type 3 has an invalid length.
[  646.930472][ T8837] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  647.104048][ T8856] ip6gre1: entered allmulticast mode
[  647.113922][ T8852] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  647.131994][ T8852] vhci_hcd: invalid port number 23
[  647.429619][T25655] ==================================================================
[  647.437760][T25655] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[  647.446307][T25655] 
[  647.448641][T25655] write to 0xffff88810dc3e122 of 1 bytes by task 8879 on cpu 1:
[  647.456296][T25655]  tty_set_termios+0x4c9/0x8b0
[  647.461116][T25655]  set_termios+0x497/0x4e0
[  647.465577][T25655]  tty_mode_ioctl+0x391/0x5d0
[  647.470287][T25655]  n_tty_ioctl_helper+0x8d/0x240
[  647.475253][T25655]  n_tty_ioctl+0xfd/0x200
[  647.479610][T25655]  tty_ioctl+0x87a/0xbe0
[  647.483889][T25655]  __se_sys_ioctl+0xc9/0x140
[  647.488501][T25655]  __x64_sys_ioctl+0x43/0x50
[  647.493124][T25655]  x64_sys_call+0x1690/0x2dc0
[  647.497833][T25655]  do_syscall_64+0xc9/0x1c0
[  647.502396][T25655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.508344][T25655] 
[  647.510690][T25655] read to 0xffff88810dc3e122 of 1 bytes by task 25655 on cpu 0:
[  647.518339][T25655]  n_tty_receive_char_flow_ctrl+0x58/0x1a0
[  647.524189][T25655]  n_tty_lookahead_flow_ctrl+0xee/0x130
[  647.529764][T25655]  tty_port_default_lookahead_buf+0x8a/0xc0
[  647.535714][T25655]  flush_to_ldisc+0x31c/0x410
[  647.540432][T25655]  process_scheduled_works+0x483/0x9a0
[  647.545918][T25655]  worker_thread+0x51d/0x6f0
[  647.550538][T25655]  kthread+0x1d1/0x210
[  647.554621][T25655]  ret_from_fork+0x4b/0x60
[  647.559052][T25655]  ret_from_fork_asm+0x1a/0x30
[  647.563851][T25655] 
[  647.566186][T25655] value changed: 0x13 -> 0x00
[  647.570869][T25655] 
[  647.573197][T25655] Reported by Kernel Concurrency Sanitizer on:
[  647.579385][T25655] CPU: 0 UID: 0 PID: 25655 Comm: kworker/u8:55 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0
[  647.590529][T25655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  647.600619][T25655] Workqueue: events_unbound flush_to_ldisc
[  647.606482][T25655] ==================================================================
[  647.852592][ T8870] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2