ng_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r6 = eventfd(0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500), r6, 0x1, 0x0, 0x1}, 0x10000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x10000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 0: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, 0x0, 0x0) io_uring_setup(0x62ee, &(0x7f0000000100)={0x0, 0x1ffe000, 0x8, 0x1, 0x1ab}) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa09}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r6, 0xa, &(0x7f0000000140), 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r6 = eventfd(0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500), r6, 0x1, 0x0, 0x1}, 0x10000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa09}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = memfd_secret(0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) eventfd(0x9) 00:45:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7c}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa09}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = memfd_secret(0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 3: syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = memfd_secret(0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r2 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r3 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/7, 0x7}], 0x1) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r1 = io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) r2 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, 0x0, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, 0x0, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, 0x0, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:54 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:54 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:54 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_setup(0x33a7, &(0x7f0000000280)={0x0, 0x1fc9, 0x0, 0x0, 0x38}) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x4db3, &(0x7f0000000100)={0x0, 0xdc70, 0x20, 0x0, 0x250, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000200)) 00:45:55 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:45:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000200)) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:45:55 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000200)) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000000) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), 0x0) 00:45:55 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), 0x0) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), 0x0) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f, 0x0, r1}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f, 0x0, r1}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:55 executing program 4: r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) syz_io_uring_setup(0x3e54, &(0x7f0000000100)={0x0, 0xa191, 0x2, 0x3, 0x34f, 0x0, r1}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x5) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r0], 0x4) 00:45:55 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:55 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:55 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, r0], 0x3) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x3) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) 00:45:55 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x3) 00:45:55 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:55 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x3907, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:45:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x3) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) r2 = memfd_secret(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r0, r3, r4, r5, r0, r0, r0, r0], 0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0], 0x2) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) r2 = memfd_secret(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r0, r3, r4, r5, r0, r0, r0, r0], 0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0], 0x2) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) r2 = memfd_secret(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r0, r3, r4, r5, r0, r0, r0, r0], 0x9) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0], 0x2) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x2, 0x2) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x2) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) r2 = memfd_secret(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r0, r3, r4, r5, r0, r0, r0, r0], 0x9) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0], 0x3) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x11d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc8, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x94, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r0], 0x2) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r0], 0x2) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc8, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x94, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r0], 0x2) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc8, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x94, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) memfd_secret(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') 00:45:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x8) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) msgget$private(0x0, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) 00:45:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xd7, 0x81, 0x1}, 0x20) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x0, 0x70bd22, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 3: syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x24}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}, @fwd={0xe}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xcb, 0x81, 0x1}, 0x20) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:56 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:56 executing program 3: r0 = syz_io_uring_setup(0x39b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}, @fwd={0xd}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xbf, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x9, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xb3, 0x81, 0x1}, 0x20) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x53, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x53, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x53, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x7, 0x0, 0x4, 0x1, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xb3, 0x81, 0x1}, 0x20) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x0, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xb3, 0x81, 0x1}, 0x20) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x7, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}, {0xc, 0x3, 0x1ff}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xb3, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x0, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}, {0xa, 0x0, 0x9}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0xa7, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0xd2c8, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x0, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}, {0x4, 0x4, 0x8001}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x9b, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x0, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}, {0xd, 0x2, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x8f, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8, 0x1, 0x257}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x3, 0x4, 0x10001}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r7, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@un=@abs={0x0, 0x0, 0x4e21}}, 0x7fff) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0x0, 0x20, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r7, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@un=@abs={0x0, 0x0, 0x4e21}}, 0x7fff) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x0, 0x4, 0x10001}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {0x0, 0x0, 0x10001}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x95, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r7, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@un=@abs={0x0, 0x0, 0x4e21}}, 0x7fff) io_uring_register$IORING_REGISTER_FILES(r1, 0xa, &(0x7f0000000140), 0x0) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x4, 0x3, 0xfffffffc}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r7, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@un=@abs={0x0, 0x0, 0x4e21}}, 0x7fff) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000340)=r6, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x0, 0x3, 0xfffffffc}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000004c0)) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {0x0, 0x0, 0xfffffffc}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000340)=r6, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000000) 00:45:57 executing program 3: r0 = syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000340)=r6, 0x1) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) memfd_secret(0x80000) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000004c0)) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000000)) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), 0x0) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000000) 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0x9}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000000)) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:57 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') 00:45:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x0, 0x9}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:57 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), 0x0) 00:45:57 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000000)) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000000) 00:45:58 executing program 4: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x7dcb, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x918, &(0x7f0000000400), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000480), 0x0) 00:45:58 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r2, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x4000000) 00:45:58 executing program 3: syz_io_uring_setup(0x39b, &(0x7f0000000140)={0x0, 0x6456, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x1dfa, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r2, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x2, 0x9}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x77, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r3, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000100)=r3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000340)=r7, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000480)=@un=@abs={0x0, 0x0, 0x4e21}}, 0x7fff) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x4000000) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r2, 0x0, 0x0) eventfd(0x4d) inotify_rm_watch(r2, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x73, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)=[r0]}, 0x1) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r2, 0x0, 0x0) eventfd(0x4d) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x73, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x73, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)=[r0]}, 0x1) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) getpeername$llc(r2, 0x0, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)=[r0]}, 0x1) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r1, 0x10000000) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x55, 0x2}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000140), 0x0) r3 = memfd_secret(0x80000) r4 = syz_clone(0x81a000, &(0x7f00000001c0)="7e6037fe293f9db59c889fb033da0b5104bba367db0812639644942ab362f8ea536399160298d2e9be645669dc1dd910c8fff8b1ec2395cf71a79c8846e109d724ae5d61c42229b764f1f7d0cb5d178a323531ddd28bf345d0b914fbae85dc5143aa0055eaf4a471a9039fafd0a808bcfc5ea928cbe0de68400ad77f6cdf987988a2992eeac4039c50f6ee87c3b60d29580e9b80d8653b7d0a0d2be0612c714bbe3a2a13d59eef255a88f2d11effdbc66d9c3e9d49fca95929bb39be81629b9ac680b3c26c04", 0xc6, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="653460cd6cfbe9dfaa8ded94c06f45c7de") r5 = syz_clone(0x41000080, &(0x7f0000000380)="119551a6169bac6fd69fa14ad3a8", 0xe, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="9b4b1399b5577cc9458f36aa535ab6a900d9fab742c5aebd9f941d2a2ba3d7765764de583d9b08d6a8e8b49615a3617162cfebbccfde2e6af98225b37cbc30b49c1fe43f9ea19b72d64305f8e5465e1adebcf347b0ce50467b1a7f2df3544636e889c431bdf7fe62ade93a43fbfa0ced761a69b930adfceedc540f83ead331ac0c84b44cf2dac66486d47dc165f5db9d069363a841e3d6d5bc83e6a9c719d12ed624f1395005eda926ac9db992fed777fc25dbe3e14b8f7b2819c24e5a9b26532c91c6bad84f6723a4d25289f820338fc767a38ee32491ffeb913acc354a5f5edea73bd7521e8438672d1e014291e5d3d94370783ca3") syz_open_procfs(r5, &(0x7f0000000540)='net/netlink\x00') syz_open_procfs$namespace(r4, &(0x7f0000000580)='ns/time\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x23, 0x800, 0x12345}, 0x13) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000005c0)=""/12) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udplite6\x00') syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x53, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x55, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x47, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: r0 = syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f, 0x0, r0}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x67, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 2: syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 2: syz_io_uring_setup(0x3cd5, &(0x7f0000000240)={0x0, 0x3306, 0x0, 0x3, 0x1bd}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x0, 0x5}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xde55, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 2: syz_io_uring_setup(0x6287, 0x0, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x53, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x6287, 0x0, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 00:45:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x7b, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x6287, 0x0, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}, @int]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x47, 0x81, 0x1}, 0x20) 00:45:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:58 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0xb, 0x8}, {0x5, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@int, @const, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x5b, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x8}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x83, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x4f, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/129, 0x82, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55, 0x0, 0x0, 0x28f}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, 0x0, 0x82, 0x0, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, 0x0, 0x82, 0x0, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, 0x0, 0x82, 0x0, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/129, 0x82, 0x81}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2b, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/129, 0x82, 0x81}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x3f, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2b, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @int, @const, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/129, 0x82, 0x81}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x3f, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2b, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x3f, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x4e, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x26ae, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x4e, 0x81}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x4e, 0x81}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, 0x0, 0x36, 0x0, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@int, @const, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x4e, 0x81}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81}, 0x20) 00:45:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81}, 0x20) 00:45:59 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@int, @const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x43, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 00:45:59 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000140), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='net/dev\x00') getpeername$llc(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x322) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x400000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000500)={0x3, 0x0, &(0x7f00000004c0)=[r0, r2, r3, r0, r4, r0]}, 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r5 = io_uring_setup(0x3da9, &(0x7f0000000400)={0x0, 0x6, 0x10, 0x1, 0x13a, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x10000000) getsockname$llc(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x351c, &(0x7f0000000300)={0x0, 0x6129, 0x20, 0x1, 0x36e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x6096, &(0x7f0000000100)={0x0, 0x7359, 0x8, 0x3, 0xa0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x1b, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 3: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, 0x0, 0x0) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000440)) 00:45:59 executing program 1: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81}, 0x20) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x27, 0x81, 0x1}, 0x20) 00:45:59 executing program 3: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000440)) 00:45:59 executing program 1: io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x2f, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 1) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 1) 00:45:59 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81, 0x1}, 0x20) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:45:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 2) 00:45:59 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000440)) 00:45:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 2) 00:45:59 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:45:59 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:45:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 3) [ 816.590463][T18221] FAULT_INJECTION: forcing a failure. [ 816.590463][T18221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.590486][T18221] CPU: 1 PID: 18221 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 3) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), 0x0) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 4) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 4) [ 816.590510][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.590521][T18221] Call Trace: 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 5) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 5) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.590526][T18221] [ 816.590532][T18221] dump_stack_lvl+0xd6/0x122 [ 816.590582][T18221] dump_stack+0x11/0x12 [ 816.590616][T18221] should_fail+0x242/0x250 [ 816.590637][T18221] should_fail_usercopy+0x16/0x20 [ 816.590657][T18221] _copy_from_user+0x1a/0xc0 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), 0x0) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 6) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 6) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), 0x0) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.590675][T18221] __sys_bpf+0x1f2/0x630 [ 816.590701][T18221] __x64_sys_bpf+0x3f/0x50 [ 816.590769][T18221] do_syscall_64+0x2b/0x70 [ 816.590840][T18221] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 7) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 7) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 8) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 1) [ 816.590861][T18221] RIP: 0033:0x7fbb2245b109 [ 816.590875][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 1) [ 816.590895][T18221] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.590917][T18221] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 2) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 8) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x37, 0x81, 0x1}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 2) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 9) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.590930][T18221] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.591012][T18221] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.591024][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 3) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x33, 0x81, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 10) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 9) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 3) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.591036][T18221] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.591051][T18221] [ 816.614415][T18225] FAULT_INJECTION: forcing a failure. [ 816.614415][T18225] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 4) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 11) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x33, 0x81, 0x1}, 0x20) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 4) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 10) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const, @struct]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/129, 0x33, 0x81, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 12) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 5) [ 816.614440][T18225] CPU: 1 PID: 18225 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 5) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 11) 00:46:00 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 6) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 13) [ 816.614465][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.614475][T18225] Call Trace: 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 6) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 12) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) 00:46:00 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 7) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 14) [ 816.614480][T18225] [ 816.614486][T18225] dump_stack_lvl+0xd6/0x122 [ 816.614557][T18225] dump_stack+0x11/0x12 [ 816.614575][T18225] should_fail+0x242/0x250 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 7) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 13) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) 00:46:00 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x2) [ 816.614594][T18225] should_fail_usercopy+0x16/0x20 [ 816.614612][T18225] _copy_from_user+0x1a/0xc0 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 15) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 14) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 8) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 8) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81}, 0x20) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 15) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0x0, 0x0) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 9) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 16) [ 816.614631][T18225] __sys_bpf+0x1f2/0x630 [ 816.614698][T18225] __x64_sys_bpf+0x3f/0x50 [ 816.614722][T18225] do_syscall_64+0x2b/0x70 [ 816.614743][T18225] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 9) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81}, 0x20) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 16) [ 816.614903][T18225] RIP: 0033:0x7f73e2671109 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0x0, 0x0) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 10) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 17) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 10) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81}, 0x20) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, 0x0, 0x0) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 17) [ 816.614918][T18225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 11) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 18) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 11) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 1) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 2) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 18) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 12) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (fail_nth: 1) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 19) [ 816.614937][T18225] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.614957][T18225] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 12) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 19) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 13) 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (fail_nth: 2) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 3) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 13) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 4) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 20) [ 816.614969][T18225] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.614982][T18225] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (fail_nth: 3) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 14) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) (fail_nth: 21) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 5) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 14) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) (fail_nth: 21) [ 816.614994][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.615060][T18225] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 816.615075][T18225] [ 816.761808][T18263] FAULT_INJECTION: forcing a failure. [ 816.761808][T18263] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (fail_nth: 4) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 15) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 15) 00:46:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 6) 00:46:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:00 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 16) [ 816.761906][T18263] CPU: 0 PID: 18263 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.762006][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:00 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 16) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 7) [ 816.762017][T18263] Call Trace: 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140), 0x2) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 8) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) (fail_nth: 17) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 17) [ 816.762022][T18263] [ 816.762028][T18263] dump_stack_lvl+0xd6/0x122 [ 816.762053][T18263] dump_stack+0x11/0x12 [ 816.762069][T18263] should_fail+0x242/0x250 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x3, &(0x7f0000000140), 0x2) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 18) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.762086][T18263] should_fail_usercopy+0x16/0x20 [ 816.762102][T18263] _copy_from_user+0x1a/0xc0 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x5, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 9) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x4, &(0x7f0000000140), 0x2) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 10) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x5, &(0x7f0000000140), 0x2) [ 816.762211][T18263] btf_new_fd+0x233/0x600 [ 816.762312][T18263] bpf_btf_load+0x69/0x80 [ 816.762337][T18263] __sys_bpf+0x493/0x630 [ 816.762426][T18263] __x64_sys_bpf+0x3f/0x50 [ 816.762449][T18263] do_syscall_64+0x2b/0x70 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 19) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x5, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 11) [ 816.762470][T18263] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.762567][T18263] RIP: 0033:0x7f73e2671109 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000140), 0x2) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 12) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x5, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.762590][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.762607][T18263] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 21) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x7, &(0x7f0000000140), 0x2) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 13) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x9, &(0x7f0000000140), 0x2) [ 816.762627][T18263] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 816.762640][T18263] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 22) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 14) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.762653][T18263] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.762665][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 23) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000140), 0x2) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 15) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xb, &(0x7f0000000140), 0x2) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.762716][T18263] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 816.762733][T18263] 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 16) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 24) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.786812][T18272] FAULT_INJECTION: forcing a failure. [ 816.786812][T18272] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xc, &(0x7f0000000140), 0x2) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 17) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xd, &(0x7f0000000140), 0x2) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 18) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 25) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.786907][T18272] CPU: 0 PID: 18272 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.786930][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 19) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xe, &(0x7f0000000140), 0x2) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 26) [ 816.786941][T18272] Call Trace: [ 816.786996][T18272] [ 816.787002][T18272] dump_stack_lvl+0xd6/0x122 [ 816.787027][T18272] dump_stack+0x11/0x12 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0xf, &(0x7f0000000140), 0x2) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 27) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) (fail_nth: 21) [ 816.787048][T18272] should_fail+0x242/0x250 [ 816.787069][T18272] should_fail_usercopy+0x16/0x20 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x10, &(0x7f0000000140), 0x2) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 28) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.787120][T18272] _copy_from_user+0x1a/0xc0 [ 816.787138][T18272] btf_new_fd+0x233/0x600 [ 816.787158][T18272] bpf_btf_load+0x69/0x80 [ 816.787181][T18272] __sys_bpf+0x493/0x630 [ 816.787223][T18272] __x64_sys_bpf+0x3f/0x50 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x11, &(0x7f0000000140), 0x2) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 29) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.787248][T18272] do_syscall_64+0x2b/0x70 [ 816.787271][T18272] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.787295][T18272] RIP: 0033:0x7fbb2245b109 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (fail_nth: 30) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x17, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000140), 0x2) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.787309][T18272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x18, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140), 0x2) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.787429][T18272] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.787450][T18272] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 816.787472][T18272] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x5, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x17, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x19, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f0000000140), 0x2) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x1a, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x18, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.787486][T18272] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.787499][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x1b, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x17, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x19, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, &(0x7f0000000140), 0x2) 00:46:01 executing program 5: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:01 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x16, &(0x7f0000000140), 0x2) [ 816.787512][T18272] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.787529][T18272] 00:46:01 executing program 0: bpf$BPF_BTF_LOAD(0x18, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:01 executing program 4: bpf$BPF_BTF_LOAD(0x1c, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:01 executing program 3: bpf$BPF_BTF_LOAD(0x1a, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x1b, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x19, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.815584][T18280] FAULT_INJECTION: forcing a failure. [ 816.815584][T18280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.815644][T18280] CPU: 0 PID: 18280 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x17, &(0x7f0000000140), 0x2) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x1a, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x1c, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2f) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x1b, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.815719][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.815730][T18280] Call Trace: [ 816.815736][T18280] [ 816.815742][T18280] dump_stack_lvl+0xd6/0x122 [ 816.815768][T18280] dump_stack+0x11/0x12 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xa, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x1c, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0xffffffd) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xb, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.815788][T18280] should_fail+0x242/0x250 [ 816.815889][T18280] should_fail_usercopy+0x16/0x20 [ 816.815910][T18280] _copy_to_user+0x1a/0x90 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x208d, &(0x7f0000000100)={0x0, 0xd4fd, 0x20, 0x2001, 0x39e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3d00, 0x8, 0x800000, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.815960][T18280] bpf_verifier_vlog+0x137/0x230 [ 816.815980][T18280] __btf_verifier_log+0x80/0xa0 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x208d, &(0x7f0000000100)={0x0, 0xd4fd, 0x20, 0x2001, 0x39e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3d00, 0x8, 0x800000, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.816001][T18280] ? btf_parse_hdr+0x211/0x460 [ 816.816022][T18280] ? check_heap_object+0x1ab/0x3e0 [ 816.816165][T18280] btf_parse_hdr+0x22d/0x460 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xe, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x208d, &(0x7f0000000100)={0x0, 0xd4fd, 0x20, 0x2001, 0x39e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3d00, 0x8, 0x800000, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x208d, &(0x7f0000000100)={0x0, 0xd4fd, 0x20, 0x2001, 0x39e}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3d00, 0x8, 0x800000, 0xffffffff, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0xf, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x3, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.816187][T18280] btf_new_fd+0x2af/0x600 [ 816.816215][T18280] bpf_btf_load+0x69/0x80 [ 816.816238][T18280] __sys_bpf+0x493/0x630 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.816265][T18280] __x64_sys_bpf+0x3f/0x50 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x8, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x11, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x3, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.816394][T18280] do_syscall_64+0x2b/0x70 [ 816.816414][T18280] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.816470][T18280] RIP: 0033:0x7f73e2671109 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xa, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (rerun: 32) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x42}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x8, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.816484][T18280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x3, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x60}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x9, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x696d, &(0x7f0000000100)={0x0, 0x800002, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x0) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x15, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xa, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x8, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.816503][T18280] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.816540][T18280] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x3, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x696d, &(0x7f0000000100)={0x0, 0x800002, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x696d, &(0x7f0000000100)={0x0, 0x800002, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x0) (async) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xb, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xa, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x17, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xd1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.816601][T18280] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.816658][T18280] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x696d, &(0x7f0000000100)={0x0, 0x800002, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x0) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x12, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x18, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) munlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/17, 0x11}], 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x5, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.816669][T18280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.816680][T18280] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x19, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x102}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x3, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x1a, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.816695][T18280] [ 816.824231][T18279] FAULT_INJECTION: forcing a failure. [ 816.824231][T18279] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) munlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/17, 0x11}], 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x1f9}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x3, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x1b, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) munlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/17, 0x11}], 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.824253][T18279] CPU: 1 PID: 18279 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x1c, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x5, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x8, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x201}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x3}, 0x4) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2010, r3, 0xc4fc6000) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.824275][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.824286][T18279] Call Trace: [ 816.824292][T18279] 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x9, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x5, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x204}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x3}, 0x4) (async) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2010, r3, 0xc4fc6000) [ 816.824298][T18279] dump_stack_lvl+0xd6/0x122 [ 816.824350][T18279] dump_stack+0x11/0x12 [ 816.824370][T18279] should_fail+0x242/0x250 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xa, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x8, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x21, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x23d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xb, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x3}, 0x4) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x3, 0x6) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2010, r3, 0xc4fc6000) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x9, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.824389][T18279] should_fail_usercopy+0x16/0x20 [ 816.824409][T18279] _copy_to_user+0x1a/0x90 [ 816.824430][T18279] bpf_verifier_vlog+0x137/0x230 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x8, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xa, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x2e2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xc, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x1291, &(0x7f0000000100)={0x0, 0xb3e, 0x2, 0x1, 0x62}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000200)=""/119) [ 816.824451][T18279] __btf_verifier_log+0x80/0xa0 [ 816.824510][T18279] ? btf_parse_hdr+0x211/0x460 [ 816.824529][T18279] ? check_heap_object+0x1ab/0x3e0 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x9, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xb, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xd, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:02 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x395}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xa, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xc, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:02 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x1291, &(0x7f0000000100)={0x0, 0xb3e, 0x2, 0x1, 0x62}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000200)=""/119) [ 816.824554][T18279] btf_parse_hdr+0x22d/0x460 [ 816.824611][T18279] btf_new_fd+0x2af/0x600 [ 816.824631][T18279] bpf_btf_load+0x69/0x80 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xe, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xb, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x3ed}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xd, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x3, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x11, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x1291, &(0x7f0000000100)={0x0, 0xb3e, 0x2, 0x1, 0x62}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (rerun: 64) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000200)=""/119) [ 816.824656][T18279] __sys_bpf+0x493/0x630 [ 816.824707][T18279] __x64_sys_bpf+0x3f/0x50 [ 816.824730][T18279] do_syscall_64+0x2b/0x70 [ 816.824752][T18279] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.824807][T18279] RIP: 0033:0x7fbb2245b109 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xe, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x3f4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xc, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x4, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xd, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x8, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.824821][T18279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x12, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x3f6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xe, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x11, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.824871][T18279] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.824892][T18279] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 816.824906][T18279] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.824919][T18279] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.824933][T18279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.824946][T18279] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.824962][T18279] [ 816.842248][T18286] FAULT_INJECTION: forcing a failure. 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x27d2, &(0x7f0000000100)={0x0, 0xc82, 0x2, 0x0, 0x366, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x25, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x9, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x12, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x402}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x11, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x43, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x16, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.842248][T18286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.842339][T18286] CPU: 0 PID: 18286 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.842364][T18286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xa, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x48, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0xb, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x27d2, &(0x7f0000000100)={0x0, 0xc82, 0x2, 0x0, 0x366, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_setup(0x27d2, &(0x7f0000000100)={0x0, 0xc82, 0x2, 0x0, 0x366, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) (async) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x406}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x12, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x25, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x48, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x12, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x1e, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.842375][T18286] Call Trace: [ 816.842381][T18286] [ 816.842387][T18286] dump_stack_lvl+0xd6/0x122 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x604}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x27d2, &(0x7f0000000100)={0x0, 0xc82, 0x2, 0x0, 0x366, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_setup(0x27d2, &(0x7f0000000100)={0x0, 0xc82, 0x2, 0x0, 0x366, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/108, 0x6c}], 0x1) (async) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x25, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.842462][T18286] dump_stack+0x11/0x12 [ 816.842482][T18286] should_fail+0x242/0x250 [ 816.842503][T18286] should_fail_usercopy+0x16/0x20 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x68, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x43, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x68, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6c, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x1c7d, &(0x7f0000000100)={0x0, 0x3daf, 0x0, 0x3, 0x81, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) r2 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = semget(0x0, 0x1, 0x421) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000340)=""/101) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, r7}}, 0x38) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x1186, &(0x7f0000000400)={0x0, 0x652c, 0x3, 0x7, 0x1bd, 0x0, r8}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/170, 0xaa}], 0x3) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r3}}, 0x3f7) [ 816.842553][T18286] _copy_to_user+0x1a/0x90 [ 816.842571][T18286] bpf_verifier_vlog+0x137/0x230 [ 816.842694][T18286] __btf_verifier_log+0x80/0xa0 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x3, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x48, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6c, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x1c7d, &(0x7f0000000100)={0x0, 0x3daf, 0x0, 0x3, 0x81, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) r2 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = semget(0x0, 0x1, 0x421) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000340)=""/101) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, r7}}, 0x38) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x1186, &(0x7f0000000400)={0x0, 0x652c, 0x3, 0x7, 0x1bd, 0x0, r8}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/170, 0xaa}], 0x3) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r3}}, 0x3f7) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0x1c7d, &(0x7f0000000100)={0x0, 0x3daf, 0x0, 0x3, 0x81, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x3b9a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) semget(0x0, 0x1, 0x421) (async) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000340)=""/101) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, r7}}, 0x38) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) pipe(&(0x7f00000003c0)) (async) io_uring_setup(0x1186, &(0x7f0000000400)={0x0, 0x652c, 0x3, 0x7, 0x1bd, 0x0, r8}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/170, 0xaa}], 0x3) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r3}}, 0x3f7) (async) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.842715][T18286] ? btf_parse_hdr+0x237/0x460 [ 816.842735][T18286] ? check_heap_object+0x1ab/0x3e0 [ 816.842759][T18286] btf_parse_hdr+0x24e/0x460 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7a, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xc00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x5, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.842874][T18286] btf_new_fd+0x2af/0x600 [ 816.842894][T18286] bpf_btf_load+0x69/0x80 [ 816.842917][T18286] __sys_bpf+0x493/0x630 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x68, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7a, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x2000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0x1c7d, &(0x7f0000000100)={0x0, 0x3daf, 0x0, 0x3, 0x81, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) r2 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = semget(0x0, 0x1, 0x421) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000340)=""/101) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, r7}}, 0x38) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x1186, &(0x7f0000000400)={0x0, 0x652c, 0x3, 0x7, 0x1bd, 0x0, r8}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/170, 0xaa}], 0x3) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r3}}, 0x3f7) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.842942][T18286] __x64_sys_bpf+0x3f/0x50 [ 816.843032][T18286] do_syscall_64+0x2b/0x70 [ 816.843053][T18286] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6c, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x5bbf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x3d02}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x8, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.843094][T18286] RIP: 0033:0x7f73e2671109 [ 816.843107][T18286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.843191][T18286] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x4000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x9, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x2e, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x5bbf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xa, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7a, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x5f5e0ff, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x4200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x5bbf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x5bbf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xb, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.843217][T18286] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 816.843293][T18286] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.843307][T18286] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x5f5e0ff, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xc, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x6000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_io_uring_setup(0x5d65, &(0x7f0000000100)={0x0, 0x11e4, 0x4, 0x3, 0x3a2, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200), 0x0) [ 816.843321][T18286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.843394][T18286] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xd, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = syz_io_uring_setup(0x5d65, &(0x7f0000000100)={0x0, 0x11e4, 0x4, 0x3, 0x3a2, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200), 0x0) [ 816.843410][T18286] [ 816.862449][T18291] FAULT_INJECTION: forcing a failure. [ 816.862449][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x36, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0xe, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x9503}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = syz_io_uring_setup(0x5d65, &(0x7f0000000100)={0x0, 0x11e4, 0x4, 0x3, 0x3a2, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000200), 0x0) [ 816.862473][T18291] CPU: 1 PID: 18291 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa500}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x11, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.862563][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.862574][T18291] Call Trace: 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_io_uring_setup(0x420, &(0x7f0000000100)={0x0, 0xa8bf, 0x8, 0x2, 0x14c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_setup(0x28af, &(0x7f0000000200)={0x0, 0x3fd8, 0x10, 0x3, 0x3ab, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x5f5e0ff, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xd100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x12, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.862579][T18291] [ 816.862585][T18291] dump_stack_lvl+0xd6/0x122 [ 816.862610][T18291] dump_stack+0x11/0x12 [ 816.862629][T18291] should_fail+0x242/0x250 00:46:03 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_io_uring_setup(0x420, &(0x7f0000000100)={0x0, 0xa8bf, 0x8, 0x2, 0x14c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_setup(0x28af, &(0x7f0000000200)={0x0, 0x3fd8, 0x10, 0x3, 0x3ab, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0x420, &(0x7f0000000100)={0x0, 0xa8bf, 0x8, 0x2, 0x14c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x28af, &(0x7f0000000200)={0x0, 0x3fd8, 0x10, 0x3, 0x3ab, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xe202}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.862648][T18291] should_fail_usercopy+0x16/0x20 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x25, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2a, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_io_uring_setup(0x420, &(0x7f0000000100)={0x0, 0xa8bf, 0x8, 0x2, 0x14c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_setup(0x28af, &(0x7f0000000200)={0x0, 0x3fd8, 0x10, 0x3, 0x3ab, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0x420, &(0x7f0000000100)={0x0, 0xa8bf, 0x8, 0x2, 0x14c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x28af, &(0x7f0000000200)={0x0, 0x3fd8, 0x10, 0x3, 0x3ab, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xed03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.862730][T18291] _copy_to_user+0x1a/0x90 [ 816.862748][T18291] bpf_verifier_vlog+0x137/0x230 [ 816.862768][T18291] __btf_verifier_log+0x80/0xa0 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x43, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf403}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x48, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.862790][T18291] ? btf_parse_hdr+0x237/0x460 [ 816.862814][T18291] ? check_heap_object+0x1ab/0x3e0 [ 816.862866][T18291] btf_parse_hdr+0x24e/0x460 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) [ 816.862885][T18291] btf_new_fd+0x2af/0x600 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf603}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x4c, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x68, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.862905][T18291] bpf_btf_load+0x69/0x80 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf901}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) (async) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x6c, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.862928][T18291] __sys_bpf+0x493/0x630 [ 816.863028][T18291] __x64_sys_bpf+0x3f/0x50 [ 816.863050][T18291] do_syscall_64+0x2b/0x70 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x10004}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) (async) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.863094][T18291] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.863116][T18291] RIP: 0033:0x7fbb2245b109 [ 816.863130][T18291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x7a, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/183, 0xb7}], 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0xa, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.863185][T18291] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.863203][T18291] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x100000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/183, 0xb7}], 0x4) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/183, 0xb7}], 0x4) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0xc, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.863216][T18291] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.863228][T18291] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x101200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x779c, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x210}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x42, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x121000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.863240][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.863252][T18291] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.863304][T18291] 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.915092][T18300] FAULT_INJECTION: forcing a failure. [ 816.915092][T18300] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x779c, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x210}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x400000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x5f5e0ff, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x779c, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x210}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.915197][T18300] CPU: 1 PID: 18300 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.915220][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x80ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x16, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x226, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc6c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r4, 0x404, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93a2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0xd0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.915301][T18300] Call Trace: [ 816.915306][T18300] [ 816.915313][T18300] dump_stack_lvl+0xd6/0x122 [ 816.915340][T18300] dump_stack+0x11/0x12 [ 816.915358][T18300] should_fail+0x242/0x250 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x226, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc6c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r4, 0x404, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93a2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0xd0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xb0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.915389][T18300] should_fail_usercopy+0x16/0x20 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1e, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x226, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc6c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r4, 0x404, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x93a2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0xd0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xc0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.915408][T18300] _copy_from_user+0x1a/0xc0 [ 816.915428][T18300] __sys_bpf+0x1f2/0x630 [ 816.915456][T18300] __x64_sys_bpf+0x3f/0x50 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xc0ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 1: r0 = io_uring_setup(0x264d, &(0x7f0000000100)={0x0, 0xc74, 0x1, 0x2, 0x2e8}) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x10000000) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.915480][T18300] do_syscall_64+0x2b/0x70 [ 816.915502][T18300] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.915524][T18300] RIP: 0033:0x7f9b70f8e109 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = io_uring_setup(0x264d, &(0x7f0000000100)={0x0, 0xc74, 0x1, 0x2, 0x2e8}) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x10000000) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf0ff1f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x300, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.915543][T18300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.915560][T18300] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:04 executing program 1: r0 = io_uring_setup(0x264d, &(0x7f0000000100)={0x0, 0xc74, 0x1, 0x2, 0x2e8}) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x10000000) io_uring_setup(0x264d, &(0x7f0000000100)={0x0, 0xc74, 0x1, 0x2, 0x2e8}) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x10000000) (async) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x500, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.915651][T18300] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 [ 816.915664][T18300] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = msgget$private(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/70) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:04 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 64) r1 = msgget$private(0x0, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) (async) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/70) 00:46:04 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x1020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:04 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:04 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x700, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.915677][T18300] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.915696][T18300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x300, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 64) r1 = msgget$private(0x0, 0x0) (rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r2, 0x1) msgctl$IPC_RMID(r1, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/70) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x2000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x900, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.915709][T18300] R13: 00007ffe4773a63f R14: 00007f9b70704300 R15: 0000000000022000 [ 816.915786][T18300] [ 816.918270][T18297] FAULT_INJECTION: forcing a failure. [ 816.918270][T18297] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x500, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x300, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x70b2, &(0x7f0000000100)={0x0, 0x4220, 0x0, 0x0, 0x40ea}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x500, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x2040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.918343][T18297] CPU: 0 PID: 18297 Comm: syz-executor.2 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.918362][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x700, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x70b2, &(0x7f0000000100)={0x0, 0x4220, 0x0, 0x0, 0x40ea}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.918374][T18297] Call Trace: [ 816.918378][T18297] [ 816.918383][T18297] dump_stack_lvl+0xd6/0x122 [ 816.918418][T18297] dump_stack+0x11/0x12 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x4000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x700, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x900, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x70b2, &(0x7f0000000100)={0x0, 0x4220, 0x0, 0x0, 0x40ea}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x70b2, &(0x7f0000000100)={0x0, 0x4220, 0x0, 0x0, 0x40ea}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x900, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x4000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 816.918437][T18297] should_fail+0x242/0x250 [ 816.918520][T18297] should_fail_usercopy+0x16/0x20 [ 816.918539][T18297] _copy_from_user+0x1a/0xc0 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xdcd60b23d7544d2d, &(0x7f0000000000)=0x1, 0x7820, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 816.918579][T18297] __x64_sys_io_uring_setup+0x5d/0x130 [ 816.918605][T18297] do_syscall_64+0x2b/0x70 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2a, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1100, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x6040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.918625][T18297] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.918649][T18297] RIP: 0033:0x7ff381a17109 [ 816.918663][T18297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xdcd60b23d7544d2d, &(0x7f0000000000)=0x1, 0x7820, 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x7000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1200, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.918709][T18297] RSP: 002b:00007ff38118d0e8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 816.918729][T18297] RAX: ffffffffffffffda RBX: 00007ff381b29f60 RCX: 00007ff381a17109 [ 816.918742][T18297] RDX: 0000000020ffb000 RSI: 0000000020000380 RDI: 0000000000004717 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2500, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xdcd60b23d7544d2d, &(0x7f0000000000)=0x1, 0x7820, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.918755][T18297] RBP: 0000000020000380 R08: 0000000020000440 R09: 0000000020000440 [ 816.918785][T18297] R10: 0000000020000400 R11: 0000000000000206 R12: 0000000020000440 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20040004) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1100, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.918797][T18297] R13: 0000000020ffb000 R14: 0000000020000400 R15: 0000000020fff000 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20040004) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1100, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xc000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4800, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1200, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20040004) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20040004) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1200, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.918812][T18297] [ 816.921376][T18303] FAULT_INJECTION: forcing a failure. [ 816.921376][T18303] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x10000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1e00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1600, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x3, 0x1, 0x0) r0 = syz_io_uring_setup(0x7abc, &(0x7f0000000100)={0x0, 0xda44, 0x1, 0x0, 0xdb}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2072, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6800, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.921478][T18303] CPU: 1 PID: 18303 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.921503][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x1ffff000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2500, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.921514][T18303] Call Trace: 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2500, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x20000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x300, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4800, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x3, 0x1, 0x0) r0 = syz_io_uring_setup(0x7abc, &(0x7f0000000100)={0x0, 0xda44, 0x1, 0x0, 0xdb}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2072, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x3, 0x1, 0x0) (async) syz_io_uring_setup(0x7abc, &(0x7f0000000100)={0x0, 0xda44, 0x1, 0x0, 0xdb}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2072, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) [ 816.921572][T18303] [ 816.921578][T18303] dump_stack_lvl+0xd6/0x122 [ 816.921602][T18303] dump_stack+0x11/0x12 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7400, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x500, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000200)=0x3, 0x1, 0x0) r0 = syz_io_uring_setup(0x7abc, &(0x7f0000000100)={0x0, 0xda44, 0x1, 0x0, 0xdb}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2072, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4800, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x20ffb000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x600, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.921622][T18303] should_fail+0x242/0x250 [ 816.921640][T18303] should_fail_usercopy+0x16/0x20 [ 816.921697][T18303] _copy_to_user+0x1a/0x90 [ 816.921717][T18303] bpf_verifier_vlog+0x137/0x230 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6800, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.921786][T18303] __btf_verifier_log+0x80/0xa0 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x700, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d584239776a41da01681c19b56f1ea8438896f4319837d88d2d913ce6f87a41dc4f281f2ede47c66595e2e50ed9e40cfb823d41670f5d8d95d8350d966c410142b997704973c190a534cb746d61427ce88bcae575d58afb8c27e039568d25a3ba0dc8e8dc011a62faacd1fa9f8195dd3d343dd3f07bde147086114be56d8aa068597d32c20de27776ec87fdf2950b81b5990bdbf033643ab4137add48aa3693a49e5cc536d55876b55c4bbc7156044afccfb8c401cee421af4548db7a0729fc647c011ea5e78b18055fccec87ee74fbf7ededa50cb5168b9cb2a81869633dba78618d949cb6e63fd5bb362d6", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf2502000000080006007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x20ffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6800, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7400, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.921940][T18303] ? btf_parse_hdr+0x258/0x460 [ 816.921959][T18303] ? check_heap_object+0x1ab/0x3e0 [ 816.921985][T18303] btf_parse_hdr+0x26f/0x460 [ 816.922058][T18303] btf_new_fd+0x2af/0x600 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x900, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d584239776a41da01681c19b56f1ea8438896f4319837d88d2d913ce6f87a41dc4f281f2ede47c66595e2e50ed9e40cfb823d41670f5d8d95d8350d966c410142b997704973c190a534cb746d61427ce88bcae575d58afb8c27e039568d25a3ba0dc8e8dc011a62faacd1fa9f8195dd3d343dd3f07bde147086114be56d8aa068597d32c20de27776ec87fdf2950b81b5990bdbf033643ab4137add48aa3693a49e5cc536d55876b55c4bbc7156044afccfb8c401cee421af4548db7a0729fc647c011ea5e78b18055fccec87ee74fbf7ededa50cb5168b9cb2a81869633dba78618d949cb6e63fd5bb362d6", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf2502000000080006007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (rerun: 32) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x21000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.922078][T18303] bpf_btf_load+0x69/0x80 [ 816.922102][T18303] __sys_bpf+0x493/0x630 [ 816.922129][T18303] __x64_sys_bpf+0x3f/0x50 [ 816.922241][T18303] do_syscall_64+0x2b/0x70 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a00, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x3d020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.922262][T18303] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000d584239776a41da01681c19b56f1ea8438896f4319837d88d2d913ce6f87a41dc4f281f2ede47c66595e2e50ed9e40cfb823d41670f5d8d95d8350d966c410142b997704973c190a534cb746d61427ce88bcae575d58afb8c27e039568d25a3ba0dc8e8dc011a62faacd1fa9f8195dd3d343dd3f07bde147086114be56d8aa068597d32c20de27776ec87fdf2950b81b5990bdbf033643ab4137add48aa3693a49e5cc536d55876b55c4bbc7156044afccfb8c401cee421af4548db7a0729fc647c011ea5e78b18055fccec87ee74fbf7ededa50cb5168b9cb2a81869633dba78618d949cb6e63fd5bb362d6", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf2502000000080006007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7400, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x40000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x8000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.922306][T18303] RIP: 0033:0x7fbb2245b109 [ 816.922321][T18303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.922337][T18303] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:05 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x42000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:05 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x8000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:05 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 816.922357][T18303] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 816.922430][T18303] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x100000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x8000000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 816.922442][T18303] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.922455][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1100, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:06 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x95030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r0, &(0x7f00000001c0)=""/169, 0xa9) r2 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x66e3, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000280)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_FILES(r2, 0x8, &(0x7f0000000140), 0x2) getpeername$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1200, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 816.922467][T18303] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.922483][T18303] [ 816.963389][T18311] FAULT_INJECTION: forcing a failure. [ 816.963389][T18311] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:06 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xa5000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2500, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 816.963413][T18311] CPU: 0 PID: 18311 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.963437][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.963529][T18311] Call Trace: [ 816.963535][T18311] [ 816.963540][T18311] dump_stack_lvl+0xd6/0x122 [ 816.963620][T18311] dump_stack+0x11/0x12 [ 816.963715][T18311] should_fail+0x242/0x250 [ 816.963801][T18311] should_fail_usercopy+0x16/0x20 [ 816.963819][T18311] _copy_to_user+0x1a/0x90 [ 816.963837][T18311] bpf_verifier_vlog+0x137/0x230 [ 816.963857][T18311] __btf_verifier_log+0x80/0xa0 [ 816.963879][T18311] ? btf_parse_hdr+0x279/0x460 [ 816.963938][T18311] ? check_heap_object+0x1ab/0x3e0 [ 816.963960][T18311] btf_parse_hdr+0x28f/0x460 [ 816.963978][T18311] btf_new_fd+0x2af/0x600 [ 816.963996][T18311] bpf_btf_load+0x69/0x80 [ 816.964051][T18311] __sys_bpf+0x493/0x630 [ 816.964148][T18311] __x64_sys_bpf+0x3f/0x50 [ 816.964170][T18311] do_syscall_64+0x2b/0x70 [ 816.964201][T18311] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.964293][T18311] RIP: 0033:0x7fbb2245b109 [ 816.964306][T18311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.964322][T18311] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.964339][T18311] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 816.964349][T18311] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.964360][T18311] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.964399][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.964409][T18311] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 816.964422][T18311] [ 816.965437][T18312] FAULT_INJECTION: forcing a failure. [ 816.965437][T18312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.965458][T18312] CPU: 0 PID: 18312 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 816.965481][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.965503][T18312] Call Trace: [ 816.965508][T18312] [ 816.965515][T18312] dump_stack_lvl+0xd6/0x122 [ 816.965537][T18312] dump_stack+0x11/0x12 [ 816.965556][T18312] should_fail+0x242/0x250 [ 816.965574][T18312] should_fail_usercopy+0x16/0x20 [ 816.965620][T18312] _copy_to_user+0x1a/0x90 [ 816.965638][T18312] bpf_verifier_vlog+0x137/0x230 [ 816.965660][T18312] __btf_verifier_log+0x80/0xa0 [ 816.965682][T18312] ? btf_parse_hdr+0x258/0x460 [ 816.965702][T18312] ? check_heap_object+0x1ab/0x3e0 [ 816.965767][T18312] btf_parse_hdr+0x26f/0x460 [ 816.965788][T18312] btf_new_fd+0x2af/0x600 [ 816.965808][T18312] bpf_btf_load+0x69/0x80 [ 816.965832][T18312] __sys_bpf+0x493/0x630 [ 816.965926][T18312] __x64_sys_bpf+0x3f/0x50 [ 816.966065][T18312] do_syscall_64+0x2b/0x70 [ 816.966086][T18312] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 816.966154][T18312] RIP: 0033:0x7f73e2671109 [ 816.966170][T18312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 816.966194][T18312] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.966242][T18312] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 816.966254][T18312] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 816.966267][T18312] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.966280][T18312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.966293][T18312] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 816.966309][T18312] [ 817.030387][T18327] FAULT_INJECTION: forcing a failure. [ 817.030387][T18327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.030411][T18327] CPU: 0 PID: 18327 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.030435][T18327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.030503][T18327] Call Trace: [ 817.030508][T18327] [ 817.030514][T18327] dump_stack_lvl+0xd6/0x122 [ 817.030534][T18328] FAULT_INJECTION: forcing a failure. [ 817.030534][T18328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.030596][T18327] dump_stack+0x11/0x12 [ 817.030612][T18327] should_fail+0x242/0x250 [ 817.030629][T18327] should_fail_usercopy+0x16/0x20 [ 817.030645][T18327] _copy_to_user+0x1a/0x90 [ 817.030661][T18327] bpf_verifier_vlog+0x137/0x230 [ 817.030730][T18327] __btf_verifier_log+0x80/0xa0 [ 817.030748][T18327] ? btf_parse_hdr+0x299/0x460 [ 817.030764][T18327] ? check_heap_object+0x1ab/0x3e0 [ 817.030833][T18327] btf_parse_hdr+0x2af/0x460 [ 817.030850][T18327] btf_new_fd+0x2af/0x600 [ 817.030866][T18327] bpf_btf_load+0x69/0x80 [ 817.030885][T18327] __sys_bpf+0x493/0x630 [ 817.030922][T18327] __x64_sys_bpf+0x3f/0x50 [ 817.030940][T18327] do_syscall_64+0x2b/0x70 [ 817.030957][T18327] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.030975][T18327] RIP: 0033:0x7fbb2245b109 [ 817.030987][T18327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.031080][T18327] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.031097][T18327] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 817.031107][T18327] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.031118][T18327] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.031128][T18327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.031138][T18327] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 817.031151][T18327] [ 817.031156][T18328] CPU: 1 PID: 18328 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.031179][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.031189][T18328] Call Trace: [ 817.031194][T18328] [ 817.031199][T18328] dump_stack_lvl+0xd6/0x122 [ 817.031220][T18328] dump_stack+0x11/0x12 [ 817.031271][T18328] should_fail+0x242/0x250 [ 817.031290][T18328] should_fail_usercopy+0x16/0x20 [ 817.031308][T18328] _copy_to_user+0x1a/0x90 [ 817.031325][T18328] bpf_verifier_vlog+0x137/0x230 [ 817.031344][T18328] __btf_verifier_log+0x80/0xa0 [ 817.031426][T18328] ? btf_parse_hdr+0x279/0x460 [ 817.031457][T18328] ? check_heap_object+0x1ab/0x3e0 [ 817.031481][T18328] btf_parse_hdr+0x28f/0x460 [ 817.031501][T18328] btf_new_fd+0x2af/0x600 [ 817.031521][T18328] bpf_btf_load+0x69/0x80 [ 817.031578][T18328] __sys_bpf+0x493/0x630 [ 817.031643][T18328] __x64_sys_bpf+0x3f/0x50 [ 817.031665][T18328] do_syscall_64+0x2b/0x70 [ 817.031734][T18328] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.031754][T18328] RIP: 0033:0x7f73e2671109 [ 817.031769][T18328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.031787][T18328] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.031806][T18328] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 817.031853][T18328] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.031867][T18328] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.031879][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.031893][T18328] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 817.031950][T18328] [ 817.072324][T18332] FAULT_INJECTION: forcing a failure. [ 817.072324][T18332] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r0, &(0x7f00000001c0)=""/169, 0xa9) r2 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x66e3, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000280)=""/4096, 0x1000) io_uring_register$IORING_REGISTER_FILES(r2, 0x8, &(0x7f0000000140), 0x2) getpeername$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) pipe(&(0x7f0000000000)) (async) read$snapshot(r0, &(0x7f00000001c0)=""/169, 0xa9) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x66e3, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) read$snapshot(r1, &(0x7f0000000280)=""/4096, 0x1000) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x8, &(0x7f0000000140), 0x2) (async) getpeername$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) (async) 00:46:06 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xd1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2a00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.072350][T18332] CPU: 0 PID: 18332 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.072375][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.072396][T18332] Call Trace: [ 817.072401][T18332] [ 817.072407][T18332] dump_stack_lvl+0xd6/0x122 [ 817.072465][T18332] dump_stack+0x11/0x12 [ 817.072485][T18332] should_fail+0x242/0x250 [ 817.072505][T18332] should_fail_usercopy+0x16/0x20 00:46:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:06 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xe2020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:06 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.072525][T18332] _copy_to_user+0x1a/0x90 00:46:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$snapshot(r0, &(0x7f00000001c0)=""/169, 0xa9) r2 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x66e3, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) read$snapshot(r1, &(0x7f0000000280)=""/4096, 0x1000) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x8, &(0x7f0000000140), 0x2) (async) getpeername$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4800, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xed030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.072582][T18332] bpf_verifier_vlog+0x137/0x230 [ 817.072604][T18332] __btf_verifier_log+0x80/0xa0 [ 817.072626][T18332] ? btf_parse_hdr+0x2b9/0x460 [ 817.072646][T18332] ? check_heap_object+0x1ab/0x3e0 [ 817.072730][T18332] btf_parse_hdr+0x2cf/0x460 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf4030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.072749][T18332] btf_new_fd+0x2af/0x600 [ 817.072768][T18332] bpf_btf_load+0x69/0x80 [ 817.072791][T18332] __sys_bpf+0x493/0x630 [ 817.072834][T18332] __x64_sys_bpf+0x3f/0x50 [ 817.072896][T18332] do_syscall_64+0x2b/0x70 [ 817.072917][T18332] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.072938][T18332] RIP: 0033:0x7fbb2245b109 [ 817.072997][T18332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6168, &(0x7f0000000100)={0x0, 0xb93, 0x4, 0x0, 0x2de, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf6030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6800, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xf9010000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.073052][T18332] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.073074][T18332] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6168, &(0x7f0000000100)={0x0, 0xb93, 0x4, 0x0, 0x2de, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7400, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6168, &(0x7f0000000100)={0x0, 0xb93, 0x4, 0x0, 0x2de, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) pipe(&(0x7f00000000c0)) (async) syz_io_uring_setup(0x6168, &(0x7f0000000100)={0x0, 0xb93, 0x4, 0x0, 0x2de, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.073087][T18332] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.073100][T18332] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xfeffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: inotify_init1(0x0) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xfffff, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.073112][T18332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.073133][T18332] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xffff8000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x16000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: inotify_init1(0x0) (async) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x100000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xffffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.073197][T18332] [ 817.079159][T18337] FAULT_INJECTION: forcing a failure. [ 817.079159][T18337] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: inotify_init1(0x0) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) inotify_init1(0x0) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.079181][T18337] CPU: 1 PID: 18337 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.079264][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x3000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.079275][T18337] Call Trace: [ 817.079280][T18337] [ 817.079286][T18337] dump_stack_lvl+0xd6/0x122 [ 817.079358][T18337] dump_stack+0x11/0x12 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) (rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async, rerun: 64) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) (rerun: 64) getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) [ 817.079378][T18337] should_fail+0x242/0x250 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x5000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x1e000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xffff0f00, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100), 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) (async) getpeername$llc(r2, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x20000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.079405][T18337] should_fail_usercopy+0x16/0x20 [ 817.079429][T18337] _copy_to_user+0x1a/0x90 [ 817.079510][T18337] bpf_verifier_vlog+0x137/0x230 [ 817.079603][T18337] __btf_verifier_log+0x80/0xa0 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a000000, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.079635][T18337] ? btf_parse_hdr+0x299/0x460 [ 817.079654][T18337] ? check_heap_object+0x1ab/0x3e0 [ 817.079763][T18337] btf_parse_hdr+0x2af/0x460 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6485cfae}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f54}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x47}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x480) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6485cfae}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f54}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x47}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x480) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x37, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x9000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.079829][T18337] btf_new_fd+0x2af/0x600 [ 817.079874][T18337] bpf_btf_load+0x69/0x80 [ 817.079898][T18337] __sys_bpf+0x493/0x630 [ 817.079987][T18337] __x64_sys_bpf+0x3f/0x50 [ 817.080009][T18337] do_syscall_64+0x2b/0x70 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6485cfae}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f54}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x47}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x480) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x98, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6485cfae}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f54}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x47}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x480) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xa000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.080030][T18337] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.080092][T18337] RIP: 0033:0x7f73e2671109 [ 817.080107][T18337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x0, {"479f343d33ec4571bcf3ad892e316e58"}, 0x7fff, 0xfffffffffffffff9, 0x7}}}, 0xa0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x0) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xb000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.080141][T18337] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.080162][T18337] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x0, {"479f343d33ec4571bcf3ad892e316e58"}, 0x7fff, 0xfffffffffffffff9, 0x7}}}, 0xa0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x628a, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x0, {"479f343d33ec4571bcf3ad892e316e58"}, 0x7fff, 0xfffffffffffffff9, 0x7}}}, 0xa0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x0) (async) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3fe, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.080239][T18337] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.080251][T18337] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.080265][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.080278][T18337] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f5e0ff, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xc000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x0, {"479f343d33ec4571bcf3ad892e316e58"}, 0x7fff, 0xfffffffffffffff9, 0x7}}}, 0xa0) (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}, 0x1, 0x1, 0x1}, 0x0) [ 817.080295][T18337] 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xd000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0xa, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f5e0ff, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.111191][T18345] FAULT_INJECTION: forcing a failure. [ 817.111191][T18345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.111290][T18345] CPU: 0 PID: 18345 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x42}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0xc, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xf000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a000000, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xa, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.111322][T18345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.111333][T18345] Call Trace: [ 817.111339][T18345] 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x16, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.111362][T18345] dump_stack_lvl+0xd6/0x122 [ 817.111397][T18345] dump_stack+0x11/0x12 [ 817.111416][T18345] should_fail+0x242/0x250 [ 817.111436][T18345] should_fail_usercopy+0x16/0x20 [ 817.111453][T18345] _copy_to_user+0x1a/0x90 [ 817.111496][T18345] bpf_verifier_vlog+0x137/0x230 [ 817.111516][T18345] __btf_verifier_log+0x80/0xa0 [ 817.111537][T18345] ? btf_parse_hdr+0x2d9/0x460 [ 817.111556][T18345] ? check_heap_object+0x1ab/0x3e0 [ 817.111618][T18345] btf_parse_hdr+0x2ef/0x460 [ 817.111638][T18345] btf_new_fd+0x2af/0x600 [ 817.111658][T18345] bpf_btf_load+0x69/0x80 [ 817.111733][T18345] __sys_bpf+0x493/0x630 [ 817.111758][T18345] __x64_sys_bpf+0x3f/0x50 [ 817.111780][T18345] do_syscall_64+0x2b/0x70 [ 817.111801][T18345] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.111887][T18345] RIP: 0033:0x7fbb2245b109 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x60}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xffff0f00, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xe, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x64, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.111903][T18345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.111922][T18345] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.111943][T18345] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 00:46:08 executing program 1: syz_io_uring_setup(0x200628b, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4, 0x1, &(0x7f0000000640)=""/252, 0xfc}, &(0x7f0000000780)=0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/socket\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r8, 0x8}}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc7d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4080) getpeername$llc(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r6, r3, r5], 0x5) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x5f5e0ff, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x37, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x12000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x50, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: syz_io_uring_setup(0x200628b, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4, 0x1, &(0x7f0000000640)=""/252, 0xfc}, &(0x7f0000000780)=0x40) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/socket\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r8, 0x8}}, 0x10) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc7d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4080) (async) getpeername$llc(r6, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r6, r3, r5], 0x5) [ 817.111957][T18345] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1e, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xd1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x20000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x5c, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: syz_io_uring_setup(0x200628b, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/212, 0xd4, 0x1, &(0x7f0000000640)=""/252, 0xfc}, &(0x7f0000000780)=0x40) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc/socket\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3f}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000001) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r8, 0x8}}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc7d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4080) (async) getpeername$llc(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140)=[r4, 0xffffffffffffffff, r6, r3, r5], 0x5) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3fe, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x64, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.111970][T18345] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.112013][T18345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x25000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x102}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2000000, 0x4, 0x0, 0xa3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3fe, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2a000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f5e0ff, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x1f9}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.112026][T18345] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 817.112043][T18345] [ 817.121611][T18351] FAULT_INJECTION: forcing a failure. [ 817.121611][T18351] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x43000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2000000, 0x4, 0x0, 0xa3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2000000, 0x4, 0x0, 0xa3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x5f5e0ff, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0xa, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x201}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x48000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2000000, 0x4, 0x0, 0xa3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.121636][T18351] CPU: 1 PID: 18351 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.121686][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0xc, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x204}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x4c000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3fe, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x800, 0x8, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40080) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x23d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.121697][T18351] Call Trace: [ 817.121702][T18351] [ 817.121707][T18351] dump_stack_lvl+0xd6/0x122 [ 817.121731][T18351] dump_stack+0x11/0x12 [ 817.121750][T18351] should_fail+0x242/0x250 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x68000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x1001, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1e, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.121769][T18351] should_fail_usercopy+0x16/0x20 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x6c000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x64, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x2e2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x800, 0x8, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40080) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x74000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.121837][T18351] _copy_to_user+0x1a/0x90 [ 817.121859][T18351] bpf_verifier_vlog+0x137/0x230 [ 817.121879][T18351] __btf_verifier_log+0x80/0xa0 [ 817.121902][T18351] ? btf_parse_hdr+0x2b9/0x460 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x5f5e0ff, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x800, 0x8, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x40080) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (rerun: 32) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x395}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x7a000000, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.121999][T18351] ? check_heap_object+0x1ab/0x3e0 [ 817.122022][T18351] btf_parse_hdr+0x2cf/0x460 [ 817.122053][T18351] btf_new_fd+0x2af/0x600 [ 817.122075][T18351] bpf_btf_load+0x69/0x80 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x3ed}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xffff0f00, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xa, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.122125][T18351] __sys_bpf+0x493/0x630 [ 817.122190][T18351] __x64_sys_bpf+0x3f/0x50 [ 817.122212][T18351] do_syscall_64+0x2b/0x70 [ 817.122270][T18351] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x3f4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x5}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xb, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x10, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) [ 817.122292][T18351] RIP: 0033:0x7f73e2671109 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3fe, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x29, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xc, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x3f6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xd, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.122307][T18351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.122362][T18351] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x402}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xf7ab}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd(0xfffffff7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001f7768be6b08876de4623aa9b68fcfc940edb87c0afa134638c2729ea69cd8a533f71bd1ffa6da920246d7808c1bdadec1d8aa6452b845cb0082591b05c745bb7d43c90e953ffac665c369efdd1e2187f23203c1e2e581d2723ffa286c076153c086481d533862550ce8d67b72438620893ec4c4b20b4636740997a430780dc8523596f8745191f0a6e3fea81611109d461f795e2d64e42cb37783ee096eff3bcc5787cdb670a0642bd645c00f0000000000", @ANYRES16=r4, @ANYBLOB="0001cb0000292cbd7000fcdbdf2501000000060006000400000008000500e000000208000200000000000800090004000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100)="5c44f110f74851112642155f531bbf0c49a7993b3b7cf03d2d535b4b900105b0b22bf3cf3c4b608b0d4583fa290e21ca4fa1c36bacae776a35942f7763e85176490974b916896845f58ed7923b26", 0x4e, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000bb2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/232, 0xe8, 0x1, &(0x7f0000000580)=""/88, 0x58}, &(0x7f0000000740)=0x40) getpeername$llc(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0x479, 0x0, &(0x7f0000000380)=[r5, r6, r0]}, 0x3) [ 817.122382][T18351] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 817.122396][T18351] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2a, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x406}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x2}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xe, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x3}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x10, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xf7ab}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = eventfd(0xfffffff7) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001f7768be6b08876de4623aa9b68fcfc940edb87c0afa134638c2729ea69cd8a533f71bd1ffa6da920246d7808c1bdadec1d8aa6452b845cb0082591b05c745bb7d43c90e953ffac665c369efdd1e2187f23203c1e2e581d2723ffa286c076153c086481d533862550ce8d67b72438620893ec4c4b20b4636740997a430780dc8523596f8745191f0a6e3fea81611109d461f795e2d64e42cb37783ee096eff3bcc5787cdb670a0642bd645c00f0000000000", @ANYRES16=r4, @ANYBLOB="0001cb0000292cbd7000fcdbdf2501000000060006000400000008000500e000000208000200000000000800090004000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100)="5c44f110f74851112642155f531bbf0c49a7993b3b7cf03d2d535b4b900105b0b22bf3cf3c4b608b0d4583fa290e21ca4fa1c36bacae776a35942f7763e85176490974b916896845f58ed7923b26", 0x4e, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000bb2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/232, 0xe8, 0x1, &(0x7f0000000580)=""/88, 0x58}, &(0x7f0000000740)=0x40) (async) getpeername$llc(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0x479, 0x0, &(0x7f0000000380)=[r5, r6, r0]}, 0x3) [ 817.122409][T18351] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x8}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5f5e0ff, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x604}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x9}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x11, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xf7ab}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd(0xfffffff7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001f7768be6b08876de4623aa9b68fcfc940edb87c0afa134638c2729ea69cd8a533f71bd1ffa6da920246d7808c1bdadec1d8aa6452b845cb0082591b05c745bb7d43c90e953ffac665c369efdd1e2187f23203c1e2e581d2723ffa286c076153c086481d533862550ce8d67b72438620893ec4c4b20b4636740997a430780dc8523596f8745191f0a6e3fea81611109d461f795e2d64e42cb37783ee096eff3bcc5787cdb670a0642bd645c00f0000000000", @ANYRES16=r4, @ANYBLOB="0001cb0000292cbd7000fcdbdf2501000000060006000400000008000500e000000208000200000000000800090004000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100)="5c44f110f74851112642155f531bbf0c49a7993b3b7cf03d2d535b4b900105b0b22bf3cf3c4b608b0d4583fa290e21ca4fa1c36bacae776a35942f7763e85176490974b916896845f58ed7923b26", 0x4e, r1}, 0x68) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000bb2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/232, 0xe8, 0x1, &(0x7f0000000580)=""/88, 0x58}, &(0x7f0000000740)=0x40) getpeername$llc(r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0x479, 0x0, &(0x7f0000000380)=[r5, r6, r0]}, 0x3) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xf7ab}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) eventfd(0xfffffff7) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000780), r3) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001f7768be6b08876de4623aa9b68fcfc940edb87c0afa134638c2729ea69cd8a533f71bd1ffa6da920246d7808c1bdadec1d8aa6452b845cb0082591b05c745bb7d43c90e953ffac665c369efdd1e2187f23203c1e2e581d2723ffa286c076153c086481d533862550ce8d67b72438620893ec4c4b20b4636740997a430780dc8523596f8745191f0a6e3fea81611109d461f795e2d64e42cb37783ee096eff3bcc5787cdb670a0642bd645c00f0000000000", @ANYRES16=r4, @ANYBLOB="0001cb0000292cbd7000fcdbdf2501000000060006000400000008000500e000000208000200000000000800090004000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100)="5c44f110f74851112642155f531bbf0c49a7993b3b7cf03d2d535b4b900105b0b22bf3cf3c4b608b0d4583fa290e21ca4fa1c36bacae776a35942f7763e85176490974b916896845f58ed7923b26", 0x4e, r1}, 0x68) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r5, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r7, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000bb2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/232, 0xe8, 0x1, &(0x7f0000000580)=""/88, 0x58}, &(0x7f0000000740)=0x40) (async) getpeername$llc(r6, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0x479, 0x0, &(0x7f0000000380)=[r5, r6, r0]}, 0x3) (async) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0xa, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x5}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x12, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.122421][T18351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.122451][T18351] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0xc, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xa}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x16, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:08 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xb}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:08 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x29, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.122467][T18351] [ 817.122814][T18348] FAULT_INJECTION: forcing a failure. [ 817.122814][T18348] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x25, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xc}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x2a, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x48, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.122835][T18348] CPU: 1 PID: 18348 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.122886][T18348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x8}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xc00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x64, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xd}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4c, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xe}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x5f5e0ff, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x68, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.122896][T18348] Call Trace: [ 817.122900][T18348] [ 817.122906][T18348] dump_stack_lvl+0xd6/0x122 [ 817.122938][T18348] dump_stack+0x11/0x12 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x9}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd2(0x6, 0x80000) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r0, r6, r0, r7, r0], 0x9) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x2000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xa}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6c, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x10}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd2(0x6, 0x80000) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r0, r6, r0, r7, r0], 0x9) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) eventfd2(0x6, 0x80000) (async) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000000)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r3, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r6, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r7, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r0, r6, r0, r7, r0], 0x9) (async) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.122958][T18348] should_fail+0x242/0x250 [ 817.122976][T18348] should_fail_usercopy+0x16/0x20 [ 817.122994][T18348] _copy_from_user+0x1a/0xc0 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xb}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x11}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x3d02}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x74, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xc}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x12}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.123012][T18348] btf_new_fd+0x233/0x600 [ 817.123072][T18348] bpf_btf_load+0x69/0x80 [ 817.123095][T18348] __sys_bpf+0x493/0x630 [ 817.123119][T18348] __x64_sys_bpf+0x3f/0x50 [ 817.123250][T18348] do_syscall_64+0x2b/0x70 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd2(0x6, 0x80000) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r0, r6, r0, r7, r0], 0x9) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) eventfd2(0x6, 0x80000) (async) socketpair(0x15, 0x80000, 0x9, &(0x7f0000000000)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r3, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r6, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r7, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r2, r3, r0, r6, r0, r7, r0], 0x9) (async) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7a, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x4000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x25}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xd}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x10, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x300, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.123271][T18348] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.123294][T18348] RIP: 0033:0x7f9b70f8e109 [ 817.123307][T18348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x43}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x4200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3fe, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x6286, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r3 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) io_uring_setup(0x468, &(0x7f00000002c0)={0x0, 0x2717, 0x4, 0x1, 0x31a, 0x0, r5}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd25, 0xffffff81, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xe}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xf}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x48}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x500, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x600, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x6286, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r3 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async) io_uring_setup(0x468, &(0x7f00000002c0)={0x0, 0x2717, 0x4, 0x1, 0x31a, 0x0, r5}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd25, 0xffffff81, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) [ 817.123324][T18348] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.123405][T18348] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x10}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x6000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x3}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x700, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x6286, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r3 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async) io_uring_setup(0x468, &(0x7f00000002c0)={0x0, 0x2717, 0x4, 0x1, 0x31a, 0x0, r5}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x0, 0x70bd25, 0xffffff81, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x11}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x900, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x9503}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x68}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.123418][T18348] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.123430][T18348] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.123442][T18348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00000003c0)="b1552c9ee79aae0327b81c5b0310082e826e2403b42eecd60f8ccde81d3c2bc7cd496781c8b130c6a88a7313a86094041612cdc17fd6ba53e56414fcde5995dbbe6d814ecc484ede44488aa0662be2b89f9d2af5b236e001b6146b6e5201b8303ee6975c3104eb5fa85ba9810f720e4cc78da4f73302ba590772c83d17cba515709538bee04636efa25b15aa76a9ca804443ca0d453abf2b512378cd90e7c156bd0300e0d39fac53e2cf00000000000000", 0xb1}, 0x2c) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) getpeername$llc(r0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/92, 0x5c, 0x1, &(0x7f00000001c0)=""/70, 0x46}, &(0x7f0000000240)=0x40) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x5}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xa00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x12}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xb00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.123456][T18348] R13: 00007ffe4773a63f R14: 00007f9b70704300 R15: 0000000000022000 [ 817.123473][T18348] [ 817.152318][T18359] FAULT_INJECTION: forcing a failure. 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa500}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1e}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00000003c0)="b1552c9ee79aae0327b81c5b0310082e826e2403b42eecd60f8ccde81d3c2bc7cd496781c8b130c6a88a7313a86094041612cdc17fd6ba53e56414fcde5995dbbe6d814ecc484ede44488aa0662be2b89f9d2af5b236e001b6146b6e5201b8303ee6975c3104eb5fa85ba9810f720e4cc78da4f73302ba590772c83d17cba515709538bee04636efa25b15aa76a9ca804443ca0d453abf2b512378cd90e7c156bd0300e0d39fac53e2cf00000000000000", 0xb1}, 0x2c) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) (async) getpeername$llc(r0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/92, 0x5c, 0x1, &(0x7f00000001c0)=""/70, 0x46}, &(0x7f0000000240)=0x40) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x74}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xc00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xd100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x25}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00000003c0)="b1552c9ee79aae0327b81c5b0310082e826e2403b42eecd60f8ccde81d3c2bc7cd496781c8b130c6a88a7313a86094041612cdc17fd6ba53e56414fcde5995dbbe6d814ecc484ede44488aa0662be2b89f9d2af5b236e001b6146b6e5201b8303ee6975c3104eb5fa85ba9810f720e4cc78da4f73302ba590772c83d17cba515709538bee04636efa25b15aa76a9ca804443ca0d453abf2b512378cd90e7c156bd0300e0d39fac53e2cf00000000000000", 0xb1}, 0x2c) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') socket$inet_sctp(0x2, 0x1, 0x84) (async) getpeername$llc(r0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/92, 0x5c, 0x1, &(0x7f00000001c0)=""/70, 0x46}, &(0x7f0000000240)=0x40) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xd00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.152318][T18359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.152341][T18359] CPU: 1 PID: 18359 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xe00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xe202}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x43}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7a}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x8}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = syz_io_uring_setup(0x31a3, &(0x7f0000000100)={0x0, 0xee07, 0x1, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r2, 0x8000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x7) [ 817.152365][T18359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.152432][T18359] Call Trace: [ 817.152437][T18359] [ 817.152443][T18359] dump_stack_lvl+0xd6/0x122 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xed03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x300}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x48}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x9}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x1100, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = syz_io_uring_setup(0x31a3, &(0x7f0000000100)={0x0, 0xee07, 0x1, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r2, 0x8000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x7) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) syz_io_uring_setup(0x31a3, &(0x7f0000000100)={0x0, 0xee07, 0x1, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r2, 0x8000000) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x7) (async) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x500}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x1200, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xa}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf403}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.152468][T18359] dump_stack+0x11/0x12 [ 817.152557][T18359] should_fail+0x242/0x250 [ 817.152581][T18359] should_fail_usercopy+0x16/0x20 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xb}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x600}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x1600, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x68}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.152601][T18359] _copy_to_user+0x1a/0x90 [ 817.152619][T18359] bpf_verifier_vlog+0x137/0x230 [ 817.152660][T18359] __btf_verifier_log+0x80/0xa0 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf603}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x700}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r2 = syz_io_uring_setup(0x31a3, &(0x7f0000000100)={0x0, 0xee07, 0x1, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x1010, r2, 0x8000000) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x7) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xc}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf901}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x2500, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xd}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.152688][T18359] ? btf_parse_hdr+0x2f9/0x460 [ 817.152707][T18359] ? check_heap_object+0x1ab/0x3e0 [ 817.152749][T18359] btf_parse_hdr+0x30f/0x460 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x900}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x74}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x10004}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x3dad, &(0x7f00000000c0)={0x0, 0x3e89, 0x0, 0x3, 0x38d}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r1, 0x10000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fbdbdf250e00000008003b002df3000005002e0000000000050037000100000008003c000400000005002a0000000000080032000200000005003000000000000500300000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xa00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4800, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xe}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7a}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.152769][T18359] btf_new_fd+0x2af/0x600 [ 817.152869][T18359] bpf_btf_load+0x69/0x80 [ 817.152972][T18359] __sys_bpf+0x493/0x630 [ 817.153042][T18359] __x64_sys_bpf+0x3f/0x50 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xb00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xf}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4c00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.153064][T18359] do_syscall_64+0x2b/0x70 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x300}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x3dad, &(0x7f00000000c0)={0x0, 0x3e89, 0x0, 0x3, 0x38d}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r1, 0x10000000) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fbdbdf250e00000008003b002df3000005002e0000000000050037000100000008003c000400000005002a0000000000080032000200000005003000000000000500300000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6800, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xc00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x10}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.153144][T18359] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.153165][T18359] RIP: 0033:0x7fbb2245b109 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x100000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xd00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x500}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x11}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6c00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x3dad, &(0x7f00000000c0)={0x0, 0x3e89, 0x0, 0x3, 0x38d}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r1, 0x10000000) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fbdbdf250e00000008003b002df3000005002e0000000000050037000100000008003c000400000005002a0000000000080032000200000005003000000000000500300000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x101200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x600}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.153187][T18359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x12}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xe00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:09 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140)=[r1], 0x1) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) 00:46:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7400, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:09 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x121000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x700}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1100}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x900}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x25}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.153205][T18359] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.153295][T18359] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x400000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1200}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7a00, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140)=[r1], 0x1) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x400) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140)=[r1], 0x1) (async) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x1000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xa00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xb00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2500}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.153312][T18359] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.153324][T18359] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x43}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x400) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140)=[r1], 0x1) (async, rerun: 64) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (rerun: 64) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x2000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x48}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x80ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4300}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.153337][T18359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.153348][T18359] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x3000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xc00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.153366][T18359] 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r3 = memfd_secret(0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x8000, 0x12345}, 0x9) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x50, r0, 0xaa371000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = eventfd2(0x101, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) getpeername$llc(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="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", 0x1000, r4}, 0x68) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xb0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xd00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4800}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xe00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.171844][T18361] FAULT_INJECTION: forcing a failure. [ 817.171844][T18361] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r3 = memfd_secret(0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x8000, 0x12345}, 0x9) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x50, r0, 0xaa371000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = eventfd2(0x101, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) getpeername$llc(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="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", 0x1000, r4}, 0x68) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) memfd_secret(0x80000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x8000, 0x12345}, 0x9) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x50, r0, 0xaa371000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r5, 0x0, 0x0) (async) eventfd2(0x101, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) (async) getpeername$llc(r4, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="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", 0x1000, r4}, 0x68) (async) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4c00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x68}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xc0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1100}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x5000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6800}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xc0ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.171867][T18361] CPU: 1 PID: 18361 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1200}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r3 = memfd_secret(0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r3, 0x0, &(0x7f00000011c0)='./file0\x00', 0x0, 0x8000, 0x12345}, 0x9) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x50, r0, 0xaa371000) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async, rerun: 32) r6 = eventfd2(0x101, 0x0) (rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) (async, rerun: 64) getpeername$llc(r4, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0)="6959e081acda3e2d9f33989f1686dca60b4d6014bb225b279d570fab16ecc0d80559c670d173545bb2928c6ad46e1b4db190f44670617356f3b147e99471cbea7b0d3fdfc03c9b9857894bde0894a9978ca37e28a7d4c00f26871fe69168b109216820c2814acc689376d19bef151e5f4936f7cc0d3e20d41f9ba3191c7220941b1f5d81220279be5fd7da2e638a63338244304da058e137f47b99c7956e9b76ec78efb0dcb71a9e5ca0d472433be38ee632d39dbe40f563eced832dec7d5dd93488581f9591f698a89f8fbaa468fe0956f1dc979459209c8ab5d9d6ffa52b56b6852f9b066dcd3cd12fa15bcf7a662a63f5e6448b9637df851c04e18681d3de8c1f9618eeaddc70d437e69186098351cbf7de674f615b9eb116b720f5702c0b53b4eff88535ff82683bbd66123f7ba1f0c9b35ed081520e52078b0df786f80d1898b308a11f48443e88bf0751ce81b102046f12af03196af63967aa236c5a717f58c794199d4c639b9868d4cad450ea1061f010644111a3b41c5fe153289cddd4346f40f3e0d11767371b5649f7431cd27b71f5df1d9c9927a661d2080fa09cccd0cf4057cc2050cadc185de090be7cb0a85bf88077f2f77b19b059bdf029df201e9e8757f373ae8b41a9723b5e447dd2f284197625acf03f25414f9f7290b40d756c3744954ce2b9ca613fdf4e0b5fb89d2e23250b94a538119271b59151655464e45e007317c0c4bfcd4f5250c1491ffe73d5bb38529e7f7a010269cdc47c85310b1fbe03e8a6b98cc79399f04e4e15805ed9bd9fb8d7596b9c4411467d775f19fd42b00696fb3e6c10cc7e1eb6417c48193155ecc5bd24a26396fef7e3eb0be2861ceced31b89e8fd97d31001266bfe06d82b775c5e9bbab437ec18aad5543d6d2c284b99cc3364186334f6e754e6dc87ae0a26736c4c9af20b0c814e1be29125b32327ab5f32372846967b2a72c404bf9771418db46d8eac3aac69299dfe5d06add434cdf866e4db5a06edc4f731517eaabc577c8924a2f5ac5e55cf25f9d3074a71cefe40bc71954a5d903a513f93ec20c9025cd415e5391f7ae7ac4f7d7a84d0adb3faaf0460c83d6ac981f38982801a29ef6d703ad48edbacdb02af6d1771d0866b2d1fa3e0f34a66a67d61b6d61c99f79dfa0735c9263c638c54704d3441c65468bdc8a07fac66bbf7870e06d465d89d8e8e51b17424e964e51fc4360126108de315d99f40b34e99f8249afe2e94ad57d488be2cf56afceee5d0b661aafd8f3b7b6f72e25781156be3c2b9d1ff735a243d6c8eecbc14f7eba477b8ee620d11bffeaab754c88b6727e49c6e3c399240a354be5ac2d8b1da7d5c123268507df1215617b77de40bf8d7e167daa41d5e1ce1e54f094a2cd2f09c80bb924a78558de8c978f2fca6586a3bd2878c5db0e2653c4b8890bb129ec5db4799f72e3c97e1ad9b076981d76b172876cf674a033a0ce81cd36260af66641c7d5773f5736af589612a5634457ba2918112dfde85591932d12a21020805ed418fb1ce391da990d35c5c1593ebdd24215442400a102674170db30149c9a6b7bfc11dec54451a55dfdf0a8a9dbe592a1e70f9b1c41d3e71d4031d0dd14f60d9eb664fecee1ee0909d966ee446f96e948bf3cab20e679889592708e5099c1bd239c3bb38bb61c39e6a8d9d2065bdc8ecd9d7189f8d700512608c5a7d018af1fb56a6135d1c649b510f86704843b06094fa7e828e307f3899787da4b362222bf80172b6cc08113986588ba1826d529017f773e5926ec2165fb46c25b58deea154eb79ee7a2d7364058ce7aabad7e3692530f5ba6dfbedd409332b4f74e82e0207705214bdb450a10e31b6053a574c096d51d17488d5742e275d05ea5ef929e1ca0860b71ca2e5cfcad83121e6a2a742537d7be0f152253e7293302061fadd0b480bcd93cfba8ef0c42801acc76211f7118141c4976ed46f44354d4f356f2c8a05f5212056c935edb4ecf122b0eec499d78068c806c2faa8e82e879d94ad7d25d220d07407f6402dfcf206ffb954b5f2d7c9b0c1c21d214a512ce8ef5ea48aa73dc1f9ab5e90b38083058665f9cdb4c99be38b31118bb101f3358844ad3daead5f7acb24e4392dfe6414d7f0970af34787dbd43c98bb8b7b6db3c50a9e4e824a8bcc7f3cc4047bd3d64e5f138a7e1955d93987d82ab3cfb4176a4b426d8389cdd671533822be79eef56f5ad2cd58e416d9f8e82cb8db126d92e380bf5f672a3c95fe0d63bf012b0206e0c5f8e6f541841dac8fed04cd955b0c1650c1ed09317d2d9b17731f2dea16dc0daaa9a23965e423cedb34edc2e49be8e10b741d66d876138ed8c5ba0ac9d9f8a56f93738adadf2b971800fedc225f2096171234b8f4a1db67422701147c9b8c347a9d31708aa1572673207e282cc4350ab50839730b7db298e79d261727771a2027737d0d0db4b5aebbab6f6bdf355496228437493e9eb4f233781f206c419f89947c8ba6ac432943458d235bd1b7578b2dbd0a2326c5714b871cf80a8f19d5fb50e5704c076f2452e50eca34099e4462a8dc15057004bc7f5cd4f48f5f20c3adea83862df41eb84503d16891e7135773140e44ff84dc285cbfa434ca04a8b61e95132cb207423419d3afd281178ab663068b86c5a6967f978b0a1a8831aad7e3c11b99d06266ae1355757efcf1f35a075d1f81d03b7d6485d388f93e63f2dd9ef645cb597035c7f4f3619b3e28e136fe8fbe8c9d7ca4d78c4e24a3e4abfd2761b80dc4dc0b482f474833892652ef3ecc64dc980e7bd2bd14ca32eb0d28e0fc46a77c7a4b7a1cff046d8f0c0a766bac577f6cd2a99703a9e6df0274a559941245b8d3730bd3162f1dca3a3b19d944702727392a08cc8e7409c74d837389cea95e8ad701b025fe9f221d492a1944e036cedabf9a0af345212e0e33af7dc48ca3cac892a9d9df0bf837a06e50a59142565be287b124cb43998379e80a86905b282f63ab1948370cb7fc99485fb035725c8b292351af0c830ea346a7a45e64fdd9158690f9a02b7fdff77fb5bdda3c491523363e9f239e48e8015b7833e8dbf752a4ea1a7875e715664ca29c541bac06d65e5e45acf5860633d568b262c6403fc20cf766b3ce219a41677952e2493fa8137823a507065928e336ca5761733d2eecd9661715fdf2afa18859b805df9901d1f7bac4d342c18d9bd7ca2789d5d46f111bfae2e7ad78c29ac1e7cdeea6f48a2a3967fd9c67bdae7d6144cb4eb7a56578eac458a9a4ba23a4e72a3575a037cec95e66b45a0d3de89786cf335051806f106e3257cc97bfa8f3ecc96daf7ea31922c65f0febe868840e2bafcf9ebcf730dbfad87e2e6d67f486df00ad43ec3de7e645ec6dce301da8584f098152eeca1b6dbd70997f690e20e5e3b200ebadfcb95071f19b9679a4d7ff2ccc64350d0b0ff6ffa6bc5c8332569debd2c41a1afc337a66b32f0a0d521f7215f0d75668b462157b717af7b437ba1007753b338a40f6a2d8888e3c5a649121dc6193db13f4179bd483cd75796cf74c38bc39546366972639f8f7e7516b6725750142e679c276a0c83d861e438899729f396555b2b71b6d90ca77805452404ed8e69bb28a941bebe2373cd9a7bfdcf5c594cdf19196d431ddc75c67258767387f2a0542ae91340570cad10fc42a2cecf505db3dd6bd3cc68fcb04f1539b599fc2ef4e12f902c56eeba9d20bbefe8791c865eae977f16757f323f276faebebfe4e1c8410cdaae746612cfe2de43ebcda758833aaa7cf00da386d0a9462be3f4ef417518ea03a907419149b756585ad0faf9b2d19d65f516bd98767e117c6cbda07d3ed4aaa762452de01cc77410a0a0c0b6e50979bdb00ed4e9ec319f447366d66af199998782a1c2969822e57da3488a1822f7e176d093ac20322f103b244f8a7b0e022305ac93c1044716dde76d1a3d801655e827098d4ff1dea7b9459bc6eeb419c3b95f2891865078e35b1ee93a7b83bd8d4e222a7941f873e3322c09313c02cf6413ec073bd97e4ed5a69d528ef92273fd4eba0632bc035ae23c151b5f4b71c9fa11245de48b162a2b26a16262b7790dde517833cfed6d94649c96d6bf8d693b4928edd7a521c5bdda7311e90c328839234589c6445ad1576fb5bdcd63399a8e8852b16df7f1c902992441ba21c1851c6d021c96d66d328f073ede983d8bf6f39da01072b5c3447a5c5491c5d9aeaa517c988825c7a3f4bd00c84e96249059cc13f61b738ce5de81e3c28252d2a1f778ac78651c89c0dc50ffbd33fc9615505c73c79175408e18e5fb6336a4020db6bdb0b2e63c52fef3f5e7ebfede8e7a4bf67de02f49604466a059ea35e79c3e41675268c9c956190e333e89a431060094c06fcc909ce8c27ed0cb7902a1cdbc0097159b7c5f6bda68fdc3ec5c10aadf0d51da99752413b594643f1ac6ad4552e2c7242682db36f1328f30704aa650f0203435889336f2f2603a2edf99653218da4955629630f581978c2f32e98570ffd2dd630c58c91e5108e154b2578b9db3974e6cf3267dd5f3a21818d3dadab650b6674cfe2e7384910b534af62657b4c3e9a48a1db785f2e7026cea0a1251aabb77ec5e5747fc8bd972d69b43b31c3d7d1493768fe6291713b588c70ea5774114170f62af226c5e1b0a93a6571704f78fc722f9d8bda732d80596f778cff445804c8b6757142c6a331bbb6af88c9e9e455f54703a913d1d4a3198409d5e9cbd0630db01d9ea6a8cecb13119bb2dedbb1e238ca1e69d234808f5ade0079d522b48ca02ba1b47102070217fdaaa59774d2af6633a01a3027404933b1e85b68d9bf96ca581844e1361876916ea4f5a8422d3aeae8258b30c77eb66436c5be8cba134e83e5c426ad10a74d06d32cd84787e9372d02b1e138b8521aceb1e69ceb7d70f7c916090500a09ec1dcd3fba353d912f5d94b8c431fe60f1256fefe0cde6e51eff33cd77f55ca7b8a4dcdffbf31f8333f59a31e71e8c575c31e28b58101656d80c9ce627fcdd1ae0164fac09c8c638c73085117f45f9da91aa11d185f0548fed8365c2094b726a775361ea883ea9a2efd2c924f07cdbcf5ef01b84b88eb12ff811724a8bae1e23fccb145ac3f0303eb47fdc5466f6732b693db1ee4db8c3020c7b9653335bdeb260edf11017aca05fe1057bb5a0589a0e1465086bd988e8f199217343694a0446daa5ed25546c52cbdd61be0d4a4ea52d6fbba7a08e816085b7931d7b12f49bcff5bb31bd6efcb688a1ccfedad9a1d5ab737193598fdd2f588ce44d6aa04226401986eb06e516130ab9d6a1b7e36c87fc3c7b4e3e8a60862db263931d4bfa23f0c12c534f894600febf67549563a8eade3f44d30ec881641f561059a68ab13cdd603e8594e3e4aecaed2778900da5d1d1bcf92e2287e37f17ef2f7c8340f2ca8ae6e4f508f8dda51879920d83798f3e596de33d6cfddae86519dc30206bed07b542358c5e37d4cc2e438c880131b4c531d8849323003a314455c3e28c76d3558f35fde3080551af53ca2e746f10da8eb6b7f6e569e00bf121ac6c6dd2c9cdc2ce29d0cf00f777272e50ed91add5a7684e7773e68a84f02958fbb86398f8b5da92dea0d463cd7c3d7fa943350318363da3c5a39c395bc028fe53a4861921e9c245cdf24c3eb3062b594eef1f4e0da3b72bd454a471bc72b20d765e582506f7cd0f6553669d980f8359dc60e6ebd058720e570598ae3854e834e7fec4960034b25faeac77a1934000f792263b77ba15365d894b5dee639abbbd467e8809e1", 0x1000, r4}, 0x68) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6c00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x74}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf0ff1f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.171891][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.171921][T18361] Call Trace: 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7400}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1e00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x8000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7a00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) [ 817.171927][T18361] [ 817.171933][T18361] dump_stack_lvl+0xd6/0x122 [ 817.171960][T18361] dump_stack+0x11/0x12 [ 817.171979][T18361] should_fail+0x242/0x250 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x300}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x2000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xfffff}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.171998][T18361] should_fail_usercopy+0x16/0x20 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x9000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x1020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x2500}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x500}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) [ 817.172065][T18361] _copy_to_user+0x1a/0x90 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xa000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x600}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x2000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) [ 817.172083][T18361] bpf_verifier_vlog+0x137/0x230 [ 817.172103][T18361] __btf_verifier_log+0x80/0xa0 [ 817.172124][T18361] ? btf_parse_hdr+0x211/0x460 [ 817.172221][T18361] ? check_heap_object+0x1ab/0x3e0 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4300}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xb000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x2040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x700}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4800}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xc000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.172291][T18361] btf_parse_hdr+0x22d/0x460 [ 817.172386][T18361] btf_new_fd+0x2af/0x600 [ 817.172405][T18361] bpf_btf_load+0x69/0x80 [ 817.172437][T18361] __sys_bpf+0x493/0x630 [ 817.172460][T18361] __x64_sys_bpf+0x3f/0x50 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x900}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x4000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.172484][T18361] do_syscall_64+0x2b/0x70 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xd000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4c00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x5000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xa00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6800}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x6c58, &(0x7f0000000040)={0x0, 0xfffffffc, 0x10, 0xfffffffc, 0x26}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = memfd_secret(0x0) r4 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x40, 0x100, 0x0, {0x0, r5}}, 0x80000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44200090}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8015) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r7 = syz_io_uring_setup(0x5960, &(0x7f0000000540)={0x0, 0xb85a, 0x20, 0x3, 0xb6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4010, r7, 0x10000000) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x4000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0xe000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xb00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6c00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.172528][T18361] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.172550][T18361] RIP: 0033:0x7f9b70f8e109 [ 817.172565][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7400}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x6c58, &(0x7f0000000040)={0x0, 0xfffffffc, 0x10, 0xfffffffc, 0x26}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = memfd_secret(0x0) r4 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x40, 0x100, 0x0, {0x0, r5}}, 0x80000000) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44200090}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (rerun: 64) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8015) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r7 = syz_io_uring_setup(0x5960, &(0x7f0000000540)={0x0, 0xb85a, 0x20, 0x3, 0xb6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4010, r7, 0x10000000) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xc00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x10000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x6040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xd00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x11000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.172583][T18361] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.172603][T18361] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7a00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x6c58, &(0x7f0000000040)={0x0, 0xfffffffc, 0x10, 0xfffffffc, 0x26}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = memfd_secret(0x0) r4 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x40, 0x100, 0x0, {0x0, r5}}, 0x80000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44200090}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8015) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r7 = syz_io_uring_setup(0x5960, &(0x7f0000000540)={0x0, 0xb85a, 0x20, 0x3, 0xb6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4010, r7, 0x10000000) syz_io_uring_setup(0x6c58, &(0x7f0000000040)={0x0, 0xfffffffc, 0x10, 0xfffffffc, 0x26}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) memfd_secret(0x0) (async) syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x40, 0x100, 0x0, {0x0, r5}}, 0x80000000) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44200090}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r6, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8015) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_io_uring_setup(0x5960, &(0x7f0000000540)={0x0, 0xb85a, 0x20, 0x3, 0xb6}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4010, r7, 0x10000000) (async) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xe00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x7000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x8000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xfffff}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x12000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x1100}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.172615][T18361] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.172631][T18361] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.172644][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x9000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x100000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x1200}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[r2]}, 0x1) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x16000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xa000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.172655][T18361] R13: 00007ffe4773a63f R14: 00007f9b70704300 R15: 0000000000022000 [ 817.172681][T18361] [ 817.178502][T18365] FAULT_INJECTION: forcing a failure. [ 817.178502][T18365] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xb000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x25000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x2000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 32) getpeername$llc(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[r2]}, 0x1) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xc000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2500}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xc000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x48000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x3000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x4c000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 32) getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[r2]}, 0x1) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xd000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.178532][T18365] CPU: 1 PID: 18365 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.178553][T18365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x10000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2a00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x68000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xe000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4300}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:10 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2136, 0x0, 0x0, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x1ffff000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.178564][T18365] Call Trace: [ 817.178569][T18365] [ 817.178603][T18365] dump_stack_lvl+0xd6/0x122 [ 817.178627][T18365] dump_stack+0x11/0x12 00:46:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x5000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:10 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x20000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4800}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x6c000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x10000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x20ffb000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.178646][T18365] should_fail+0x242/0x250 [ 817.178665][T18365] should_fail_usercopy+0x16/0x20 [ 817.178690][T18365] _copy_to_user+0x1a/0x90 [ 817.178749][T18365] bpf_verifier_vlog+0x137/0x230 [ 817.178769][T18365] __btf_verifier_log+0x80/0xa0 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4c00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x11000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2136, 0x0, 0x0, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2136, 0x0, 0x0, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x74000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x12000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7a000000, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.178790][T18365] ? btf_parse_hdr+0x2d9/0x460 [ 817.178813][T18365] ? check_heap_object+0x1ab/0x3e0 [ 817.178848][T18365] btf_parse_hdr+0x2ef/0x460 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6800}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x20ffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.178868][T18365] btf_new_fd+0x2af/0x600 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x8000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x2136, 0x0, 0x0, 0x99}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x25000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x21000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6c00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x9000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = io_uring_setup(0x4b41, &(0x7f0000000280)={0x0, 0x3545, 0x0, 0x2, 0x142, 0x0, r0}) syz_io_uring_setup(0x1023, &(0x7f00000001c0)={0x0, 0x2f46, 0x0, 0x3, 0x305, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x43000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.178888][T18365] bpf_btf_load+0x69/0x80 [ 817.178913][T18365] __sys_bpf+0x493/0x630 [ 817.179006][T18365] __x64_sys_bpf+0x3f/0x50 [ 817.179086][T18365] do_syscall_64+0x2b/0x70 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x3d020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7400}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xa000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x48000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = io_uring_setup(0x4b41, &(0x7f0000000280)={0x0, 0x3545, 0x0, 0x2, 0x142, 0x0, r0}) syz_io_uring_setup(0x1023, &(0x7f00000001c0)={0x0, 0x2f46, 0x0, 0x3, 0x305, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xb000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x40000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7a00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x4c000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.179108][T18365] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.179130][T18365] RIP: 0033:0x7f73e2671109 [ 817.179143][T18365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0xa, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = io_uring_setup(0x4b41, &(0x7f0000000280)={0x0, 0x3545, 0x0, 0x2, 0x142, 0x0, r0}) syz_io_uring_setup(0x1023, &(0x7f00000001c0)={0x0, 0x2f46, 0x0, 0x3, 0x305, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x68000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x42000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xc000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xfffff}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3ee, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x95030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6c000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xd000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x100000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) [ 817.179160][T18365] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.179243][T18365] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 817.179326][T18365] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x1000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xa5000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xe000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x74000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f3, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) (async) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x7a000000}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) [ 817.179340][T18365] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.179353][T18365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xd1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xf000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xffff0f00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f4, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x3000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.179366][T18365] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 817.179383][T18365] [ 817.218340][T18372] FAULT_INJECTION: forcing a failure. [ 817.218340][T18372] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xe2020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x10000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f5, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x3966, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x11000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.218363][T18372] CPU: 1 PID: 18372 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xed030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f6, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x3966, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x12000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x3}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x3966, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x3966, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf4030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.218436][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.218454][T18372] Call Trace: 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3f8, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x4}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x5000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x1e000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf6030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x5}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x3fe, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xda7c) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.218459][T18372] [ 817.218465][T18372] dump_stack_lvl+0xd6/0x122 [ 817.218533][T18372] dump_stack+0x11/0x12 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x20000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xf9010000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x6}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xda7c) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x25000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.218554][T18372] should_fail+0x242/0x250 [ 817.218575][T18372] should_fail_usercopy+0x16/0x20 [ 817.218593][T18372] _copy_to_user+0x1a/0x90 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x7}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x2, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0xda7c) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x8000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x43000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.218663][T18372] bpf_verifier_vlog+0x137/0x230 [ 817.218690][T18372] __btf_verifier_log+0x80/0xa0 [ 817.218713][T18372] ? btf_parse_hdr+0x2f9/0x460 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x3, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x8}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xfeffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x9000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, 0xee01, r1, 0xffffffffffffffff, r2, 0x40, 0xfde3}, 0x0, 0x0, 0x9, 0x5f3, 0x2, 0xfffffffffffffffa, 0x10000000000, 0x9, 0x20, 0x8}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_FILS_KEK={0x37, 0xf2, "985e99a4cd7883228b92b923d7681c16db64641f9330a111816988eb234d7d0257cf7c0a883f68903953b557d6909dbe137b69"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) r3 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x48000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.218735][T18372] ? check_heap_object+0x1ab/0x3e0 [ 817.218785][T18372] btf_parse_hdr+0x30f/0x460 [ 817.218807][T18372] btf_new_fd+0x2af/0x600 [ 817.218828][T18372] bpf_btf_load+0x69/0x80 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x9}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, 0xee01, r1, 0xffffffffffffffff, r2, 0x40, 0xfde3}, 0x0, 0x0, 0x9, 0x5f3, 0x2, 0xfffffffffffffffa, 0x10000000000, 0x9, 0x20, 0x8}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_FILS_KEK={0x37, 0xf2, "985e99a4cd7883228b92b923d7681c16db64641f9330a111816988eb234d7d0257cf7c0a883f68903953b557d6909dbe137b69"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) r3 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x8, &(0x7f0000000140), 0x2) msgget$private(0x0, 0x0) (async) msgctl$IPC_RMID(r0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x100) (async) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, 0xee01, r1, 0xffffffffffffffff, r2, 0x40, 0xfde3}, 0x0, 0x0, 0x9, 0x5f3, 0x2, 0xfffffffffffffffa, 0x10000000000, 0x9, 0x20, 0x8}) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_FILS_KEK={0x37, 0xf2, "985e99a4cd7883228b92b923d7681c16db64641f9330a111816988eb234d7d0257cf7c0a883f68903953b557d6909dbe137b69"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xa000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x4, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x4c000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.218883][T18372] __sys_bpf+0x493/0x630 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xa}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x68000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xffff8000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x5, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) getgroups(0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x3, 0xee01, r1, 0xffffffffffffffff, r2, 0x40, 0xfde3}, 0x0, 0x0, 0x9, 0x5f3, 0x2, 0xfffffffffffffffa, 0x10000000000, 0x9, 0x20, 0x8}) (async, rerun: 32) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (rerun: 32) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_FILS_KEK={0x37, 0xf2, "985e99a4cd7883228b92b923d7681c16db64641f9330a111816988eb234d7d0257cf7c0a883f68903953b557d6909dbe137b69"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) r3 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r3, 0x8, &(0x7f0000000140), 0x2) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xb}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xb000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.218910][T18372] __x64_sys_bpf+0x3f/0x50 [ 817.218937][T18372] do_syscall_64+0x2b/0x70 [ 817.219001][T18372] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xffffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x6, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) pipe(&(0x7f0000000100)) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x6c000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xc}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x7, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x74000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xc000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.219022][T18372] RIP: 0033:0x7f73e2671109 [ 817.219035][T18372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) pipe(&(0x7f0000000100)) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xd}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xd000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x7a000000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x8, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xe000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.219053][T18372] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xe}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) pipe(&(0x7f0000000100)) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) pipe(&(0x7f0000000100)) (async) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xf000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x9, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0xffff0f00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x10}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:11 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x10000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:11 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x49ae}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0xa, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.219136][T18372] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 817.219172][T18372] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.219186][T18372] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x11000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x11}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0xb, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x49ae}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x49ae}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x2}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x12}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x12000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.219230][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.219243][T18372] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0xc, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x49ae}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x3}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x20000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.219260][T18372] 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x25}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0xd, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x4}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x43}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x5}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) getpeername$llc(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40051) socketpair(0x2, 0x1, 0xd7, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0xe, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x25000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x48}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x10, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.220202][T18375] FAULT_INJECTION: forcing a failure. [ 817.220202][T18375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.220224][T18375] CPU: 1 PID: 18375 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x6}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x2a000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x4c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x11, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x43000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.220310][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.220321][T18375] Call Trace: [ 817.220326][T18375] 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x68}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) (async) getpeername$llc(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40051) (async, rerun: 64) socketpair(0x2, 0x1, 0xd7, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x7}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x12, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x48000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.220332][T18375] dump_stack_lvl+0xd6/0x122 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x16, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x8}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x6c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) (async) getpeername$llc(r0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40051) (async) socketpair(0x2, 0x1, 0xd7, &(0x7f0000000240)) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x74}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x9}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x4c000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x25, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.220355][T18375] dump_stack+0x11/0x12 [ 817.220375][T18375] should_fail+0x242/0x250 [ 817.220430][T18375] should_fail_usercopy+0x16/0x20 [ 817.220450][T18375] _copy_to_user+0x1a/0x90 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x68000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x48, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xa}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x7a}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x80011, r1, 0x8000000) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x300}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x4c, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.220469][T18375] bpf_verifier_vlog+0x137/0x230 [ 817.220488][T18375] __btf_verifier_log+0x80/0xa0 [ 817.220509][T18375] ? btf_parse_hdr+0x237/0x460 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xb}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x6c000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x500}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x80011, r1, 0x8000000) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x68, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xc}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x74000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.220571][T18375] ? check_heap_object+0x1ab/0x3e0 [ 817.220594][T18375] btf_parse_hdr+0x24e/0x460 [ 817.220615][T18375] btf_new_fd+0x2af/0x600 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x6c, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x80011, r1, 0x8000000) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xd}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x600}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x7a000000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x74, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x42}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.220634][T18375] bpf_btf_load+0x69/0x80 [ 817.220688][T18375] __sys_bpf+0x493/0x630 [ 817.220713][T18375] __x64_sys_bpf+0x3f/0x50 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xe}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xffff0f00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x700}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x7a, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x60}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x900}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x2, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x10}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.220734][T18375] do_syscall_64+0x2b/0x70 [ 817.220793][T18375] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.220814][T18375] RIP: 0033:0x7f9b70f8e109 [ 817.220827][T18375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xa00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x2}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x3, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x5, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x11}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xb00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.220843][T18375] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.220861][T18375] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x3}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x6, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x12}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xc00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.220948][T18375] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = syz_io_uring_setup(0x6a42, &(0x7f0000000100)={0x0, 0x9b87, 0x0, 0x0, 0x3b8, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0xd) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x4}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xd00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x1e}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x7, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x102}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = syz_io_uring_setup(0x6a42, &(0x7f0000000100)={0x0, 0x9b87, 0x0, 0x0, 0x3b8, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0xd) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async) syz_io_uring_setup(0x6a42, &(0x7f0000000100)={0x0, 0x9b87, 0x0, 0x0, 0x3b8, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0xd) (async) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x5}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.221024][T18375] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.221041][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0xe00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x25}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x8, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x43}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x6}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x1100}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.221051][T18375] R13: 00007ffe4773a63f R14: 00007f9b70704300 R15: 0000000000022000 [ 817.221141][T18375] 00:46:12 executing program 1: syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async) r1 = syz_io_uring_setup(0x6a42, &(0x7f0000000100)={0x0, 0x9b87, 0x0, 0x0, 0x3b8, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0xd) (async) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x9, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x48}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1f9}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x7}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x4c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x1200}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xa, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x8}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x68}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x3681, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.221932][T18374] FAULT_INJECTION: forcing a failure. [ 817.221932][T18374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.221955][T18374] CPU: 0 PID: 18374 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x201}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xb, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2500}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x204}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xc, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x6c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x9}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x3681, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.222004][T18374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.222015][T18374] Call Trace: [ 817.222020][T18374] 00:46:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xd, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x4300}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:12 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x23d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:12 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xa}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x74}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x7a}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:12 executing program 1: r0 = syz_io_uring_setup(0x3681, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.222026][T18374] dump_stack_lvl+0xd6/0x122 [ 817.222048][T18374] dump_stack+0x11/0x12 [ 817.222069][T18374] should_fail+0x242/0x250 [ 817.222089][T18374] should_fail_usercopy+0x16/0x20 [ 817.222133][T18374] _copy_to_user+0x1a/0x90 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x4800}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xb}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xe, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.222206][T18374] bpf_verifier_vlog+0x137/0x230 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x4c00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x300}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x10000000) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2e2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x10, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xc}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x6800}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.222226][T18374] __btf_verifier_log+0x80/0xa0 [ 817.222247][T18374] ? bpf_verifier_vlog+0x174/0x230 [ 817.222266][T18374] ? check_heap_object+0x1ab/0x3e0 [ 817.222291][T18374] btf_parse_hdr+0x328/0x460 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x500}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x10000000) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) pipe(&(0x7f0000000000)) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x10000000) (async) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x395}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x11, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xd}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.222332][T18374] btf_new_fd+0x2af/0x600 [ 817.222353][T18374] bpf_btf_load+0x69/0x80 [ 817.222412][T18374] __sys_bpf+0x493/0x630 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3ed}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x600}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x6c00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x12, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x10000000) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) pipe(&(0x7f0000000000)) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x10000000) (async) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xe}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x700}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.222438][T18374] __x64_sys_bpf+0x3f/0x50 [ 817.222540][T18374] do_syscall_64+0x2b/0x70 [ 817.222561][T18374] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x7400}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3f4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x900, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x900}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x10}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xa00, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.222653][T18374] RIP: 0033:0x7fbb2245b109 [ 817.222666][T18374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.222683][T18374] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x7a00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xa00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3f6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x11}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xb00, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x2}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x12}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.222701][T18374] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 817.222714][T18374] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.222727][T18374] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xc00, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xb00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x402}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x3}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xc00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x25}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000800) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) [ 817.222739][T18374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.222752][T18374] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xd00, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x406}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x2a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xd00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000800) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) memfd_secret(0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000800) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0xe00, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.222825][T18374] [ 817.266472][T18385] FAULT_INJECTION: forcing a failure. [ 817.266472][T18385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.266499][T18385] CPU: 0 PID: 18385 Comm: syz-executor.3 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0xe00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x5}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x1300, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x604}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x43}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x4000800) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x6}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x1100}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.266523][T18385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.266534][T18385] Call Trace: [ 817.266540][T18385] 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.266546][T18385] dump_stack_lvl+0xd6/0x122 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x1200}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x48}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x7}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3, 0x20, 0x0, 0x5f}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="ee2d7d46752c304a1d3556720f808c6b7af2424b551b050378a556c15579039cf98105f37cca193f55853cd700ba7802e23ab0d14d486d63548830d96fff4630ad71771630bed30b4a3098116e0ac688f98f987e2ba3eba06fff1de685f5ffccf5c9bea64c6c33fb339624bcd20ae032f2bef027239b5e00c3fdfbe628b5dcf212aa202504a5e9b7fcec2abb01cb6cda142ebb4a4e2defbe9f0d4b39", 0x9c, r2}, 0x68) getpeername$llc(r1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) getsockname$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x10000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x8}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x1e00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.266627][T18385] dump_stack+0x11/0x12 [ 817.266645][T18385] should_fail+0x242/0x250 [ 817.266665][T18385] should_fail_usercopy+0x16/0x20 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x4c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3, 0x20, 0x0, 0x5f}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 32) getpeername$llc(r2, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="ee2d7d46752c304a1d3556720f808c6b7af2424b551b050378a556c15579039cf98105f37cca193f55853cd700ba7802e23ab0d14d486d63548830d96fff4630ad71771630bed30b4a3098116e0ac688f98f987e2ba3eba06fff1de685f5ffccf5c9bea64c6c33fb339624bcd20ae032f2bef027239b5e00c3fdfbe628b5dcf212aa202504a5e9b7fcec2abb01cb6cda142ebb4a4e2defbe9f0d4b39", 0x9c, r2}, 0x68) (async) getpeername$llc(r1, 0x0, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) getsockname$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x10000000) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (rerun: 32) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x2000}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x9}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x68}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.266683][T18385] _copy_to_user+0x1a/0x90 [ 817.266700][T18385] bpf_verifier_vlog+0x137/0x230 [ 817.266744][T18385] __btf_verifier_log+0x80/0xa0 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x2500}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x3, 0x20, 0x0, 0x5f}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="ee2d7d46752c304a1d3556720f808c6b7af2424b551b050378a556c15579039cf98105f37cca193f55853cd700ba7802e23ab0d14d486d63548830d96fff4630ad71771630bed30b4a3098116e0ac688f98f987e2ba3eba06fff1de685f5ffccf5c9bea64c6c33fb339624bcd20ae032f2bef027239b5e00c3fdfbe628b5dcf212aa202504a5e9b7fcec2abb01cb6cda142ebb4a4e2defbe9f0d4b39", 0x9c, r2}, 0x68) (async, rerun: 64) getpeername$llc(r1, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 64) getpeername$llc(r3, 0x0, 0x0) (async) getsockname$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x10000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0xa}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0xb}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x6c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x4300}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.266765][T18385] ? bpf_verifier_vlog+0x174/0x230 [ 817.266782][T18385] ? check_heap_object+0x1ab/0x3e0 [ 817.266843][T18385] btf_parse_hdr+0x328/0x460 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x74}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0xc}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r1, r2, r3], 0x4) syz_io_uring_setup(0xcd5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5bc8, &(0x7f0000000100)={0x0, 0x8e9c, 0x20, 0x2, 0x3c5, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xb79) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.266863][T18385] btf_new_fd+0x2af/0x600 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x4800}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0xd}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r1, r2, r3], 0x4) syz_io_uring_setup(0xcd5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5bc8, &(0x7f0000000100)={0x0, 0x8e9c, 0x20, 0x2, 0x3c5, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xb79) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r2, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r1, r2, r3], 0x4) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5bc8, &(0x7f0000000100)={0x0, 0x8e9c, 0x20, 0x2, 0x3c5, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xb79) (async) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3d02}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x8}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x7a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x4c00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x300}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x9}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0xe}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.266882][T18385] bpf_btf_load+0x69/0x80 [ 817.266905][T18385] __sys_bpf+0x493/0x630 [ 817.266929][T18385] __x64_sys_bpf+0x3f/0x50 [ 817.266985][T18385] do_syscall_64+0x2b/0x70 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x6800}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x500}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r1, r2, r3], 0x4) (async) syz_io_uring_setup(0xcd5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5bc8, &(0x7f0000000100)={0x0, 0x8e9c, 0x20, 0x2, 0x3c5, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xb79) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x10}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xa}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x6c00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.267006][T18385] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.267027][T18385] RIP: 0033:0x7f73e2671109 [ 817.267041][T18385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x600}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x11}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x700}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x7400}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x7a00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xc}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x900}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.267105][T18385] RSP: 002b:00007f73e1de7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.267125][T18385] RAX: ffffffffffffffda RBX: 00007f73e2783f60 RCX: 00007f73e2671109 [ 817.267137][T18385] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x1fc8, &(0x7f0000000040)={0x0, 0x40, 0x2, 0x0, 0x5b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) socketpair(0x1, 0x3, 0x100, &(0x7f00000005c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$llc(r2, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r2, 0x10000000) syz_io_uring_setup(0x63f1, &(0x7f0000000100)={0x0, 0x9961, 0x4, 0x2, 0x39, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x38b4, &(0x7f0000000380)={0x0, 0x2788, 0x0, 0x2, 0x1be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r6 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xa00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x12}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:13 executing program 1: r0 = syz_io_uring_setup(0x1fc8, &(0x7f0000000040)={0x0, 0x40, 0x2, 0x0, 0x5b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) socketpair(0x1, 0x3, 0x100, &(0x7f00000005c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$llc(r2, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r2, 0x10000000) syz_io_uring_setup(0x63f1, &(0x7f0000000100)={0x0, 0x9961, 0x4, 0x2, 0x39, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x38b4, &(0x7f0000000380)={0x0, 0x2788, 0x0, 0x2, 0x1be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r6 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) syz_io_uring_setup(0x1fc8, &(0x7f0000000040)={0x0, 0x40, 0x2, 0x0, 0x5b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) socketpair(0x1, 0x3, 0x100, &(0x7f00000005c0)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r2, 0x0, 0x0) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$llc(r2, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r2, 0x10000000) (async) syz_io_uring_setup(0x63f1, &(0x7f0000000100)={0x0, 0x9961, 0x4, 0x2, 0x39, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x38b4, &(0x7f0000000380)={0x0, 0x2788, 0x0, 0x2, 0x1be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) (async) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xb00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.267149][T18385] RBP: 00007f73e1de71d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.267182][T18385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.267180][T18386] FAULT_INJECTION: forcing a failure. [ 817.267180][T18386] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:13 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9503}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xc00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x2}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x25}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xd00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.267196][T18385] R13: 00007ffc5e84becf R14: 00007f73e1de7300 R15: 0000000000022000 [ 817.267221][T18385] 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x1fc8, &(0x7f0000000040)={0x0, 0x40, 0x2, 0x0, 0x5b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) socketpair(0x1, 0x3, 0x100, &(0x7f00000005c0)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$llc(r2, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r2, 0x10000000) syz_io_uring_setup(0x63f1, &(0x7f0000000100)={0x0, 0x9961, 0x4, 0x2, 0x39, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r5 = syz_io_uring_setup(0x38b4, &(0x7f0000000380)={0x0, 0x2788, 0x0, 0x2, 0x1be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r6 = syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) syz_io_uring_setup(0x1fc8, &(0x7f0000000040)={0x0, 0x40, 0x2, 0x0, 0x5b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) socketpair(0x1, 0x3, 0x100, &(0x7f00000005c0)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000600)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r2, 0x0, 0x0) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$llc(r2, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x10, r2, 0x10000000) (async) syz_io_uring_setup(0x63f1, &(0x7f0000000100)={0x0, 0x9961, 0x4, 0x2, 0x39, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x38b4, &(0x7f0000000380)={0x0, 0x2788, 0x0, 0x2, 0x1be}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_io_uring_setup(0x3b9a, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) (async) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x3}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa500}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x43}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0xe00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x1100}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.267283][T18386] ================================================================== [ 817.267305][T18386] BUG: KCSAN: data-race in data_push_tail / number 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x4}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x11}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x48}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x696}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xac0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x1200}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x5}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x12}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.267325][T18386] [ 817.267329][T18386] write to 0xffffffff86e6f101 of 1 bytes by task 18385 on cpu 0: [ 817.267344][T18386] number+0x66d/0xbe0 [ 817.267359][T18386] vsnprintf+0xa5e/0xe80 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x4c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x2000}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x6}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x696}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xac0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) [ 817.267374][T18386] vscnprintf+0x3e/0x80 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe202}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x16}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x68}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.267391][T18386] vprintk_store+0x5f2/0xb50 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x2500}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x7}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x25}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x2a00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xed03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x6c}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x8}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267414][T18386] vprintk_emit+0xcc/0x4e0 [ 817.267437][T18386] vprintk_default+0x22/0x30 [ 817.267459][T18386] vprintk+0x7f/0x90 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x696}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xac0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x4300}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x48}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x9}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267473][T18386] _printk+0x76/0x96 [ 817.267489][T18386] __show_regs+0xd6/0x340 [ 817.267509][T18386] show_trace_log_lvl+0x562/0x620 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x4cbe, &(0x7f0000000040)={0x0, 0x27d6, 0x0, 0x0, 0x1eb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd(0x22a) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf403}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x74}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4c}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x4800}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0xa}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267528][T18386] dump_stack_lvl+0xd6/0x122 [ 817.267547][T18386] dump_stack+0x11/0x12 [ 817.267566][T18386] should_fail+0x242/0x250 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x7a}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf603}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x4c00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x68}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x4cbe, &(0x7f0000000040)={0x0, 0x27d6, 0x0, 0x0, 0x1eb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = eventfd(0x22a) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) syz_io_uring_setup(0x4cbe, &(0x7f0000000040)={0x0, 0x27d6, 0x0, 0x0, 0x1eb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) eventfd(0x22a) (async) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) (async) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0xb}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267582][T18386] should_fail_usercopy+0x16/0x20 [ 817.267600][T18386] _copy_to_user+0x1a/0x90 [ 817.267617][T18386] bpf_verifier_vlog+0x137/0x230 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6c}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf901}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x6800}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0xc}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x6c00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x74}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x4cbe, &(0x7f0000000040)={0x0, 0x27d6, 0x0, 0x0, 0x1eb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = eventfd(0x22a) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x9}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.267636][T18386] __btf_verifier_log+0x80/0xa0 [ 817.267655][T18386] btf_parse_hdr+0x328/0x460 [ 817.267680][T18386] btf_new_fd+0x2af/0x600 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10004}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0xd}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7a}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x7400}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0xe}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267698][T18386] bpf_btf_load+0x69/0x80 [ 817.267719][T18386] __sys_bpf+0x493/0x630 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xa}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) io_uring_setup(0x6c64, &(0x7f00000001c0)={0x0, 0x78b5, 0x2, 0x2, 0x285, 0x0, r0}) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x7a00}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x300}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xb}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x10}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267742][T18386] __x64_sys_bpf+0x3f/0x50 [ 817.267764][T18386] do_syscall_64+0x2b/0x70 [ 817.267784][T18386] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.267805][T18386] 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 32) getpeername$llc(r1, 0x0, 0x0) (async) accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) (async) io_uring_setup(0x6c64, &(0x7f00000001c0)={0x0, 0x78b5, 0x2, 0x2, 0x285, 0x0, r0}) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x500}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.267810][T18386] read to 0xffffffff86e6f100 of 8 bytes by task 18386 on cpu 1: 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x600}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x100000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x11}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.267826][T18386] data_push_tail+0x10f/0x440 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x12}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async) accept4$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) (async) io_uring_setup(0x6c64, &(0x7f00000001c0)={0x0, 0x78b5, 0x2, 0x2, 0x285, 0x0, r0}) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x2}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x2}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x700}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x1e}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x101200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.267842][T18386] data_alloc+0xbc/0x2b0 [ 817.267858][T18386] prb_reserve+0x897/0xbd0 [ 817.267875][T18386] vprintk_store+0x51c/0xb50 [ 817.267898][T18386] vprintk_emit+0xcc/0x4e0 [ 817.267919][T18386] vprintk_default+0x22/0x30 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x3}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x3}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x25}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x900}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x121000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.267940][T18386] vprintk+0x7f/0x90 [ 817.267956][T18386] _printk+0x76/0x96 [ 817.267973][T18386] should_fail+0x229/0x250 [ 817.267990][T18386] should_fail_usercopy+0x16/0x20 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x4}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x5}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x43}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x5}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xa00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) [ 817.268008][T18386] _copy_to_user+0x1a/0x90 [ 817.268025][T18386] bpf_verifier_vlog+0x137/0x230 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x6}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x48}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x6}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x4c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x7}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.268043][T18386] __btf_verifier_log+0x80/0xa0 [ 817.268061][T18386] __btf_verifier_log_type+0x2f6/0x3f0 [ 817.268081][T18386] btf_enum_check_meta+0x1ea/0x7d0 [ 817.268103][T18386] btf_check_all_metas+0x232/0x540 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x68}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x7}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xc00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x8}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x628a, &(0x7f0000000100), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x6c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x80ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x8}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.268121][T18386] btf_parse_type_sec+0xba/0xfa0 [ 817.268142][T18386] btf_new_fd+0x3a3/0x600 [ 817.268160][T18386] bpf_btf_load+0x69/0x80 [ 817.268182][T18386] __sys_bpf+0x493/0x630 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x74}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000100), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x9}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.268204][T18386] __x64_sys_bpf+0x3f/0x50 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x9}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xa}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x7a}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0xa}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = eventfd(0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r8, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r2, r8, r4, r5, r6, r9, r3, r7], 0xa) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1100}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.268226][T18386] do_syscall_64+0x2b/0x70 [ 817.268245][T18386] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.268265][T18386] 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x2}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xb}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0xb}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x3}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1200}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:14 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) (async, rerun: 64) r3 = eventfd(0x6) (rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) (async, rerun: 32) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r8, 0x0, 0x0) (async, rerun: 64) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 64) getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r2, r8, r4, r5, r6, r9, r3, r7], 0xa) 00:46:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xc}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:14 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc0ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0xc}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.268268][T18386] value changed: 0x00000000ffffe741 -> 0x3030303030303020 [ 817.268278][T18386] [ 817.268280][T18386] Reported by Kernel Concurrency Sanitizer on: [ 817.268286][T18386] CPU: 1 PID: 18386 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x8}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1600}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xd}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0xd}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x9}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2500}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0xe}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.268309][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.268319][T18386] ================================================================== 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) r3 = eventfd(0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r7, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r8, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r2, r8, r4, r5, r6, r9, r3, r7], 0xa) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r1, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r2, 0x0, 0x0) (async) eventfd(0x6) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r4, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r7, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r8, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (async) getpeername$llc(r9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r2, r8, r4, r5, r6, r9, r3, r7], 0xa) (async) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf0ff1f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0xa}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x10}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0xb}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4800}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.268361][T18386] CPU: 1 PID: 18386 Comm: syz-executor.4 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x10}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x11}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x1f1c, &(0x7f0000000100)={0x0, 0x5162, 0x8, 0x2, 0x365, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, r1, 0x10000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') io_uring_enter(r2, 0x3049, 0xe482, 0x1, &(0x7f00000001c0)={[0x100000000]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x810, r0, 0x8000000) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4c00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.268382][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.268392][T18386] Call Trace: [ 817.268397][T18386] 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x12}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x11}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x12}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x1f1c, &(0x7f0000000100)={0x0, 0x5162, 0x8, 0x2, 0x365, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, r1, 0x10000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') io_uring_enter(r2, 0x3049, 0xe482, 0x1, &(0x7f00000001c0)={[0x100000000]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x810, r0, 0x8000000) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_setup(0x1f1c, &(0x7f0000000100)={0x0, 0x5162, 0x8, 0x2, 0x365, 0x0, r0}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, r1, 0x10000000) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') (async) io_uring_enter(r2, 0x3049, 0xe482, 0x1, &(0x7f00000001c0)={[0x100000000]}, 0x8) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, r0, 0x10000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x810, r0, 0x8000000) (async) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6800}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x12}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x25}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.268402][T18386] dump_stack_lvl+0xd6/0x122 [ 817.268422][T18386] dump_stack+0x11/0x12 [ 817.268517][T18386] should_fail+0x242/0x250 [ 817.268536][T18386] should_fail_usercopy+0x16/0x20 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6c00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x2}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) r1 = io_uring_setup(0x1f1c, &(0x7f0000000100)={0x0, 0x5162, 0x8, 0x2, 0x365, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, r1, 0x10000000) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') io_uring_enter(r2, 0x3049, 0xe482, 0x1, &(0x7f00000001c0)={[0x100000000]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10010, r0, 0x10000000) (async, rerun: 64) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x810, r0, 0x8000000) (rerun: 64) [ 817.268556][T18386] _copy_to_user+0x1a/0x90 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x2a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x900}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7400}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7a00}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xa00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x3}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.268573][T18386] bpf_verifier_vlog+0x137/0x230 [ 817.268649][T18386] __btf_verifier_log+0x80/0xa0 [ 817.268715][T18386] ? put_dec+0xcd/0xe0 [ 817.268732][T18386] __btf_verifier_log_type+0x2f6/0x3f0 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x43}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x4}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xb00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.268754][T18386] ? number+0xaa9/0xbe0 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x48}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xc00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.268772][T18386] ? sort_r+0xb4c/0xb60 [ 817.268792][T18386] ? btf_enum_check_meta+0x11b/0x7d0 [ 817.268815][T18386] btf_enum_check_meta+0x1ea/0x7d0 [ 817.268836][T18386] ? check_heap_object+0x1ab/0x3e0 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x6}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x4c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xd00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.268862][T18386] btf_check_all_metas+0x232/0x540 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0xe00}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x7}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x68}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x6c}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf15000000007dc6b5025d9abcec30bf86909faf24e39a4b0120c8617461d8c47fae6fff489a8e16fa9a64047357ea50f6dd83723bf1216a4ad3f32c5cf959babbd8a4db1863207f110860c318b2aef87b267cab62c5ee5d9b3648f2cfbf8feaa5577aeef88a56ea77e553c65b21c8acf253f7d4befc5f8a2dae86bc220595623e1e99d0207bdafdeda61cd49d3d2501862725a9ccae8d39b25f0b58ad17a757caba3e49cb2eb256342b876dc3fed4445d32428e1b07c7f12546597762e5d1f76eafeac7320822188607c78e082d8e06e543ed615fac771c7fdd81061e8a6c7f3c214de12809723ec12c565b52653fdf344cf300d3c7d80bb2f5c5f742ac816b9af67c6f9bd4186b22bcc082e13b8f4f2aa7ff512dac9938e8b8fff8c7d2ebfb26891d6bb03e"], 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x1300}]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x8}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.268884][T18386] btf_parse_type_sec+0xba/0xfa0 [ 817.268972][T18386] ? btf_check_sec_info+0x1bf/0x1e0 [ 817.268994][T18386] ? btf_parse_hdr+0x456/0x460 [ 817.269013][T18386] btf_new_fd+0x3a3/0x600 [ 817.269110][T18386] bpf_btf_load+0x69/0x80 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x74}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x9}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.269132][T18386] __sys_bpf+0x493/0x630 [ 817.269157][T18386] __x64_sys_bpf+0x3f/0x50 [ 817.269224][T18386] do_syscall_64+0x2b/0x70 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x2}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x7a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.269245][T18386] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.269266][T18386] RIP: 0033:0x7fbb2245b109 [ 817.269279][T18386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.269305][T18386] RSP: 002b:00007fbb21bd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.269323][T18386] RAX: ffffffffffffffda RBX: 00007fbb2256df60 RCX: 00007fbb2245b109 [ 817.269335][T18386] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.269348][T18386] RBP: 00007fbb21bd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.269360][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.269372][T18386] R13: 00007ffe28c7676f R14: 00007fbb21bd1300 R15: 0000000000022000 [ 817.269412][T18386] [ 817.288098][T18386] syz-executor.4 (18386) used greatest stack depth: 10928 bytes left [ 817.289693][T18389] FAULT_INJECTION: forcing a failure. [ 817.289693][T18389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.289750][T18389] CPU: 0 PID: 18389 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x2}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xa}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x3}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x4}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.289781][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.289792][T18389] Call Trace: [ 817.289798][T18389] 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xb}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x8000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x3}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.289803][T18389] dump_stack_lvl+0xd6/0x122 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x4}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x9000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xc}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x5}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x8}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.289828][T18389] dump_stack+0x11/0x12 [ 817.289847][T18389] should_fail+0x242/0x250 [ 817.289896][T18389] should_fail_usercopy+0x16/0x20 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) syz_io_uring_setup(0x628a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xa000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xd}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xb000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x6}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xe}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.289916][T18389] _copy_to_user+0x1a/0x90 [ 817.290002][T18389] bpf_verifier_vlog+0x137/0x230 [ 817.290064][T18389] __btf_verifier_log+0x80/0xa0 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x9}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x1217, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xc000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xf}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x1217, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x7}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0xa}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1ffff000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.290085][T18389] ? btf_parse_hdr+0x258/0x460 [ 817.290120][T18389] ? check_heap_object+0x1ab/0x3e0 [ 817.290148][T18389] btf_parse_hdr+0x26f/0x460 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x10}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:15 executing program 1: r0 = syz_io_uring_setup(0x1217, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x8}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0xb}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x11}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.290228][T18389] btf_new_fd+0x2af/0x600 [ 817.290249][T18389] bpf_btf_load+0x69/0x80 [ 817.290272][T18389] __sys_bpf+0x493/0x630 00:46:15 executing program 1: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:15 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x12}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x9}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x12}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) [ 817.290297][T18389] __x64_sys_bpf+0x3f/0x50 [ 817.290387][T18389] do_syscall_64+0x2b/0x70 [ 817.290409][T18389] entry_SYSCALL_64_after_hwframe+0x46/0xb0 00:46:16 executing program 1: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) (async) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x11000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20ffb000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x12000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x1e}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0xa}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0xb}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x2}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20ffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.290438][T18389] RIP: 0033:0x7f9b70f8e109 [ 817.290452][T18389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.290470][T18389] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:16 executing program 1: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) (async) r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x16000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x25}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0xc}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x3}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x25000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.290555][T18389] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x43}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x4}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x21000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0xd}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = io_uring_setup(0x6dc9, &(0x7f0000000440)={0x0, 0x4535, 0x0, 0x0, 0x82}) r1 = syz_io_uring_setup(0x63cf, &(0x7f0000000580)={0x0, 0x232e, 0x1c, 0x2, 0x138, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c030000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25010000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2508000000080006009c000000540001800800050004000000060001000200000008000b0073697000060002002c000000060004004e230000060004004e210000060002003a000000080008000200730000000800050002000000245dddc4083194b3d800"/123], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x400c040) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) getsockname$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r3, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r2, 0x8000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0xe}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.290569][T18389] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.290583][T18389] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.290595][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:16 executing program 1: r0 = io_uring_setup(0x6dc9, &(0x7f0000000440)={0x0, 0x4535, 0x0, 0x0, 0x82}) r1 = syz_io_uring_setup(0x63cf, &(0x7f0000000580)={0x0, 0x232e, 0x1c, 0x2, 0x138, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) (async) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c030000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25010000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2508000000080006009c000000540001800800050004000000060001000200000008000b0073697000060002002c000000060004004e230000060004004e210000060002003a000000080008000200730000000800050002000000245dddc4083194b3d800"/123], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x400c040) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) (async) getsockname$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r3, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r2, 0x8000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x48000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x48}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x10}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x6}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4c000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = io_uring_setup(0x6dc9, &(0x7f0000000440)={0x0, 0x4535, 0x0, 0x0, 0x82}) r1 = syz_io_uring_setup(0x63cf, &(0x7f0000000580)={0x0, 0x232e, 0x1c, 0x2, 0x138, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c030000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25010000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r3, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2508000000080006009c000000540001800800050004000000060001000200000008000b0073697000060002002c000000060004004e230000060004004e210000060002003a000000080008000200730000000800050002000000245dddc4083194b3d800"/123], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x400c040) (async) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) (async) getsockname$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r3, 0x1) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r2, 0x8000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3d020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.290609][T18389] R13: 00007ffe4773a63f R14: 00007f9b70704300 R15: 0000000000022000 [ 817.290625][T18389] 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x4c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x11}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x7}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x68000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x8}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x12}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x68}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001084) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6c000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.304564][T18394] FAULT_INJECTION: forcing a failure. [ 817.304564][T18394] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x25}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x6c}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x9}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001084) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001084) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) (async) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x74000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x43}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.304586][T18394] CPU: 0 PID: 18394 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller-00023-g34f4335c16a5-dirty #0 [ 817.304611][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xa}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xb}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x74}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x48}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x42000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7a000000}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.304622][T18394] Call Trace: [ 817.304627][T18394] [ 817.304632][T18394] dump_stack_lvl+0xd6/0x122 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x7a}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001084) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001084) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r2) (async) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xc}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x4c}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.304698][T18394] dump_stack+0x11/0x12 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x95030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xd}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x2}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x300}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x27b1, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x394c, &(0x7f0000000200)={0x0, 0xd512, 0x2, 0x3, 0x1e2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000400)=r2, 0x1) r3 = syz_io_uring_setup(0x5984, &(0x7f0000000280)={0x0, 0xe882, 0x10, 0x2, 0x1b7, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0, r0, r3, r4, r0, r5, r6, r0, r7, r8], 0xa) syz_io_uring_setup(0x4330, &(0x7f0000000100)={0x0, 0xda8d, 0x1, 0x2, 0x1f3, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x68}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xe}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x3}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa5000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.304716][T18394] should_fail+0x242/0x250 [ 817.304734][T18394] should_fail_usercopy+0x16/0x20 [ 817.304752][T18394] _copy_to_user+0x1a/0x90 [ 817.304806][T18394] bpf_verifier_vlog+0x137/0x230 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x500}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xf}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x6c}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x4}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x27b1, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) (async, rerun: 32) r1 = io_uring_setup(0x394c, &(0x7f0000000200)={0x0, 0xd512, 0x2, 0x3, 0x1e2}) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000400)=r2, 0x1) (async, rerun: 32) r3 = syz_io_uring_setup(0x5984, &(0x7f0000000280)={0x0, 0xe882, 0x10, 0x2, 0x1b7, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') (rerun: 64) getpeername$llc(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0, r0, r3, r4, r0, r5, r6, r0, r7, r8], 0xa) (async, rerun: 64) syz_io_uring_setup(0x4330, &(0x7f0000000100)={0x0, 0xda8d, 0x1, 0x2, 0x1f3, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async, rerun: 64) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) (rerun: 64) [ 817.304828][T18394] __btf_verifier_log+0x80/0xa0 [ 817.304980][T18394] ? btf_parse_hdr+0x279/0x460 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x74}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x600}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x5}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x10}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x700}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x11}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x7a}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 817.304999][T18394] ? check_heap_object+0x1ab/0x3e0 [ 817.305022][T18394] btf_parse_hdr+0x28f/0x460 [ 817.305039][T18394] btf_new_fd+0x2af/0x600 [ 817.305069][T18394] bpf_btf_load+0x69/0x80 00:46:16 executing program 1: r0 = syz_io_uring_setup(0x27b1, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x8, &(0x7f0000000140), 0x2) r1 = io_uring_setup(0x394c, &(0x7f0000000200)={0x0, 0xd512, 0x2, 0x3, 0x1e2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000400)=r2, 0x1) r3 = syz_io_uring_setup(0x5984, &(0x7f0000000280)={0x0, 0xe882, 0x10, 0x2, 0x1b7, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r4, 0x0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r5, 0x0, 0x0) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r6, 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='stack\x00') (rerun: 32) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0, r0, r3, r4, r0, r5, r6, r0, r7, r8], 0xa) syz_io_uring_setup(0x4330, &(0x7f0000000100)={0x0, 0xda8d, 0x1, 0x2, 0x1f3, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='mountinfo\x00') getpeername$llc(r9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x6}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) [ 817.305145][T18394] __sys_bpf+0x493/0x630 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xe2020000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x12}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x900}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x7}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe}, 0xb367) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x0, [], 0x2}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x0, [], 0x3}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x25}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.305181][T18394] __x64_sys_bpf+0x3f/0x50 [ 817.305204][T18394] do_syscall_64+0x2b/0x70 [ 817.305297][T18394] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 817.305319][T18394] RIP: 0033:0x7f9b70f8e109 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x0, [], 0x4}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xa00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe}, 0xb367) (async) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xed030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x8}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x2a}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) [ 817.305333][T18394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 817.305353][T18394] RSP: 002b:00007f9b70704168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x9}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xb00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe}, 0xb367) r1 = syz_io_uring_setup(0x628a, &(0x7f0000000040), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x8, &(0x7f0000000140), 0x2) 00:46:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0xc00}, @const]}}, &(0x7f00000002c0)=""/129, 0x36, 0x81, 0x1}, 0x20) 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0xa}]}]}}, &(0x7f00000002c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) 00:46:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x43}, @const, @struct]}}, &(0x7f00000002c0)=""/129, 0x42, 0x81, 0x1}, 0x20) 00:46:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}, {0x0, [], 0x5}}, &(0x7f00000002c0)=""/129, 0x26, 0x81, 0x1}, 0x20) 00:46:16 executing program 2: syz_io_uring_setup(0x6287, &(0x7f0000000040)={0x0, 0xde55}, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x4717, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xf4030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 817.305409][T18394] RAX: ffffffffffffffda RBX: 00007f9b710a0f60 RCX: 00007f9b70f8e109 [ 817.305422][T18394] RDX: 0000000000000020 RSI: 0000000020000100 RDI: 0000000000000012 [ 817.305434][T18394] RBP: 00007f9b707041d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.305446][T18394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:46:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x0, 0xb}]}]}}, &(0x7f00000002c0)=