last executing test programs: 22m57.622250107s ago: executing program 32 (id=1600): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) io_setup(0x7, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15560100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$ptp(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket(0xa, 0x6, 0x54) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001e80)={0x844, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5b33, 0x3e}}}}, [@NL80211_ATTR_IE={0xe9, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb8, 0x8}}, @tim={0x5, 0x3a, {0x40, 0x6, 0x8, "3cde07f95922850c717059289ccfdb8bf3d59e3acd32fbd2fed7c7fb4f045c496726a8ca7ff5dc0191a44237c3f251cbef6c193e4b600b"}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x87, {0xd, 0x6, 0xc3, "df0aaf02a07481a5617f1f8d605b91c6f1a2ff3bf34bf1908ec779ca2dd19f7d6f6229b9dd82025b7777a2a0b6292e28f0e97dda079ae1383c3d8efbb59565a0dfabf4125af32e1022f3b5ef83d018dd0fd61681f2621416e38249273f3d2fab3e105d6196b2a14283addf42bf7cc6c33f05aa761aeba24a84a6fd809da0e4bf8ecb45f8"}}, @dsss={0x3, 0x1, 0xae}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x10}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14, 0x80, [@mesh_chsw={0x76, 0x6, {0x7, 0x81, 0x16, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x18a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0xb, 0x8}, @value=@ver_80211n={0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x3, @default, 0x40, @void, @void, @void, @val={0x4, 0x6, {0x5, 0xff, 0x7, 0xefc6}}, @void, @val={0x5, 0x6f, {0x5, 0x7d, 0x4, "188a041421e08082b58241011861c9ec16299128dc43206ca1ec9f675532ee092a22f335b9a25cd50b18cf94faf31e9f77263ee92a33cdfb79b4d510bc57e2faef8c5fb2b4a472522e0aa781b481673f0c0abc54f3eb41c9748e7598ddcbae20ad797396150e2fe4274ba72d"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xd, 0xab, 0x1}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd2, "b5b36855cc558af12bd9598ebe36584ef0e6fdc86bc5e7aee6be981a877f343f2dcf28537310b2e1499cf07947f73f859c734d50e6ab435cb710d00fd2d3d85b241428cbd3092566930246421cc4583e0db7b649b78ab5a2c29f0b07e36931c950742ceaa8c3f46cb7ecbaad0667c6e6bdf7c8bda115938824465fe1f0aa9fa4999738c1e93666a996859cf25993c218ce78f2ac98284b5352801e819bd7728fbb2a2b4612085839cf729eff4247a6ecf490307a3d7f0af3167788bfc07ba0a783b808c41f68f764843ddf852d1eab9c1381"}]}}, @NL80211_ATTR_IE={0x8c, 0x2a, [@random={0x6, 0x56, "54680ea102c3d0d2b332f9e8806699b3bded50f651106fc7b15863c5841116ac264c76e740ceea522249094a050d0bf5c647a2b3751c2fe02822145a1fb950455fc3e17715c82c0a85b0cf87baf7ce206f079202539e"}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0xd0, 0xf, [@perr={0x84, 0x88, {0xf6, 0x8, [{{}, @broadcast, 0x1, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x24bd76e5, @value=@broadcast, 0x20}, {{0x0, 0x1}, @device_b, 0xad, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0xfffffffb, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x216, @value=@broadcast, 0x41}, {{}, @device_a, 0xffffffff, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x3ff, @value, 0x41}, {{}, @device_b, 0x1, @void, 0x35}]}}, @measure_req={0x26, 0x40, {0x0, 0xf3, 0x3, "ba8c9efeb7c584c7a84c935f78103ef7a72bbb55309e33e8fbf3c0ce7552d202aa80d4273ae3cf4789a7c57f7813c40f8a0a75be072880233b5959f617"}}]}, @NL80211_ATTR_BEACON_HEAD={0xcb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="99be6ca52344", {0xc, 0x3}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x4, @random=0x1, 0x42aa, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0x4, 0x9, 0x5}}, @void, @val={0x5, 0x39, {0x1, 0x3c, 0x8c, "95c691f653b2afb144b8a82a563d8a87086e99e8fe1536e0cd12fb6ab412bf6c2b0dbaf3e71ced905a0f2656295aa4d3078dea1dd9c3"}}, @val={0x25, 0x3, {0x0, 0xb7}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x3, 0x1, 0x0, {0x8001, 0x3, 0x0, 0x8, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x2}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb}}, @void, [{0xdd, 0x25, "09aaeecd6d00234f2b767ee79f18692ae894491c6f853b61272b719606b8352b37cb4ff4de"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x15d, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xea, @device_b, 0x3, @value=@broadcast, 0x43b9c31f, 0x7, @broadcast, 0x1}}, @chsw_timing={0x68, 0x4, {0x8, 0x4}}, @prep={0x83, 0x1f, {{}, 0x1, 0xf, @broadcast, 0x5, @void, 0x8, 0x51c2, @broadcast, 0x7f}}, @perr={0x84, 0x109, {0x2, 0x11, [{{}, @broadcast, 0x1, @void, 0x1c}, {{}, @broadcast, 0x8, @void, 0x3b}, {{}, @device_b, 0x2b, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x34}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x22}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x3b}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x34}, {{}, @device_b, 0x4f4a895c, @void, 0x6}, {{}, @device_a, 0xa, @void, 0x2c}, {{}, @broadcast, 0x0, @void, 0x2}, {{}, @broadcast, 0x20a0, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x29}, {{}, @broadcast, 0xc, @void, 0x2}, {{}, @device_a, 0x778, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x2f}, {{}, @device_b, 0x5e, @void, 0x10}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x8e, 0x80, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x1, 0x71, 0xc8}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x40, 0x60}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0xc, 0x5, @device_b, 0xfffffffa, 0x9, 0xa}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x2, 0x51, "92dbfd2a0804b5370fe1fe9335748b8f7d5135509b993899414eadb3614d78fbfa56fac1c12b34f2f9b453786f76264a083e391cbd75ccff78f1694687d96f9744e4d3e406d0e691c6b82300fa81265cca"}, @random_vendor={0xdd, 0x9, "4e83644ecb711ab785"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x50, 0x80, [@ht={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x3, 0xf0}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x10, 0x0, @broadcast, 0x9, 0xedd4, 0x4}}, @mic={0x8c, 0x10, {0x7ab, "166e5460628b", @short="531700cb48c406c5"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2, 0xf5}]}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "7b9b0e70aa126563bd8ea22516b3b0a41cb5bae6aa43cf7fffd7e3a96ff33fe2ae5fdb257c7bc4a1f8bb0c16801de7fadd5e901d207dfaa5b00faf5fe29076a4f6d332f223b81aa5fc0f88d2bed2c42cafa5d11a497536feeb5ddfd357275028265b6458fec81f03517a4ee0f9efd23761529d7ca53136867b19595f0f7f705f11484b4c6fc590d2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9b, 0x3, "04283e2e0e84811464574bfd9ed1d2e33c2c6237aa3de8d006db3454872fb22cdfa747306fd3aeee0785ded72a8acec3e75bb743acb8e704877a52ac43a496f77e12a4fe14f64bb5c37bdc0188b0782f23bb58c7cf8141576c9ca088a7c77bfbffc0a98045564fb9835850f36e2eb036aebb1f4b25711c8e7a426ce53496d5c6e40df1ebea82e0cae66c00b1e99c59085b46d7158bdcc5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x844}, 0x1, 0x0, 0x0, 0x4000800}, 0x44041) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r9, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000000)=@file={0x1}, 0x6e) 22m36.564190121s ago: executing program 33 (id=1872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 22m33.335370809s ago: executing program 34 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 22m32.56202165s ago: executing program 35 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf255400000069c95a7f"], 0x14}, 0x1, 0x0, 0x0, 0x20048010}, 0x8000) 22m25.964292529s ago: executing program 36 (id=1964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000f614000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000840)='percpu_destroy_chunk\x00', r1, 0x0, 0x7}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r10 = dup2(r7, r7) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000d00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 22m25.243993629s ago: executing program 37 (id=1969): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB="90c734179327c0812ef21efb594027ed80f54539709eb89c12b389fecb219c001d40f5e41235a81c327bac77de857eb6a38c36c6b3b921b5658f60a93ba5f9d42d32d95d772f6a34f06a5415b7bfb8fb823b55db4e66756964f7c20cfea212e73b17e05df2678118e2c9ad50e5aa81fa4656640a484a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='mm_page_alloc\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc000000000000", @ANYRES32=0x0], 0x48) socket$inet(0x2, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8991, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfff", @ANYRES32=r1], 0x64}}, 0x0) 22m0.596434576s ago: executing program 41 (id=2233): pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 21m58.032650204s ago: executing program 42 (id=2257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFT_MSG_NEWTABLE={0x124, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "2a91"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "80d3a8fc41db3b95b15b00fff13936c0886bcbe50685461e37db1149c479d44eaaa98a64a663af23fe013d51be58f08c5c39a73e4d8fdb8779355bb2dcfc0d27cbf77a660d9589930598a64416291b9f455d091e3c4c2766d1547205df01894dc3577e51a5f18214d9ad3ea397d4c957348461aa3926c01bb87ce08d83c5af6d5cb39bae15e665a963bf0d942d4e6ba639da0b7ac2b3a2a3a51ac78082c54b43d064c05169dfa6c9e0d4f7713d67dbbe4a47a85982da9ddb8a049daf1729ee3b5c04fbec0698d6106f37b521a94b294e40330d26a6c63cb1f6346b90cd1e60a3040efae007c212b81ec3070a704aa442e4b0cf4639a83a3c4d"}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1c0}, 0x1, 0x0, 0x0, 0xc801}, 0x400000a) 21m56.639837705s ago: executing program 43 (id=2265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="999a", 0x2}, {&(0x7f0000000280)="0f0f0000", 0x4}], 0x3) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16=r7, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14143c00000000000000000000000000000000000000000000000000000000080000000000000009000000000000000600000000000000000000000000000002000200000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000a000400020000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000e000000080000000316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYRES64], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 21m50.040706033s ago: executing program 44 (id=2369): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xc, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) fadvise64(r1, 0x2, 0x9f5d, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) 21m48.054911183s ago: executing program 45 (id=2396): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x20) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @empty}, &(0x7f0000000180)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 21m46.791362082s ago: executing program 46 (id=2415): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xc3, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0xfe}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc6a8eb07aaa917e31a6f8e10a53bbf9c73e5d07"}}}}}, 0xd1) 21m45.963005294s ago: executing program 47 (id=2420): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r5, r4, &(0x7f0000002540)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000001500)={0x200000, 0x3a, 0xc}, &(0x7f0000001540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r3, 0x2ded, 0x8901, 0x0, 0x0, 0x4c) 21m40.655601533s ago: executing program 48 (id=2470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x220c402, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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") r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500006bfd30000000ffff1be00003000306907800fa000945f4fff600650005010400030a012102ac1414aa000000000000"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85, 0x801}, 0x3c) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21m40.063942841s ago: executing program 49 (id=2474): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdcd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x904, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000008000000000000000160000001f00087190390f4c6598e1bdde392e139ec784f036fb3dfbcc4348b0b951b848f3", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400882c}, 0x24000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21m39.716097367s ago: executing program 50 (id=2478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknod$loop(0x0, 0x0, 0x1) 21m39.129992155s ago: executing program 51 (id=2481): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x149442, 0x40) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="ba3915354e1ce03046b208baf63ee34caafae64e4a9accbd88ed25de0c79146cbc5b0f185efcd581e169524b25b3b39ec1dfe6a8098dd300077160f5be4158c755bf11216d3e594a2137fbdace9b99c5df7e0666984c2787ec4d1f63765f144674f373e641ee98e5c5e9c11509952590943ec8dbc5b07af29e698c9ed906c6b832354e1a90c614ba5a86891d4b2f41245f64421afa66c66141083b9a28256b588958d3204107e68090ec6181c40655024b55f1aae331f9ed8baba981917f42d7bf8d7d258f11f78d588398ac2579ebb7507ee4305c7802ce32171c99924540087b2bd1882df881a5986d4e0dfb8e5957586563496303eda066b198", 0xfb}], 0x1, 0xe7b, 0x0, 0x1) socket(0x10, 0x3, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) 21m34.851572269s ago: executing program 52 (id=2495): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xf5d6, 0x200, 0x2, 0x80, r3}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x400, 0xa, [0x401, 0x7, 0x0, 0x2, 0x3, 0x10, 0x7f, 0x9, 0x400, 0x1]}, &(0x7f0000000080)=0x1c) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r7 = getpid() syz_pidfd_open(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x292240) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r8], 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0xd080, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 21m32.883816008s ago: executing program 53 (id=2511): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xf5d6, 0x200, 0x2, 0x80, r3}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x400, 0xa, [0x401, 0x7, 0x0, 0x2, 0x3, 0x10, 0x7f, 0x9, 0x400, 0x1]}, &(0x7f0000000080)=0x1c) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r7 = getpid() syz_pidfd_open(r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x292240) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0xd080, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) 21m31.479512239s ago: executing program 54 (id=2529): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4558, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 21m28.437103435s ago: executing program 55 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9cd6eb064797685081110f3c6111ace01a985171397ce042df076fe80d393f5d49686bd9fd8bc64480cf159db711f1bd034b1d1eab0b57a12090c6ed0edcf07ece98fd979973428e886bc9936a15483a53c5378ae0cc21d62cd802a2a1c2b29094a5ba08a897d57e46d03bf21c710f048d2ce72e", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x6, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000001c0)=0xc95, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000082b71ff0a0018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r6, 0x3, 0x10, 0x3, 0xa335}) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) getsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000500)=""/230, &(0x7f0000000040)=0xe6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21m25.179739403s ago: executing program 56 (id=2579): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000020183e7de22cd4285ba1741da9a0e0404000280040001800c0019"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 21m23.979586201s ago: executing program 57 (id=2589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16=r8, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dlm_lock_start\x00', r10}, 0x18) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 21m11.459876557s ago: executing program 58 (id=2776): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x9, 0x4, 0x10000000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 21m9.643720714s ago: executing program 59 (id=2792): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmmsg$sock(r0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x7200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x6, 0xa, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40820123}, 0xc, &(0x7f0000000340)={&(0x7f0000000b40)={0x300, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa59, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b8848f365dfb8342"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6be82585d36431a962aa4e3579e7be13d0c4b83fa939dca8cdfbb010c4f9bf98"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c6b83d636b61edfab1d520a9d30e40bc1ab4c27d6b822fa5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d270fb01a3c58f31475d4ad7854508cb8b1d5f745727d566b7df43f17274032b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bc96a563ffc488ed"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="78cbb63771577dd77b470b49bf3a3b829534332318fa6e49"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a4de39630105ab253a7cb9341703de38"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2276ab7a7d72e33a"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c74a527b2df305f67b9b70fff1bd3b2a"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a6f1197ab77e42eb8fd80db3c1b88a0e88c6b71e3591c8ad"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="48485c435e2c6f22227de329a36d1ce5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bbf9bd3738c83828f329e3b94bad39510a2af9c2fdf05dd762e042076c3d5c68"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fe735f531e0d59abddbf6cbc82ce65b0f1d866f28a3abaaa6bb38cc057b6ec73"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4330bc27504a3ee4df35acdc9dfa60e1"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="332bdc4130bf8fb880aa8512447c65d97bde2d22f4a752233e086b2a050561e7"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9e7785ce7e01755fed14a3ce6b91cd8e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8e4564a76406696e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="575e31c3b4932710e640e9d2ad81501cbc39cb4c0eeed68f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5d70531e2a0a70710d0ac6c7c58ed2f1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ff6736defbd913783b836fd5642c9ba8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9ce1b03ecac97b7b37d7386adcd2f53babb2c9b0d887f3504778c4e5a3daa3fe"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c4899a6a163f8956"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7f725873c581517"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="baf5e81ad24dbdfcc52e872adc851bff64f8f05c615a2832dd8a26f5e79a5b6c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e8feaade503570f608d6471aabf18ad1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "68368845780d753b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="057ffbec1040bf761251498745ac7c70"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4e84a838669bd10e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3433c6dbdeb741d77b1a975a833f2d0"}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f0000000940)={0x20000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000008c0)}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) 21m8.327584814s ago: executing program 60 (id=2801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651", 0x9}, {&(0x7f00000001c0)="999a", 0x2}, {0x0}], 0x3) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dlm_lock_start\x00', r6}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 21m0.618435749s ago: executing program 61 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) read(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 20m45.021665201s ago: executing program 62 (id=3097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16=r8, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYRES64=r0], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dlm_lock_start\x00', r10}, 0x18) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 20m44.060011575s ago: executing program 63 (id=3109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r2) 20m43.514391723s ago: executing program 64 (id=3117): kexec_load(0x3, 0x0, 0x0, 0x140000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000480)={0x335, @tick, 0x0, {0x6}, 0x40}) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x8, 0x1, 0x80}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$security_selinux(r0, &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 20m35.418054404s ago: executing program 65 (id=3205): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000b40)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000230000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cff9d0891ec30f91f369d42abdcb3b1ce91353b9b0ce768fd74079455a222b4d6f6389c47090d069de514bee888f2c4eeca419abb28584f31715556adaee89e52daa07"], 0x58) sendto$inet(0xffffffffffffffff, &(0x7f00000010c0)="04", 0x1, 0x14000000, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) (fail_nth: 1) 20m33.611581281s ago: executing program 66 (id=3223): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x1, 0x2000000, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x1e, 0xb, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r6, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 20m30.98574227s ago: executing program 67 (id=3246): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x1, 0x2000000, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x1e, 0xb, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r3, 0x0, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 20m25.012918229s ago: executing program 68 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb000001c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="999a", 0x2}, {&(0x7f0000000280)="0f0f0000", 0x4}], 0x3) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) sendmsg$SEG6_CMD_SETHMAC(r5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dlm_lock_start\x00', r8}, 0x18) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 20m24.499840637s ago: executing program 69 (id=3303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) lsetxattr$security_ima(&(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000600), &(0x7f0000000880)=@sha1={0x1, "c791bdcf454d7b5ae894617d1599522b70326fdb"}, 0x15, 0x2) 20m24.156855972s ago: executing program 70 (id=3306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="999a", 0x2}, {&(0x7f0000000280)="0f0f0000", 0x4}], 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x2, 0x3b1}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="00000000b867a75be37eae2577e88ccf724404ce3d79d0fc5a76e6b85d2448d6358fa5fca41a085ca2cccdef34c42a1011f9b5c12c00603842e4e5bed2b34ee18401a1be37421d942e3a925377260736f07151d86c4b9126a8abdcf0e24cd198a23c8bb27d657ad1aff10044a88950ec292ba620183e6a6faf8ee10ba83cfe6fe6ad3ba207ff188312cebf826676767e0018c03fc11d9a93f22204a6c99151b0870b10c7fcc7b505c070e90c20c6eb32e24cd1cc28ce0d6f651fb7e8bf2d71fd8354b4ccfa0c64e4ced4f12bf129da7ddad95a2871f881f8a3b7406cba2452bd0d8163f236a9a4ca647bd407", @ANYRES16=r8, @ANYBLOB="000325bd7000fcdbdf2501000000080002000200000005000500020000000400040010000400000400000900000065d80000080003000000010014000100fc0100000000000000000000000000010800020006000000050005000400000005000600800000000500050004000000"], 0x74}, 0x1, 0x0, 0x0, 0x24040800}, 0x801) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580100001000130729bd700000000000ac1e010100000000000000000000000000000000000000000000ffffe00000024e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYRES64=r0], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='dlm_lock_start\x00', r10}, 0x18) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r12, 0x5423, 0x0) ioctl$TIOCVHANGUP(r12, 0x5437, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5000) 20m22.479710026s ago: executing program 71 (id=3315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f0000000540)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0004000000080000000300000000ffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x501040, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) socket$nl_route(0x10, 0x3, 0x0) 11m34.939399209s ago: executing program 72 (id=11174): inotify_init1(0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2600, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRESDEC=r5, @ANYBLOB="535b9f0472213ec28084ed5947d201b2b68bb5b2196240ecc8b15ca828d35e095b49b8709d4f0ad74d7576442f7907907b2f323e6f47df55cf688de7b5e2d343e7d0868d26bb2f68d6b5684bddcebac766a274d23092d37eb3630472e7f843440839ce7313d0bc16806c1f5ef791a888554e2148", @ANYRES64=r1, @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r3) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 11m18.839701598s ago: executing program 73 (id=12064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='f2fs_direct_IO_enter\x00', r0, 0x0, 0x800000000000000}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00"], 0x0) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r9, 0x0, 0x1fc5}, 0x18) futex(0x0, 0x1, 0x1000000, 0x0, 0x0, 0x1) write$selinux_access(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r10 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r10) 9m11.638315427s ago: executing program 74 (id=14845): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) eventfd2(0x7, 0x80800) 9m9.867121644s ago: executing program 75 (id=14871): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000050004000100000014000200626f6e641000"/42], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc810) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c6548565b644dfa35a3156ce3a6c85d614cf6706c2bee2946e03b0277ea47781d1a75d55e28b7cd7177eab63811ac2be67aac01257b8e3b03e2e34a07cadafb672985a236795d263a366990e7649e200f6465119685c0ef2272db80fa43462db19c74d203941ec4a358d4a0a143fda01c3e67f7fecfb6bf0e3c67a24f6cad0068faa3ad1f2e80d8d8da9f905e1b041528b1b0f7f19a029022b853250cd8f1f419ca99b328157bf88ec76697dda5cb5fdfe5dac2dad74538c2a6e810879659d8ea3fb1e393e59f0", @ANYRES16=r2, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x576, &(0x7f0000000140)="$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") r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x594, &(0x7f0000000d00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$UHID_CREATE(r6, &(0x7f00000012c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x14, 0xfffa, 0x9, 0x1, 0x3, 0x10001}}, 0x120) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000001440)={0x11, 0x9, 0x1, 0x3fc00}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendfile(r6, r9, &(0x7f0000000780)=0x8, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9m4.460316064s ago: executing program 76 (id=14950): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r0, 0x0, 0x1) rmdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000180)={0x0}) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) 9m4.254974147s ago: executing program 77 (id=14956): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) pipe(0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="77690addcfbe1fbb66ec", 0xff3b}], 0x10000000000002de, 0x9) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='2\x00']) 9m2.036081929s ago: executing program 5 (id=14973): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffcc5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = epoll_create(0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "30c7b0f347c4131b", "00e52ba4481f9199e8d17e417d405505", "a54faee3", "e451e6f3d95bc540"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 9m1.745305954s ago: executing program 5 (id=14976): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffff4a, 0x80040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x15c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1594, 0x2, [@TCA_BASIC_EMATCHES={0x1590, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fff, 0x3, 0x2}, {0x4, 0xecc, 0x8000, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3b, 0x2, 0x9}, {0x5, 0x3, 0x2, "b02754"}}}, @TCF_EM_IPT={0xe8, 0x3, 0x0, 0x0, {{0x9f2c, 0x9, 0x400}, [@TCA_EM_IPT_MATCH_DATA={0xd2, 0x5, "5249d7c3801252aab7b778e63ff607b2c81491a3e177d94a6a6db1946fbaa06683617694b696e722baef8138b60fb33d9113b9e2b0f080e75a8c8e25c09dda14a7166b6d15ecd480f79bb0144e1f9bf2402c2e716af9303f0df197918d281cbdd13437ab28230acb63c68fa22e361a22626cee462b2d13cceb1df3b8d4a5dbb17e828d0684f1f6230080d766ff67183a212e8595373552b409263e5f3cefd0cf202dd1e127ee551cf6bb86ba9680c56b5d69c8dfb8d7ed351dd2a62db94af744dee18b5a726e4ccece5111f119cb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x5be5}, {0x3, 0x0, 0x0, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xcb1}, {0x4, 0x5}}}, @TCF_EM_IPT={0x111c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_MATCH_DATA={0xdb, 0x5, "05e34e3e21e5fe9367b5c99c5ed6f51df569e014701d2eb482f959a59235d504d14d44bcf3c2afe596f784992ae2a1584e7785df9070a791eca2e08e3595810769048c300e02ba599733372bd94f72387a07f3ff05e48615f1a38f62e9d9dc4a792b622a228525af9c37020ff66255bdb1a875f33092f6c44b03b7f10108be054006960f43f06702796928469bf605d97745155e09c587e3023a6840a4977569f874f34d85f83f100eb16d166e3fefcfb85e1e2a614c343f228c3b6fe23cf299bdb52719d988d55657e9e963baf12bc549051c7f709542"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0xf1c2, 0x4, 0xc}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8b7b3def2edeeffa27", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c09fa6eb56e9f14c", @TCF_META_TYPE_VAR="5f30bad3813d83", @TCF_META_TYPE_VAR="a509c1"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="2ad209b52d1b1e", @TCF_META_TYPE_VAR="c6d4fbb0", @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400, 0x1, 0x8}, {0x3, 0x4, 0x8, 0x0, 0x7, 0xb7b74e77e5c3cc73}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xb5, 0x5, "ae49e4b0089f5b053d64bc286180f22494a8d0366d54df279ba6bd563ad647c0421121f5c8cab54fa071283a661caa2e6a6d566faa20439bdb86e55a82605a25a566ab4a041a2058fe55c18e1c944b7ae09f93085031893e8cc678070c82fe6a5dfdb39a646a3a09e0b0499ad65349518c2055f7b96b0e650b724541d42e42427ef8f5663b16fa3658f003dfb79bd7c63ccbefca48dce53584789ceb0220f0d9472ad18984e147db70babf9e3a0b46e0d7"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff6e, 0x3, 0x196a}, {0x6, 0x813, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0xfd5a}, {0x0, 0x9, 0x1, "639194b215fc46098e"}}}]}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4}, {0x2, 0x5, 0x1, "418dc3b0cb"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xd}, {0x9, 0xa, 0x0, "70e0179fe9d3c047b328"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x1, 0x2, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0xc0, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7}, "3b4a9809bc332534bc5f115f29fcfd13dc206d9fe8012b5ebd8a4ef77f0fafbd81562600deca279c5fb3f446088803415fdda0ee4127a208002213af0bc9a08bc1928e44f2bb4fd3ae23ab53cec5946e630a5578112d787a432b8832bf8647f7379e4871af443e9a5998fe19fdcb7342678a097b990bcbd36bf302949081ac49b7ad2a54ea46aed232328f9d5c56da5253b8c0e4b19fdf838327c4b0d8b02cf958a926d5dfe1e8c9ee30051c5a030bcb34085b00"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc57b}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7}, {0x5, 0x5, 0x2, "a440e43857"}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x4}, "06557c1b38407c"}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xa8, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x15c4}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 9m1.644501366s ago: executing program 5 (id=14977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000030000000100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 9m1.639526535s ago: executing program 5 (id=14978): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r0, 0x0, 0x1) rmdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) 9m1.616665696s ago: executing program 5 (id=14979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x200280, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {0xf}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44860}, 0x4000000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400801, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) time(0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000080002"], 0x1c}}, 0x0) 8m59.816814152s ago: executing program 5 (id=14999): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffff4a, 0x80040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x15c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1594, 0x2, [@TCA_BASIC_EMATCHES={0x1590, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fff, 0x3, 0x2}, {0x4, 0xecc, 0x8000, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3b, 0x2, 0x9}, {0x5, 0x3, 0x2, "b02754"}}}, @TCF_EM_IPT={0xe8, 0x3, 0x0, 0x0, {{0x9f2c, 0x9, 0x400}, [@TCA_EM_IPT_MATCH_DATA={0xd2, 0x5, "5249d7c3801252aab7b778e63ff607b2c81491a3e177d94a6a6db1946fbaa06683617694b696e722baef8138b60fb33d9113b9e2b0f080e75a8c8e25c09dda14a7166b6d15ecd480f79bb0144e1f9bf2402c2e716af9303f0df197918d281cbdd13437ab28230acb63c68fa22e361a22626cee462b2d13cceb1df3b8d4a5dbb17e828d0684f1f6230080d766ff67183a212e8595373552b409263e5f3cefd0cf202dd1e127ee551cf6bb86ba9680c56b5d69c8dfb8d7ed351dd2a62db94af744dee18b5a726e4ccece5111f119cb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x5be5}, {0x3, 0x0, 0x0, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xcb1}, {0x4, 0x5}}}, @TCF_EM_IPT={0x111c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_MATCH_DATA={0xdb, 0x5, "05e34e3e21e5fe9367b5c99c5ed6f51df569e014701d2eb482f959a59235d504d14d44bcf3c2afe596f784992ae2a1584e7785df9070a791eca2e08e3595810769048c300e02ba599733372bd94f72387a07f3ff05e48615f1a38f62e9d9dc4a792b622a228525af9c37020ff66255bdb1a875f33092f6c44b03b7f10108be054006960f43f06702796928469bf605d97745155e09c587e3023a6840a4977569f874f34d85f83f100eb16d166e3fefcfb85e1e2a614c343f228c3b6fe23cf299bdb52719d988d55657e9e963baf12bc549051c7f709542"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0xf1c2, 0x4, 0xc}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8b7b3def2edeeffa27", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c09fa6eb56e9f14c", @TCF_META_TYPE_VAR="5f30bad3813d83", @TCF_META_TYPE_VAR="a509c1"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="2ad209b52d1b1e", @TCF_META_TYPE_VAR="c6d4fbb0", @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400, 0x1, 0x8}, {0x3, 0x4, 0x8, 0x0, 0x7, 0xb7b74e77e5c3cc73}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xb5, 0x5, "ae49e4b0089f5b053d64bc286180f22494a8d0366d54df279ba6bd563ad647c0421121f5c8cab54fa071283a661caa2e6a6d566faa20439bdb86e55a82605a25a566ab4a041a2058fe55c18e1c944b7ae09f93085031893e8cc678070c82fe6a5dfdb39a646a3a09e0b0499ad65349518c2055f7b96b0e650b724541d42e42427ef8f5663b16fa3658f003dfb79bd7c63ccbefca48dce53584789ceb0220f0d9472ad18984e147db70babf9e3a0b46e0d7"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff6e, 0x3, 0x196a}, {0x6, 0x813, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0xfd5a}, {0x0, 0x9, 0x1, "639194b215fc46098e"}}}]}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4}, {0x2, 0x5, 0x1, "418dc3b0cb"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xd}, {0x9, 0xa, 0x0, "70e0179fe9d3c047b328"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x1, 0x2, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0xc0, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7}, "3b4a9809bc332534bc5f115f29fcfd13dc206d9fe8012b5ebd8a4ef77f0fafbd81562600deca279c5fb3f446088803415fdda0ee4127a208002213af0bc9a08bc1928e44f2bb4fd3ae23ab53cec5946e630a5578112d787a432b8832bf8647f7379e4871af443e9a5998fe19fdcb7342678a097b990bcbd36bf302949081ac49b7ad2a54ea46aed232328f9d5c56da5253b8c0e4b19fdf838327c4b0d8b02cf958a926d5dfe1e8c9ee30051c5a030bcb34085b00"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc57b}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7}, {0x5, 0x5, 0x2, "a440e43857"}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x4}, "06557c1b38407c"}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xa8, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x15c4}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 8m59.764851453s ago: executing program 78 (id=14999): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x803, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffff4a, 0x80040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x15c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1594, 0x2, [@TCA_BASIC_EMATCHES={0x1590, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fff, 0x3, 0x2}, {0x4, 0xecc, 0x8000, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x3b, 0x2, 0x9}, {0x5, 0x3, 0x2, "b02754"}}}, @TCF_EM_IPT={0xe8, 0x3, 0x0, 0x0, {{0x9f2c, 0x9, 0x400}, [@TCA_EM_IPT_MATCH_DATA={0xd2, 0x5, "5249d7c3801252aab7b778e63ff607b2c81491a3e177d94a6a6db1946fbaa06683617694b696e722baef8138b60fb33d9113b9e2b0f080e75a8c8e25c09dda14a7166b6d15ecd480f79bb0144e1f9bf2402c2e716af9303f0df197918d281cbdd13437ab28230acb63c68fa22e361a22626cee462b2d13cceb1df3b8d4a5dbb17e828d0684f1f6230080d766ff67183a212e8595373552b409263e5f3cefd0cf202dd1e127ee551cf6bb86ba9680c56b5d69c8dfb8d7ed351dd2a62db94af744dee18b5a726e4ccece5111f119cb"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x5be5}, {0x3, 0x0, 0x0, 0xc}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xcb1}, {0x4, 0x5}}}, @TCF_EM_IPT={0x111c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_MATCH_DATA={0xdb, 0x5, "05e34e3e21e5fe9367b5c99c5ed6f51df569e014701d2eb482f959a59235d504d14d44bcf3c2afe596f784992ae2a1584e7785df9070a791eca2e08e3595810769048c300e02ba599733372bd94f72387a07f3ff05e48615f1a38f62e9d9dc4a792b622a228525af9c37020ff66255bdb1a875f33092f6c44b03b7f10108be054006960f43f06702796928469bf605d97745155e09c587e3023a6840a4977569f874f34d85f83f100eb16d166e3fefcfb85e1e2a614c343f228c3b6fe23cf299bdb52719d988d55657e9e963baf12bc549051c7f709542"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0xf1c2, 0x4, 0xc}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8b7b3def2edeeffa27", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c09fa6eb56e9f14c", @TCF_META_TYPE_VAR="5f30bad3813d83", @TCF_META_TYPE_VAR="a509c1"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="2ad209b52d1b1e", @TCF_META_TYPE_VAR="c6d4fbb0", @TCF_META_TYPE_VAR="bb", @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400, 0x1, 0x8}, {0x3, 0x4, 0x8, 0x0, 0x7, 0xb7b74e77e5c3cc73}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xb5, 0x5, "ae49e4b0089f5b053d64bc286180f22494a8d0366d54df279ba6bd563ad647c0421121f5c8cab54fa071283a661caa2e6a6d566faa20439bdb86e55a82605a25a566ab4a041a2058fe55c18e1c944b7ae09f93085031893e8cc678070c82fe6a5dfdb39a646a3a09e0b0499ad65349518c2055f7b96b0e650b724541d42e42427ef8f5663b16fa3658f003dfb79bd7c63ccbefca48dce53584789ceb0220f0d9472ad18984e147db70babf9e3a0b46e0d7"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff6e, 0x3, 0x196a}, {0x6, 0x813, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x2, 0xfd5a}, {0x0, 0x9, 0x1, "639194b215fc46098e"}}}]}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4}, {0x2, 0x5, 0x1, "418dc3b0cb"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xd}, {0x9, 0xa, 0x0, "70e0179fe9d3c047b328"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x1, 0x2, 0x3, 0x3}}}, @TCF_EM_CONTAINER={0xc0, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7}, "3b4a9809bc332534bc5f115f29fcfd13dc206d9fe8012b5ebd8a4ef77f0fafbd81562600deca279c5fb3f446088803415fdda0ee4127a208002213af0bc9a08bc1928e44f2bb4fd3ae23ab53cec5946e630a5578112d787a432b8832bf8647f7379e4871af443e9a5998fe19fdcb7342678a097b990bcbd36bf302949081ac49b7ad2a54ea46aed232328f9d5c56da5253b8c0e4b19fdf838327c4b0d8b02cf958a926d5dfe1e8c9ee30051c5a030bcb34085b00"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc57b}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7}, {0x5, 0x5, 0x2, "a440e43857"}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x4}, "06557c1b38407c"}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xa8, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x15c4}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 8m58.677639119s ago: executing program 0 (id=15012): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 8m58.114033448s ago: executing program 3 (id=15018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000a80)='\x00', 0x1, r2) (fail_nth: 1) 8m58.023467529s ago: executing program 3 (id=15019): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000680)={0xfdd, 0x0, 0x2}, &(0x7f00000006c0)=[{}, {}]) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x24, 0x3, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x5, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x27, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$KDGKBMODE(r0, 0x4bfa, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) capget(&(0x7f0000000600)={0x20071026, r2}, &(0x7f0000000640)={0xd, 0x3, 0x2, 0x1, 0x9, 0xf}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 'macvtap0\x00'}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="3135a973d5c14314d68200245a59817e70b3e249b52bdacced6fafcaf8fb72ebca1c776df6341c876c84d6adda4d65ad903c28454ed3bc87a32842b9c4ff9fac5d2bdcd7b9c44c9e10ae5b1b388edc1c6f552abcfc619e61c804e1540b0f8c289f699dda2efcfc3b8de7c23415837373fd4895bf2d0b68951c463c1470d75c6b88f8120dcaa8ea0f69389af2d83be5f01fe0d704a6d769f150c67031850324809350320ad20fb973435fe55bc98034e936bd4a11e9a7691018d029ef880793174a904380b87c560912d01441ab858e3fb74077f8d8b780ed42349e60ad0498e6e4f05b9a9c76c3b206fa6e7300a8f2bf22a0", 0xf2}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="f3069961289b1b4064ca1298c8138a04056ddf252f6ccd4807f2a3660fd221044b6bbffa00be66e79897bef5f360002ecfaf679c1826638ba410da940c520989571949401468b26239277e5a5b7a942bbc744f068eb5e03a8989ddfd0c84e7f6643b98b4f03bf5c7aa007619b715d8ba3e9555cd1313e20972efa128d9cf13cf9bbd4c8a898205e35777e437af87524b720d73a4340cc69f", 0x98}, {&(0x7f0000000200)="3bb2c26e6282dc0b141b4e1e546b89d52a973a36ed5d662097f48d5620530abfedaf2b6639ef69b5776ddaa6ef0ec1f6d4f0bdd9db0d38ba63cb1c88ebbe7f209c3b07c5297429f6fa1ace1b9bb043", 0x4f}, {&(0x7f0000000480)="eed7052341542999a564cd0dd8b9c82f22f3395a8e05e4a4cca92e9ed4f7a7c6b321900c36657fbcf21b4f299a885da9b2bbf4151d3e0914b873605f5283e7e7c84f770e5d3cd43bac44f4264fd736eecb18811b12e406fdc62afb718800362ea8c8cd3b5e14b8b41411a5215bc8c7c5596e1aecb68d963879571f01a279295872d070800a57e663ed4377c23453f900497ab746311ccbac3cce", 0x9a}], 0x5}}], 0x1, 0x18041) 8m57.870879001s ago: executing program 3 (id=15021): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001440)='sys_enter\x00', r0, 0x0, 0x400000000}, 0x18) mknod$loop(0x0, 0x0, 0x1) 8m57.797491382s ago: executing program 3 (id=15023): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r0, 0x0, 0x1) rmdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) 8m57.796661622s ago: executing program 0 (id=15024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) acct(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) getxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0) acct(0x0) acct(&(0x7f00000002c0)='./file1\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20000000}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4064081) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300a7fa2ac8fc73353f000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@allocspi={0x140, 0x16, 0x100, 0x70bd28, 0x25dfdbfc, {{{@in6=@mcast1, @in=@empty, 0x4e22, 0xc2c, 0x4e22, 0x1, 0x2, 0x60, 0x80, 0x3a, 0x0, r8}, {@in6=@remote, 0x4d3, 0x32}, @in=@empty, {0x7, 0x5, 0x5, 0x5, 0xa, 0x449, 0xf211, 0x4}, {0xfff, 0x8, 0x8000000000000000}, {0x10000, 0xff, 0x9}, 0x70bd2c, 0x0, 0xa, 0x4, 0x8, 0x7d}, 0x7ff, 0x1}, [@lastused={0xc, 0xf, 0xb981}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x453}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3ff}, @lifetime_val={0x24, 0x9, {0x8, 0xffff, 0x6d7, 0x5}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20044040}, 0x800) 8m57.758469123s ago: executing program 3 (id=15025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/228], 0x154}}, 0x0) 8m57.431970438s ago: executing program 0 (id=15026): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='..SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') 8m57.420002248s ago: executing program 0 (id=15027): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r0, 0x0, 0x1) rmdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) 8m57.33586063s ago: executing program 0 (id=15028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001d14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 8m57.243918421s ago: executing program 3 (id=15029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000020101080000000000000000001e7836a100af19800800020066140000080001004c010000"], 0x28}, 0x1, 0x0, 0x0, 0x4004801}, 0x200088c4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='neigh_create\x00', r10, 0x0, 0x2}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbb1bd3483b2217a27b07297098b6bbbbbbbb4cf08c6107067a8bea9bc7eb305c4ff09881b25acf592ef9aa0006000000000000907800000002e000cc3dbd38302b86860000004485a52729cf10f2aad036dc77977f054f2464858835893cff4cacb5f138e93bdb5ff83e3e4721a10cf7b8589aff506e033e9e9727593b941777646b5b9a611c99ad9cc5e67f077ff9c18897c8bb8c9e1d6e0b8b1b008f3bb716f69f34ea4296e1c5ce2aa25e5b22d927d11c41c8684e3fdeddb6fdb759c1f1fd4c2a0b5dfb338133d3eb3c399b9ad0586c343df6cfa2bfd6231c384d2b702c3e6d58980fe2608501047fb72bd9b808"], 0x0) 8m57.232656611s ago: executing program 79 (id=15029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000003c0)) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000020101080000000000000000001e7836a100af19800800020066140000080001004c010000"], 0x28}, 0x1, 0x0, 0x0, 0x4004801}, 0x200088c4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='neigh_create\x00', r10, 0x0, 0x2}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbb1bd3483b2217a27b07297098b6bbbbbbbb4cf08c6107067a8bea9bc7eb305c4ff09881b25acf592ef9aa0006000000000000907800000002e000cc3dbd38302b86860000004485a52729cf10f2aad036dc77977f054f2464858835893cff4cacb5f138e93bdb5ff83e3e4721a10cf7b8589aff506e033e9e9727593b941777646b5b9a611c99ad9cc5e67f077ff9c18897c8bb8c9e1d6e0b8b1b008f3bb716f69f34ea4296e1c5ce2aa25e5b22d927d11c41c8684e3fdeddb6fdb759c1f1fd4c2a0b5dfb338133d3eb3c399b9ad0586c343df6cfa2bfd6231c384d2b702c3e6d58980fe2608501047fb72bd9b808"], 0x0) 8m56.933309836s ago: executing program 0 (id=15031): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x2, 0x5, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x67, 0x0, 0x80, 0x29, 0x0, @local, @loopback, {[@lsrr={0x83, 0x1b, 0xe8, [@remote, @empty, @multicast2, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) 8m56.907143206s ago: executing program 80 (id=15031): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x2, 0x5, {{0xc, 0x4, 0x2, 0x5, 0x30, 0x67, 0x0, 0x80, 0x29, 0x0, @local, @loopback, {[@lsrr={0x83, 0x1b, 0xe8, [@remote, @empty, @multicast2, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) 8m51.27744809s ago: executing program 1 (id=15084): socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0xd080, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 8m51.168715641s ago: executing program 1 (id=15086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffff4, 0x0, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x7ffffffffffffffe, 0x100}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xe, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 8m51.108087072s ago: executing program 1 (id=15087): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa2080, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@ll, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000240)=""/168, 0xa8}, {}], 0x6, &(0x7f0000000540)=""/172, 0xac}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 8m50.905141585s ago: executing program 1 (id=15091): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r0, 0x0, 0x1) rmdir(0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0) 8m50.904257795s ago: executing program 1 (id=15092): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) (fail_nth: 4) 8m50.671666598s ago: executing program 1 (id=15093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x204347, &(0x7f0000000400)={0x0, 0x35e2, 0x3180, 0x8004, 0x20}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x800000001}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setgroups(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x1, 0x0, 0x0, 0x2, 0x0, {0x0, r10}}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x1, 0x0, 0x0, 0x2, 0x0, {0x0, r10}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) (async) socket(0x10, 0x3, 0x9) 8m50.671107109s ago: executing program 81 (id=15093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x204347, &(0x7f0000000400)={0x0, 0x35e2, 0x3180, 0x8004, 0x20}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x800000001}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setgroups(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x1, 0x0, 0x0, 0x2, 0x0, {0x0, r10}}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x1, 0x0, 0x0, 0x2, 0x0, {0x0, r10}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) (async) socket(0x10, 0x3, 0x9) 8m31.250365777s ago: executing program 2 (id=15392): r0 = creat(0x0, 0x12e) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m31.230827637s ago: executing program 2 (id=15394): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) 8m30.32087041s ago: executing program 2 (id=15402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 8m30.270183231s ago: executing program 2 (id=15404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000740)=[0x7, 0x1, 0x7, 0x4, 0x1, 0xf, 0x5, 0x9]) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {0x0, 0x4}, {0x0, 0x7fff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x100000}, {0x0, 0x4000}, {0xfffffffe, 0x0, 0x2}, {0x1}, {0xd5}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x2000000}, {0x0, 0x800}, {0x0, 0x1}, {0x0, 0x0, 0x10}, {0x0, 0x10, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x4}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x400000}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd}], [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000280)={0x41, 0x4, 0x100}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dvmrp1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="080000009db668618db18b7f2ceb806924e88dc204f189e71adf95fffdb1400d0816516d9d1f90960465863472bb0902ccb26864c08c0b6065d55a06a93bd51fba1907faa9eba0e8d2e2e5303f9a2898281eb4b11939a606bfd941e3da", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000400000100c28000050003000e"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 8m29.979565936s ago: executing program 2 (id=15414): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000b000000ff03000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000380)}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r3, r3, r2, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x4, 0x8, 0xa}, {0x5, 0x5, 0x10, 0x3}, {0x5, 0x2, 0x0, 0x9}, {0x1, 0x3, 0x0, 0x6}, {0x0, 0x100, 0xf, 0x2}, {0x4, 0x1, 0xc, 0x8}, {0x4, 0x5, 0xd, 0xf69f69c767f2d3f4}, {0x5, 0x4, 0x10, 0x3}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='mmc_request_start\x00', r4, 0x0, 0x8}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) 8m29.936021746s ago: executing program 2 (id=15416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) 8m14.87647818s ago: executing program 82 (id=15416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) 2.612214792s ago: executing program 7 (id=25464): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x541e, &(0x7f0000001240)) 2.575997842s ago: executing program 4 (id=25468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000004009d000400000004003ec9add67215ba18119a000000000000", @ANYRES32=0x0, @ANYBLOB="00729900"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfffffb703000008000000b704000000000000850000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) getegid() ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = getpid() process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000380)={[{@mb_optimize_scan}, {@noauto_da_alloc}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@nomblk_io_submit}, {@nombcache}, {@data_err_abort}]}, 0x66, 0x50b, &(0x7f0000001040)="$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") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0) (fail_nth: 2) r7 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r7, &(0x7f00000004c0)="0600", 0x2) sendfile(r7, r7, &(0x7f0000001000), 0xffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='vnet_rx_stopped_ack\x00', r8}, 0x18) r9 = open(&(0x7f0000000740)='./bus\x00', 0x600800, 0x120) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.496298894s ago: executing program 7 (id=25469): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.897428842s ago: executing program 6 (id=25473): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.861279383s ago: executing program 4 (id=25474): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1.860918863s ago: executing program 4 (id=25475): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000380)) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.839807593s ago: executing program 7 (id=25476): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x80000001, 0x6, {{0x9, 0x4, 0x1, 0x24, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xcc, [@broadcast, @loopback, @private=0xa010101]}]}}}}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r2, 0x3, &(0x7f0000000780)=[r2, r5, r2, r2, r2, r6], &(0x7f00000007c0)=[{0x3, 0x5, 0xc, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 1.764061614s ago: executing program 4 (id=25477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x10500) 1.504052428s ago: executing program 6 (id=25478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_io_uring_setup(0x1107, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21a}, &(0x7f00000003c0), &(0x7f0000000040)) 1.463580869s ago: executing program 6 (id=25479): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x541e, &(0x7f0000001240)) 1.463235929s ago: executing program 8 (id=25480): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f0ff22d3b70400000200000085000000820000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x10500) 1.429875509s ago: executing program 7 (id=25481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.38017928s ago: executing program 7 (id=25482): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) socket$inet(0x2, 0x1, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x163140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[]) 897.801767ms ago: executing program 4 (id=25486): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 874.244708ms ago: executing program 6 (id=25487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000380)) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 852.249488ms ago: executing program 4 (id=25489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r9, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r8, &(0x7f00000001c0)='m', 0x1, 0x1}]) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='trans=rdma,') recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000001700000000002100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7040000080000008500000095000000950000000058075c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 851.633748ms ago: executing program 6 (id=25490): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) 800.435838ms ago: executing program 6 (id=25492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0xf, 0x5, 0x1ff}) bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) socket$netlink(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8f454400e6ff0600000008000000000000000000", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x4000814}, 0x4004000) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r10 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r5, r10, 0x0, 0x8000fffffffe) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r9], 0xf0}, 0x1, 0x0, 0x0, 0x60001}, 0x0) 592.950042ms ago: executing program 9 (id=25494): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x541e, &(0x7f0000001240)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000001280)=[{}, {}], &(0x7f00000013c0)={0x0, 0x3938700}, 0x0) 592.517432ms ago: executing program 8 (id=25495): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 565.001792ms ago: executing program 8 (id=25496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) r1 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 507.398123ms ago: executing program 7 (id=25497): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x810}, 0x10500) 485.155313ms ago: executing program 8 (id=25498): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x80000001, 0x6, {{0x9, 0x4, 0x1, 0x24, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xcc, [@broadcast, @loopback, @private=0xa010101]}]}}}}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r2, 0x3, &(0x7f0000000780)=[r2, r5, r2, r2, r2, r6], &(0x7f00000007c0)=[{0x3, 0x5, 0xc, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) semget$private(0x0, 0x4000, 0x555) 414.459494ms ago: executing program 9 (id=25499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, 0x0) lseek(r6, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) socket$nl_route(0x10, 0x3, 0x0) r8 = semget(0x3, 0x2, 0x204) semop(r8, &(0x7f0000000180)=[{0x8c5c1eb0a2e5a351, 0x7ff, 0x800}], 0x1) 376.781725ms ago: executing program 9 (id=25500): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 345.046555ms ago: executing program 9 (id=25501): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000380)) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 287.068116ms ago: executing program 9 (id=25502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) 286.497016ms ago: executing program 9 (id=25503): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x400000) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000800), 0x4001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[], 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 247.638447ms ago: executing program 8 (id=25504): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x7fff, 0x4, 0xfffffff8, 0xe49f}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) 0s ago: executing program 8 (id=25505): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x200481c, &(0x7f0000000980)={[{@nobh}, {@mb_optimize_scan}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x1040f8) lseek(r1, 0x0, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="200000000000000084000000020098790abe7615538228242f3e00002d060c800400000009000000", @ANYRES32=0x0], 0x20, 0x4010}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680), 0x802, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xeb9e}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xeb9e}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)="89", 0x1}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)="89", 0x1}], 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000340)={0xff02, 0x2000, 0x1ff, 0x80d, 0x5, "000000ce092400"}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x5f) (async) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x5f) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r6, @ANYRES64], &(0x7f0000000740)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x14, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000000)={0x20000000}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="8545e3294f0aa7b62628f8ac47357da6b8d78a784426ff360a48d7d56a7d480796b07663005a833c5946627c9bef9565ede67213ec29825c1a1a42c99f3f6e1b6b4b25eaab", @ANYRES16, @ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r9}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000500014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) socket$pppoe(0x18, 0x1, 0x0) (async) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000000040)=0x40) kernel console output (not intermixed with test programs): 948][ T29] audit: type=1326 audit(2249.882:131725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.023255][ T29] audit: type=1326 audit(2249.882:131726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.046410][ T29] audit: type=1326 audit(2249.882:131727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.069658][ T29] audit: type=1326 audit(2249.882:131728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.093242][ T29] audit: type=1326 audit(2249.882:131729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.116469][ T29] audit: type=1326 audit(2249.882:131730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6032 comm="syz.9.24498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1481.142154][ T6033] bond1 (unregistering): Released all slaves [ 1481.488053][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24501'. [ 1481.533318][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24503'. [ 1481.643646][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24504'. [ 1481.652716][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24504'. [ 1481.682553][ T6057] wireguard2: entered promiscuous mode [ 1481.688097][ T6057] wireguard2: entered allmulticast mode [ 1481.793961][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24510'. [ 1481.805712][ T6072] bridge0: entered promiscuous mode [ 1481.812377][ T6072] bridge0: port 3(macvlan2) entered blocking state [ 1481.819160][ T6072] bridge0: port 3(macvlan2) entered disabled state [ 1481.826040][ T6072] macvlan2: entered allmulticast mode [ 1481.831463][ T6072] bridge0: entered allmulticast mode [ 1481.837334][ T6072] macvlan2: left allmulticast mode [ 1481.842734][ T6072] bridge0: left allmulticast mode [ 1481.848516][ T6072] bridge0: left promiscuous mode [ 1482.403958][ T6088] wireguard0: entered promiscuous mode [ 1482.409752][ T6088] wireguard0: entered allmulticast mode [ 1482.702879][ T6119] vhci_hcd: invalid port number 96 [ 1482.708091][ T6119] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1483.010333][ T6143] netlink: 'syz.6.24523': attribute type 10 has an invalid length. [ 1483.048985][ T6143] netlink: 'syz.6.24523': attribute type 10 has an invalid length. [ 1483.071331][ T6143] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1483.105284][ T6143] bond1: entered promiscuous mode [ 1483.110406][ T6143] bond1: entered allmulticast mode [ 1483.118960][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1483.165067][ T6143] bond1 (unregistering): Released all slaves [ 1483.824438][ T6235] wireguard0: entered promiscuous mode [ 1483.830087][ T6235] wireguard0: entered allmulticast mode [ 1483.851729][ T6238] vhci_hcd: invalid port number 96 [ 1483.856975][ T6238] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1484.326462][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24546'. [ 1484.583746][ T6352] siw: device registration error -23 [ 1484.754472][T22577] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.779664][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 1484.820818][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.827928][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.835975][ T6355] bridge_slave_0: entered allmulticast mode [ 1484.842796][ T6355] bridge_slave_0: entered promiscuous mode [ 1484.850973][T22577] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.862226][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.869462][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.876703][ T6355] bridge_slave_1: entered allmulticast mode [ 1484.883270][ T6355] bridge_slave_1: entered promiscuous mode [ 1484.885222][ T6379] vhci_hcd: invalid port number 96 [ 1484.894346][ T6379] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1484.910623][T22577] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.941810][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.954198][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.987206][T22577] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.007109][ T6384] futex_wake_op: syz.4.24562 tries to shift op by -1; fix this program [ 1485.016368][ T6355] team0: Port device team_slave_0 added [ 1485.023733][ T6355] team0: Port device team_slave_1 added [ 1485.038927][ T6384] pimreg: entered allmulticast mode [ 1485.044850][ T6384] pimreg: left allmulticast mode [ 1485.061375][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.068500][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.094653][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.107235][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.114341][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.140423][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.215612][ T6355] hsr_slave_0: entered promiscuous mode [ 1485.223697][ T6355] hsr_slave_1: entered promiscuous mode [ 1485.229891][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1485.237732][ T6355] Cannot create hsr debugfs directory [ 1485.452017][T22577] bond0 (unregistering): Released all slaves [ 1485.630951][T22577] hsr_slave_0: left promiscuous mode [ 1485.642869][T22577] hsr_slave_1: left promiscuous mode [ 1485.661584][T22577] veth1_macvtap: left promiscuous mode [ 1485.674574][T22577] veth0_macvtap: left promiscuous mode [ 1485.681172][T22577] veth1_vlan: left promiscuous mode [ 1485.686476][T22577] veth0_vlan: left promiscuous mode [ 1486.065672][ T6355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1486.075584][ T6355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1486.085567][ T6355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1486.087035][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 1486.087054][ T29] audit: type=1326 audit(2255.062:132450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.121775][ T29] audit: type=1326 audit(2255.062:132451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.145507][ T29] audit: type=1326 audit(2255.062:132452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.168851][ T29] audit: type=1326 audit(2255.062:132453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.192130][ T29] audit: type=1326 audit(2255.062:132454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.215279][ T29] audit: type=1326 audit(2255.062:132455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.238422][ T29] audit: type=1326 audit(2255.062:132456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65c16e5927 code=0x7ffc0000 [ 1486.261594][ T29] audit: type=1326 audit(2255.062:132457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65c168ab39 code=0x7ffc0000 [ 1486.284758][ T29] audit: type=1326 audit(2255.062:132458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.307930][ T29] audit: type=1326 audit(2255.062:132459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.6.24568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1486.333420][ T6355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1486.375281][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.392348][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.403873][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.410990][T14441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1486.425194][T14441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.432405][T14441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1486.530562][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.664583][ T6355] veth0_vlan: entered promiscuous mode [ 1486.673794][ T6355] veth1_vlan: entered promiscuous mode [ 1486.693098][ T6355] veth0_macvtap: entered promiscuous mode [ 1486.701484][ T6355] veth1_macvtap: entered promiscuous mode [ 1486.713678][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.718358][ T6489] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1486.723424][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.727403][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1486.736474][ T6355] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.742376][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 1486.751027][ T6355] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.751099][ T6355] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.774193][ T6355] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.786028][ T6490] vhci_hcd: connection closed [ 1486.786337][ T2808] vhci_hcd: stop threads [ 1486.795503][ T2808] vhci_hcd: release socket [ 1486.800059][ T2808] vhci_hcd: disconnect device [ 1486.833048][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24554'. [ 1486.845118][ T6495] bridge0: entered promiscuous mode [ 1486.851393][ T6495] bridge0: port 3(macvlan2) entered blocking state [ 1486.857984][ T6495] bridge0: port 3(macvlan2) entered disabled state [ 1486.864936][ T6495] macvlan2: entered allmulticast mode [ 1486.870458][ T6495] bridge0: entered allmulticast mode [ 1486.876188][ T6495] macvlan2: left allmulticast mode [ 1486.881501][ T6495] bridge0: left allmulticast mode [ 1486.887348][ T6495] bridge0: left promiscuous mode [ 1486.951960][ T6498] vhci_hcd: invalid port number 96 [ 1486.957324][ T6498] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1487.072393][ T6500] netlink: 96 bytes leftover after parsing attributes in process `syz.7.24573'. [ 1487.223778][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24578'. [ 1487.252603][ T6519] netlink: 104 bytes leftover after parsing attributes in process `syz.7.24581'. [ 1487.324649][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24583'. [ 1487.337067][ T6522] bridge0: entered promiscuous mode [ 1487.349355][ T6522] bridge0: port 3(macvlan2) entered blocking state [ 1487.356038][ T6522] bridge0: port 3(macvlan2) entered disabled state [ 1487.364226][ T6522] macvlan2: entered allmulticast mode [ 1487.369781][ T6522] bridge0: entered allmulticast mode [ 1487.376169][ T6522] macvlan2: left allmulticast mode [ 1487.381427][ T6522] bridge0: left allmulticast mode [ 1487.388162][ T6522] bridge0: left promiscuous mode [ 1487.502790][ T6538] vhci_hcd: invalid port number 96 [ 1487.508054][ T6538] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1487.906911][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 1487.987261][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.988086][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24594'. [ 1487.994637][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.010936][ T6539] bridge_slave_0: entered allmulticast mode [ 1488.017618][ T6539] bridge_slave_0: entered promiscuous mode [ 1488.030156][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.037296][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.044862][ T6539] bridge_slave_1: entered allmulticast mode [ 1488.051724][ T6539] bridge_slave_1: entered promiscuous mode [ 1488.085564][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.099473][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.125946][ T6539] team0: Port device team_slave_0 added [ 1488.133094][ T6539] team0: Port device team_slave_1 added [ 1488.152237][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.159388][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.185528][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.197696][ T6573] vhci_hcd: invalid port number 96 [ 1488.203018][ T6573] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1488.230142][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.237143][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.263370][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.298451][ T6539] hsr_slave_0: entered promiscuous mode [ 1488.305249][ T6539] hsr_slave_1: entered promiscuous mode [ 1488.311611][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1488.319557][ T6539] Cannot create hsr debugfs directory [ 1488.328023][T14441] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.398464][T14441] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.482934][T14441] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.541060][T14441] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.680933][T14441] bond0 (unregistering): Released all slaves [ 1488.732361][T14441] tipc: Left network mode [ 1488.739386][T14441] hsr_slave_0: left promiscuous mode [ 1488.745252][T14441] hsr_slave_1: left promiscuous mode [ 1488.754174][T14441] veth1_macvtap: left promiscuous mode [ 1488.759998][T14441] veth0_macvtap: left allmulticast mode [ 1488.765647][T14441] veth0_macvtap: left promiscuous mode [ 1488.772036][T14441] veth1_vlan: left promiscuous mode [ 1488.777429][T14441] veth0_vlan: left promiscuous mode [ 1488.917853][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24602'. [ 1488.944677][ T6645] bridge0: entered promiscuous mode [ 1488.952187][ T6645] bridge0: port 3(macvlan2) entered blocking state [ 1488.958799][ T6645] bridge0: port 3(macvlan2) entered disabled state [ 1488.965575][ T6645] macvlan2: entered allmulticast mode [ 1488.971035][ T6645] bridge0: entered allmulticast mode [ 1488.976976][ T6645] macvlan2: left allmulticast mode [ 1488.982209][ T6645] bridge0: left allmulticast mode [ 1488.989447][ T6645] bridge0: left promiscuous mode [ 1489.129420][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24605'. [ 1489.158528][ T6667] netlink: 104 bytes leftover after parsing attributes in process `syz.8.24606'. [ 1489.194498][ T6670] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1489.201071][ T6670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1489.208813][ T6670] vhci_hcd vhci_hcd.0: Device attached [ 1489.221096][ T6671] vhci_hcd: connection closed [ 1489.221304][ T2808] vhci_hcd: stop threads [ 1489.230379][ T2808] vhci_hcd: release socket [ 1489.234915][ T2808] vhci_hcd: disconnect device [ 1489.258262][ T6539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1489.268099][ T6539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1489.276951][ T6539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1489.286165][ T6539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1489.324039][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1489.336838][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.346629][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.353728][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.377242][ T2808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.384366][ T2808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.440801][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.533593][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24615'. [ 1489.609704][ T6539] veth0_vlan: entered promiscuous mode [ 1489.618868][ T6539] veth1_vlan: entered promiscuous mode [ 1489.636697][ T6539] veth0_macvtap: entered promiscuous mode [ 1489.644764][ T6539] veth1_macvtap: entered promiscuous mode [ 1489.657321][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.669759][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.680949][ T6539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.689788][ T6539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.698501][ T6539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.707310][ T6539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.072135][ T6738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6738 comm=syz.9.24627 [ 1490.119864][ T6740] bridge0: entered promiscuous mode [ 1490.126573][ T6740] bridge0: port 3(macvlan2) entered blocking state [ 1490.133285][ T6740] bridge0: port 3(macvlan2) entered disabled state [ 1490.141815][ T6740] macvlan2: entered allmulticast mode [ 1490.147257][ T6740] bridge0: entered allmulticast mode [ 1490.153551][ T6740] macvlan2: left allmulticast mode [ 1490.158783][ T6740] bridge0: left allmulticast mode [ 1490.210713][ T6740] bridge0: left promiscuous mode [ 1490.344533][ T6742] bridge0: entered promiscuous mode [ 1490.351368][ T6742] bridge0: port 3(macvlan2) entered blocking state [ 1490.358052][ T6742] bridge0: port 3(macvlan2) entered disabled state [ 1490.366046][ T6742] macvlan2: entered allmulticast mode [ 1490.371597][ T6742] bridge0: entered allmulticast mode [ 1490.378025][ T6742] macvlan2: left allmulticast mode [ 1490.383218][ T6742] bridge0: left allmulticast mode [ 1490.390466][ T6742] bridge0: left promiscuous mode [ 1490.501193][ T6762] FAULT_INJECTION: forcing a failure. [ 1490.501193][ T6762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1490.514644][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.8.24639 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1490.514751][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1490.514775][ T6762] Call Trace: [ 1490.514782][ T6762] [ 1490.514792][ T6762] __dump_stack+0x1d/0x30 [ 1490.514817][ T6762] dump_stack_lvl+0xe8/0x140 [ 1490.514898][ T6762] dump_stack+0x15/0x1b [ 1490.514917][ T6762] should_fail_ex+0x265/0x280 [ 1490.514939][ T6762] should_fail_alloc_page+0xf2/0x100 [ 1490.514971][ T6762] __alloc_frozen_pages_noprof+0xff/0x360 [ 1490.515069][ T6762] alloc_pages_mpol+0xb3/0x250 [ 1490.515132][ T6762] alloc_pages_noprof+0x90/0x130 [ 1490.515191][ T6762] pte_alloc_one+0x2d/0x120 [ 1490.515292][ T6762] __pte_alloc+0x32/0x2b0 [ 1490.515334][ T6762] handle_mm_fault+0x1c16/0x2be0 [ 1490.515430][ T6762] ? check_vma_flags+0x26e/0x340 [ 1490.515507][ T6762] __get_user_pages+0x1036/0x1fb0 [ 1490.515547][ T6762] __gup_longterm_locked+0x9c9/0x1010 [ 1490.515634][ T6762] ? exc_page_fault+0x62/0xa0 [ 1490.515662][ T6762] ? do_user_addr_fault+0xbb8/0x1090 [ 1490.515707][ T6762] ? should_fail_ex+0xdb/0x280 [ 1490.515801][ T6762] pin_user_pages_remote+0x7e/0xb0 [ 1490.515843][ T6762] process_vm_rw+0x484/0x950 [ 1490.515959][ T6762] __x64_sys_process_vm_writev+0x78/0x90 [ 1490.516109][ T6762] x64_sys_call+0xe80/0x2fb0 [ 1490.516138][ T6762] do_syscall_64+0xd2/0x200 [ 1490.516250][ T6762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1490.516279][ T6762] ? clear_bhb_loop+0x40/0x90 [ 1490.516303][ T6762] ? clear_bhb_loop+0x40/0x90 [ 1490.516479][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.516502][ T6762] RIP: 0033:0x7faac2d4e969 [ 1490.516519][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.516538][ T6762] RSP: 002b:00007faac13b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1490.516559][ T6762] RAX: ffffffffffffffda RBX: 00007faac2f75fa0 RCX: 00007faac2d4e969 [ 1490.516576][ T6762] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000019d [ 1490.516640][ T6762] RBP: 00007faac13b7090 R08: 000000000000023a R09: 0000000000000000 [ 1490.516653][ T6762] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.516666][ T6762] R13: 0000000000000000 R14: 00007faac2f75fa0 R15: 00007ffd37b7ff88 [ 1490.516687][ T6762] [ 1490.832478][ T6767] bridge0: entered promiscuous mode [ 1490.839103][ T6767] bridge0: port 3(macvlan2) entered blocking state [ 1490.845660][ T6767] bridge0: port 3(macvlan2) entered disabled state [ 1490.860149][ T6767] macvlan2: entered allmulticast mode [ 1490.865632][ T6767] bridge0: entered allmulticast mode [ 1490.871852][ T6767] macvlan2: left allmulticast mode [ 1490.877054][ T6767] bridge0: left allmulticast mode [ 1490.883626][ T6767] bridge0: left promiscuous mode [ 1490.942830][ T6769] netlink: 'syz.8.24643': attribute type 10 has an invalid length. [ 1490.954348][ T6769] netlink: 'syz.8.24643': attribute type 10 has an invalid length. [ 1490.964302][ T6769] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1490.979141][ T6773] bridge0: entered promiscuous mode [ 1490.986646][ T6773] bridge0: port 3(macvlan2) entered blocking state [ 1490.993279][ T6773] bridge0: port 3(macvlan2) entered disabled state [ 1491.001805][ T6773] macvlan2: entered allmulticast mode [ 1491.007221][ T6773] bridge0: entered allmulticast mode [ 1491.015987][ T6773] macvlan2: left allmulticast mode [ 1491.021235][ T6773] bridge0: left allmulticast mode [ 1491.029004][ T6773] bridge0: left promiscuous mode [ 1491.044259][ T6769] bond1: entered promiscuous mode [ 1491.049442][ T6769] bond1: entered allmulticast mode [ 1491.055155][ T6769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1491.072908][ T6769] bond1 (unregistering): Released all slaves [ 1491.115735][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 1491.115751][ T29] audit: type=1326 audit(2260.092:133218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.155370][ T29] audit: type=1326 audit(2260.122:133219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.178629][ T29] audit: type=1326 audit(2260.122:133220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.202100][ T29] audit: type=1326 audit(2260.122:133221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.225295][ T29] audit: type=1326 audit(2260.122:133222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.248613][ T29] audit: type=1326 audit(2260.132:133223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.271752][ T29] audit: type=1326 audit(2260.132:133224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.295154][ T29] audit: type=1326 audit(2260.132:133225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.318507][ T29] audit: type=1326 audit(2260.132:133226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.341763][ T29] audit: type=1326 audit(2260.132:133227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.9.24646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1491.681871][ T6799] FAULT_INJECTION: forcing a failure. [ 1491.681871][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1491.695132][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.4.24653 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1491.695162][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1491.695179][ T6799] Call Trace: [ 1491.695187][ T6799] [ 1491.695197][ T6799] __dump_stack+0x1d/0x30 [ 1491.695219][ T6799] dump_stack_lvl+0xe8/0x140 [ 1491.695240][ T6799] dump_stack+0x15/0x1b [ 1491.695310][ T6799] should_fail_ex+0x265/0x280 [ 1491.695418][ T6799] should_fail+0xb/0x20 [ 1491.695441][ T6799] should_fail_usercopy+0x1a/0x20 [ 1491.695469][ T6799] _copy_from_user+0x1c/0xb0 [ 1491.695495][ T6799] ___sys_sendmsg+0xc1/0x1d0 [ 1491.695622][ T6799] __x64_sys_sendmsg+0xd4/0x160 [ 1491.695665][ T6799] x64_sys_call+0x2999/0x2fb0 [ 1491.695689][ T6799] do_syscall_64+0xd2/0x200 [ 1491.695823][ T6799] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1491.695921][ T6799] ? clear_bhb_loop+0x40/0x90 [ 1491.695950][ T6799] ? clear_bhb_loop+0x40/0x90 [ 1491.696017][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.696045][ T6799] RIP: 0033:0x7f358a2be969 [ 1491.696065][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.696090][ T6799] RSP: 002b:00007f3588927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.696114][ T6799] RAX: ffffffffffffffda RBX: 00007f358a4e5fa0 RCX: 00007f358a2be969 [ 1491.696129][ T6799] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1491.696143][ T6799] RBP: 00007f3588927090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.696155][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.696168][ T6799] R13: 0000000000000000 R14: 00007f358a4e5fa0 R15: 00007fff00164578 [ 1491.696267][ T6799] [ 1492.399939][ T6820] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1492.406538][ T6820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1492.414312][ T6820] vhci_hcd vhci_hcd.0: Device attached [ 1492.426231][ T6821] vhci_hcd: connection closed [ 1492.426538][T14432] vhci_hcd: stop threads [ 1492.435736][T14432] vhci_hcd: release socket [ 1492.440289][T14432] vhci_hcd: disconnect device [ 1493.111722][ T6861] FAULT_INJECTION: forcing a failure. [ 1493.111722][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.124411][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.9.24674 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1493.124473][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1493.124486][ T6861] Call Trace: [ 1493.124493][ T6861] [ 1493.124502][ T6861] __dump_stack+0x1d/0x30 [ 1493.124549][ T6861] dump_stack_lvl+0xe8/0x140 [ 1493.124569][ T6861] dump_stack+0x15/0x1b [ 1493.124646][ T6861] should_fail_ex+0x265/0x280 [ 1493.124667][ T6861] ? audit_log_d_path+0x8d/0x150 [ 1493.124708][ T6861] should_failslab+0x8c/0xb0 [ 1493.124742][ T6861] __kmalloc_cache_noprof+0x4c/0x320 [ 1493.124904][ T6861] audit_log_d_path+0x8d/0x150 [ 1493.124939][ T6861] audit_log_d_path_exe+0x42/0x70 [ 1493.124959][ T6861] audit_log_task+0x1e9/0x250 [ 1493.125072][ T6861] audit_seccomp+0x61/0x100 [ 1493.125137][ T6861] ? __seccomp_filter+0x68c/0x10d0 [ 1493.125165][ T6861] __seccomp_filter+0x69d/0x10d0 [ 1493.125200][ T6861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1493.125310][ T6861] ? vfs_write+0x75e/0x8e0 [ 1493.125427][ T6861] __secure_computing+0x82/0x150 [ 1493.125457][ T6861] syscall_trace_enter+0xcf/0x1e0 [ 1493.125521][ T6861] do_syscall_64+0xac/0x200 [ 1493.125562][ T6861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1493.125656][ T6861] ? clear_bhb_loop+0x40/0x90 [ 1493.125686][ T6861] ? clear_bhb_loop+0x40/0x90 [ 1493.125716][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.125771][ T6861] RIP: 0033:0x7fb31465e969 [ 1493.125791][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1493.125810][ T6861] RSP: 002b:00007fb312cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 1493.125833][ T6861] RAX: ffffffffffffffda RBX: 00007fb314885fa0 RCX: 00007fb31465e969 [ 1493.125924][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1493.125941][ T6861] RBP: 00007fb312cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.125958][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.125972][ T6861] R13: 0000000000000000 R14: 00007fb314885fa0 R15: 00007ffd82354b88 [ 1493.126005][ T6861] [ 1493.772168][ T6880] vhci_hcd: invalid port number 96 [ 1493.777358][ T6880] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1494.002534][ T6882] netlink: 'syz.4.24678': attribute type 10 has an invalid length. [ 1494.031236][ T6882] team0: Port device netdevsim1 added [ 1494.047950][ T6882] netlink: 'syz.4.24678': attribute type 10 has an invalid length. [ 1494.089745][ T6882] team0: Port device netdevsim1 removed [ 1494.100815][ T6882] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1494.119746][ T6882] bond1: entered promiscuous mode [ 1494.125004][ T6882] bond1: entered allmulticast mode [ 1494.510737][ T6903] __nla_validate_parse: 9 callbacks suppressed [ 1494.510752][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24685'. [ 1494.565506][ T6882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1494.604809][ T6882] bond1 (unregistering): Released all slaves [ 1494.844262][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24693'. [ 1494.856515][ T6923] bridge0: entered promiscuous mode [ 1494.865446][ T6923] bridge0: port 3(macvlan2) entered blocking state [ 1494.872249][ T6923] bridge0: port 3(macvlan2) entered disabled state [ 1494.880524][ T6923] macvlan2: entered allmulticast mode [ 1494.886096][ T6923] bridge0: entered allmulticast mode [ 1494.892251][ T6923] macvlan2: left allmulticast mode [ 1494.897562][ T6923] bridge0: left allmulticast mode [ 1494.904921][ T6923] bridge0: left promiscuous mode [ 1495.118341][ T6939] FAULT_INJECTION: forcing a failure. [ 1495.118341][ T6939] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.134999][ T6939] CPU: 0 UID: 0 PID: 6939 Comm: syz.7.24699 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1495.135028][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1495.135042][ T6939] Call Trace: [ 1495.135049][ T6939] [ 1495.135058][ T6939] __dump_stack+0x1d/0x30 [ 1495.135086][ T6939] dump_stack_lvl+0xe8/0x140 [ 1495.135124][ T6939] dump_stack+0x15/0x1b [ 1495.135141][ T6939] should_fail_ex+0x265/0x280 [ 1495.135164][ T6939] should_failslab+0x8c/0xb0 [ 1495.135258][ T6939] __kmalloc_noprof+0xa5/0x3e0 [ 1495.135289][ T6939] ? security_perf_event_alloc+0x48/0x120 [ 1495.135347][ T6939] security_perf_event_alloc+0x48/0x120 [ 1495.135379][ T6939] perf_event_alloc+0x152f/0x1680 [ 1495.135465][ T6939] __se_sys_perf_event_open+0x4a5/0x11c0 [ 1495.135571][ T6939] __x64_sys_perf_event_open+0x67/0x80 [ 1495.135625][ T6939] x64_sys_call+0x27ec/0x2fb0 [ 1495.135648][ T6939] do_syscall_64+0xd2/0x200 [ 1495.135686][ T6939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1495.135717][ T6939] ? clear_bhb_loop+0x40/0x90 [ 1495.135745][ T6939] ? clear_bhb_loop+0x40/0x90 [ 1495.135768][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.135790][ T6939] RIP: 0033:0x7fe4e104e969 [ 1495.135805][ T6939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.135866][ T6939] RSP: 002b:00007fe4df6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1495.135887][ T6939] RAX: ffffffffffffffda RBX: 00007fe4e1275fa0 RCX: 00007fe4e104e969 [ 1495.135902][ T6939] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 1495.135981][ T6939] RBP: 00007fe4df6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.136017][ T6939] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1495.136030][ T6939] R13: 0000000000000000 R14: 00007fe4e1275fa0 R15: 00007ffd08f34818 [ 1495.136055][ T6939] [ 1495.358871][ T6938] FAULT_INJECTION: forcing a failure. [ 1495.358871][ T6938] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.371589][ T6938] CPU: 1 UID: 0 PID: 6938 Comm: syz.6.24698 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1495.371626][ T6938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1495.371643][ T6938] Call Trace: [ 1495.371652][ T6938] [ 1495.371662][ T6938] __dump_stack+0x1d/0x30 [ 1495.371682][ T6938] dump_stack_lvl+0xe8/0x140 [ 1495.371702][ T6938] dump_stack+0x15/0x1b [ 1495.371718][ T6938] should_fail_ex+0x265/0x280 [ 1495.371740][ T6938] should_failslab+0x8c/0xb0 [ 1495.371773][ T6938] kmem_cache_alloc_noprof+0x50/0x310 [ 1495.371811][ T6938] ? mas_alloc_nodes+0x265/0x520 [ 1495.371853][ T6938] mas_alloc_nodes+0x265/0x520 [ 1495.371896][ T6938] mas_preallocate+0x32b/0x510 [ 1495.371938][ T6938] __split_vma+0x239/0x610 [ 1495.371966][ T6938] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1495.372008][ T6938] vms_gather_munmap_vmas+0x172/0x7a0 [ 1495.372044][ T6938] ? selinux_file_open+0x2df/0x330 [ 1495.372083][ T6938] do_vmi_align_munmap+0x1a4/0x3d0 [ 1495.372117][ T6938] do_vmi_munmap+0x1db/0x220 [ 1495.372145][ T6938] do_munmap+0x8a/0xc0 [ 1495.372177][ T6938] mremap_to+0x35b/0x540 [ 1495.372210][ T6938] __se_sys_mremap+0x549/0x6f0 [ 1495.372250][ T6938] ? ksys_write+0x192/0x1a0 [ 1495.372280][ T6938] __x64_sys_mremap+0x67/0x80 [ 1495.372316][ T6938] x64_sys_call+0x2ba9/0x2fb0 [ 1495.372337][ T6938] do_syscall_64+0xd2/0x200 [ 1495.372368][ T6938] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1495.372402][ T6938] ? clear_bhb_loop+0x40/0x90 [ 1495.372430][ T6938] ? clear_bhb_loop+0x40/0x90 [ 1495.372459][ T6938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.372485][ T6938] RIP: 0033:0x7f65c16ee969 [ 1495.372501][ T6938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.372529][ T6938] RSP: 002b:00007f65bfd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1495.372553][ T6938] RAX: ffffffffffffffda RBX: 00007f65c1915fa0 RCX: 00007f65c16ee969 [ 1495.372565][ T6938] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 1495.372578][ T6938] RBP: 00007f65bfd57090 R08: 0000200000ffd000 R09: 0000000000000000 [ 1495.372590][ T6938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1495.372605][ T6938] R13: 0000000000000000 R14: 00007f65c1915fa0 R15: 00007ffc49136318 [ 1495.372630][ T6938] [ 1495.628781][ T6944] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1495.635354][ T6944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1495.643110][ T6944] vhci_hcd vhci_hcd.0: Device attached [ 1495.656351][ T6945] vhci_hcd: connection closed [ 1495.656599][T14432] vhci_hcd: stop threads [ 1495.665674][T14432] vhci_hcd: release socket [ 1495.670144][T14432] vhci_hcd: disconnect device [ 1495.727134][ T6949] netlink: 'syz.4.24701': attribute type 10 has an invalid length. [ 1495.744080][ T6949] bond0: (slave netdevsim1): Releasing backup interface [ 1495.753169][ T6949] team0: Port device netdevsim1 added [ 1495.762176][ T6949] netlink: 'syz.4.24701': attribute type 10 has an invalid length. [ 1495.772243][ T6949] team0: Port device netdevsim1 removed [ 1495.781885][ T6949] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1495.795550][ T6956] netlink: 'syz.9.24705': attribute type 10 has an invalid length. [ 1495.799509][ T6949] bond1: entered promiscuous mode [ 1495.808773][ T6949] bond1: entered allmulticast mode [ 1495.815432][ T6949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1495.827168][ T6949] bond1 (unregistering): Released all slaves [ 1495.844699][ T6956] team0: Device hsr_slave_0 failed to register rx_handler [ 1496.310599][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 1496.310618][ T29] audit: type=1326 audit(2265.292:133540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.340139][ T29] audit: type=1326 audit(2265.292:133541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.363387][ T29] audit: type=1326 audit(2265.292:133542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.386608][ T29] audit: type=1326 audit(2265.292:133543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.409862][ T29] audit: type=1326 audit(2265.292:133544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.433075][ T29] audit: type=1326 audit(2265.292:133545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.456251][ T29] audit: type=1326 audit(2265.292:133546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4e1045927 code=0x7ffc0000 [ 1496.479422][ T29] audit: type=1326 audit(2265.292:133547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4e0feab39 code=0x7ffc0000 [ 1496.502511][ T29] audit: type=1326 audit(2265.292:133548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.525814][ T29] audit: type=1326 audit(2265.292:133549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.7.24716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1496.744435][ T7011] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24724'. [ 1496.753773][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24724'. [ 1496.764517][ T7011] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24724'. [ 1496.775777][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24724'. [ 1496.905899][ T7037] SELinux: syz.6.24728 (7037) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1496.999804][ T7037] netlink: 'syz.6.24728': attribute type 10 has an invalid length. [ 1497.010662][ T7037] bond0: (slave netdevsim1): Releasing backup interface [ 1497.022585][ T7037] netlink: 'syz.6.24728': attribute type 10 has an invalid length. [ 1497.032431][ T7037] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1497.257437][ T7075] netlink: 'syz.6.24733': attribute type 10 has an invalid length. [ 1497.275895][ T7075] bond0: (slave netdevsim1): Releasing backup interface [ 1497.291438][ T7075] netlink: 'syz.6.24733': attribute type 10 has an invalid length. [ 1497.302054][ T7075] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1497.326781][ T7075] bond1: entered promiscuous mode [ 1497.332073][ T7075] bond1: entered allmulticast mode [ 1497.350244][ T7075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1497.362594][ T7075] bond1 (unregistering): Released all slaves [ 1497.373394][ T7099] netlink: 72 bytes leftover after parsing attributes in process `syz.9.24735'. [ 1497.388155][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24735'. [ 1497.400044][ T7099] netlink: 72 bytes leftover after parsing attributes in process `syz.9.24735'. [ 1497.410103][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24735'. [ 1497.556981][ T7127] bridge0: entered promiscuous mode [ 1497.563613][ T7127] bridge0: port 3(macvlan2) entered blocking state [ 1497.570451][ T7127] bridge0: port 3(macvlan2) entered disabled state [ 1497.577245][ T7127] macvlan2: entered allmulticast mode [ 1497.582729][ T7127] bridge0: entered allmulticast mode [ 1497.588490][ T7127] macvlan2: left allmulticast mode [ 1497.593654][ T7127] bridge0: left allmulticast mode [ 1497.599056][ T7127] bridge0: left promiscuous mode [ 1497.926593][ T7143] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1497.933137][ T7143] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1497.941064][ T7143] vhci_hcd vhci_hcd.0: Device attached [ 1497.950784][ T7144] vhci_hcd: connection closed [ 1497.951353][ T2805] vhci_hcd: stop threads [ 1497.960514][ T2805] vhci_hcd: release socket [ 1497.965068][ T2805] vhci_hcd: disconnect device [ 1498.496051][ T7156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1498.860887][ T7186] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1498.865140][ T7185] 9pnet_fd: Insufficient options for proto=fd [ 1498.867421][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1498.881250][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 1498.910768][ T7187] vhci_hcd: connection closed [ 1498.911173][ T2808] vhci_hcd: stop threads [ 1498.920191][ T2808] vhci_hcd: release socket [ 1498.924726][ T2808] vhci_hcd: disconnect device [ 1499.232977][ T7216] vhci_hcd: invalid port number 96 [ 1499.238234][ T7216] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1499.648830][ T7232] __nla_validate_parse: 2 callbacks suppressed [ 1499.648847][ T7232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24778'. [ 1499.741740][ T7239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1499.777629][ T7239] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1499.805323][ T7239] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1499.897168][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24785'. [ 1499.909584][ T7249] bridge0: entered promiscuous mode [ 1499.916069][ T7249] bridge0: port 3(macvlan2) entered blocking state [ 1499.922703][ T7249] bridge0: port 3(macvlan2) entered disabled state [ 1499.989195][ T7249] macvlan2: entered allmulticast mode [ 1499.994630][ T7249] bridge0: entered allmulticast mode [ 1500.000655][ T7249] macvlan2: left allmulticast mode [ 1500.005804][ T7249] bridge0: left allmulticast mode [ 1500.041553][ T7249] bridge0: left promiscuous mode [ 1500.133018][ T7254] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1500.139710][ T7254] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1500.147462][ T7254] vhci_hcd vhci_hcd.0: Device attached [ 1500.163738][ T7255] vhci_hcd: connection closed [ 1500.163886][ T8444] vhci_hcd: stop threads [ 1500.172984][ T8444] vhci_hcd: release socket [ 1500.177414][ T8444] vhci_hcd: disconnect device [ 1500.871448][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.8.24792'. [ 1501.172187][ T7297] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1501.258881][ T7304] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1501.265477][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1501.273304][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 1501.284615][ T7305] vhci_hcd: connection closed [ 1501.285881][T14441] vhci_hcd: stop threads [ 1501.295064][T14441] vhci_hcd: release socket [ 1501.299552][T14441] vhci_hcd: disconnect device [ 1501.319272][ T29] kauditd_printk_skb: 1339 callbacks suppressed [ 1501.319292][ T29] audit: type=1326 audit(2270.302:134889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f358a2b5927 code=0x7ffc0000 [ 1501.349036][ T29] audit: type=1326 audit(2270.302:134890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a25ab39 code=0x7ffc0000 [ 1501.372257][ T29] audit: type=1326 audit(2270.302:134891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1501.395674][ T29] audit: type=1326 audit(2270.302:134892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f358a2b5927 code=0x7ffc0000 [ 1501.418759][ T29] audit: type=1326 audit(2270.302:134893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a25ab39 code=0x7ffc0000 [ 1501.441829][ T29] audit: type=1326 audit(2270.302:134894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1501.465114][ T29] audit: type=1326 audit(2270.302:134895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f358a2b5927 code=0x7ffc0000 [ 1501.488299][ T29] audit: type=1326 audit(2270.302:134896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f358a25ab39 code=0x7ffc0000 [ 1501.511503][ T29] audit: type=1326 audit(2270.302:134897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1501.534736][ T29] audit: type=1326 audit(2270.332:134898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.4.24806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f358a2b5927 code=0x7ffc0000 [ 1502.000985][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24808'. [ 1502.333522][ T7326] FAULT_INJECTION: forcing a failure. [ 1502.333522][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.346475][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.6.24810 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1502.346553][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1502.346566][ T7326] Call Trace: [ 1502.346573][ T7326] [ 1502.346607][ T7326] __dump_stack+0x1d/0x30 [ 1502.346634][ T7326] dump_stack_lvl+0xe8/0x140 [ 1502.346712][ T7326] dump_stack+0x15/0x1b [ 1502.346729][ T7326] should_fail_ex+0x265/0x280 [ 1502.346754][ T7326] should_failslab+0x8c/0xb0 [ 1502.346780][ T7326] kmem_cache_alloc_noprof+0x50/0x310 [ 1502.346815][ T7326] ? getname_flags+0x80/0x3b0 [ 1502.346921][ T7326] getname_flags+0x80/0x3b0 [ 1502.346949][ T7326] do_sys_openat2+0x60/0x110 [ 1502.346985][ T7326] __x64_sys_creat+0x65/0x90 [ 1502.347025][ T7326] x64_sys_call+0x114d/0x2fb0 [ 1502.347047][ T7326] do_syscall_64+0xd2/0x200 [ 1502.347077][ T7326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1502.347109][ T7326] ? clear_bhb_loop+0x40/0x90 [ 1502.347196][ T7326] ? clear_bhb_loop+0x40/0x90 [ 1502.347218][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.347239][ T7326] RIP: 0033:0x7f65c16ee969 [ 1502.347255][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.347273][ T7326] RSP: 002b:00007f65bfd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1502.347296][ T7326] RAX: ffffffffffffffda RBX: 00007f65c1915fa0 RCX: 00007f65c16ee969 [ 1502.347327][ T7326] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 1502.347345][ T7326] RBP: 00007f65bfd57090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.347362][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.347448][ T7326] R13: 0000000000000000 R14: 00007f65c1915fa0 R15: 00007ffc49136318 [ 1502.347473][ T7326] [ 1502.752293][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24816'. [ 1502.764453][ T7356] bridge0: entered promiscuous mode [ 1502.772239][ T7356] bridge0: port 3(macvlan2) entered blocking state [ 1502.778848][ T7356] bridge0: port 3(macvlan2) entered disabled state [ 1502.785638][ T7356] macvlan2: entered allmulticast mode [ 1502.791113][ T7356] bridge0: entered allmulticast mode [ 1502.798266][ T7356] macvlan2: left allmulticast mode [ 1502.803449][ T7356] bridge0: left allmulticast mode [ 1502.809157][ T7356] bridge0: left promiscuous mode [ 1502.988950][ T7385] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1502.995519][ T7385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1503.003377][ T7385] vhci_hcd vhci_hcd.0: Device attached [ 1503.017335][ T7388] vhci_hcd: connection closed [ 1503.017758][ T8444] vhci_hcd: stop threads [ 1503.027533][ T8444] vhci_hcd: release socket [ 1503.032012][ T8444] vhci_hcd: disconnect device [ 1504.092720][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.9.24834'. [ 1504.102384][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24834'. [ 1504.366972][ T7494] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1504.373586][ T7494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1504.381400][ T7494] vhci_hcd vhci_hcd.0: Device attached [ 1504.394325][ T7495] vhci_hcd: connection closed [ 1504.394699][T14432] vhci_hcd: stop threads [ 1504.403773][T14432] vhci_hcd: release socket [ 1504.408206][T14432] vhci_hcd: disconnect device [ 1504.441989][ T7487] netlink: 'syz.9.24837': attribute type 10 has an invalid length. [ 1504.452658][ T7487] netlink: 'syz.9.24837': attribute type 10 has an invalid length. [ 1504.462741][ T7487] team0: Port device netdevsim1 removed [ 1504.471682][ T7487] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1504.490205][ T7487] bond2: entered promiscuous mode [ 1504.495302][ T7487] bond2: entered allmulticast mode [ 1504.501006][ T7487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1504.511756][ T7487] bond2 (unregistering): Released all slaves [ 1504.887183][ T7521] netlink: 'syz.4.24840': attribute type 10 has an invalid length. [ 1504.911217][ T7521] bond0: (slave netdevsim1): Releasing backup interface [ 1504.930034][ T7521] team0: Port device netdevsim1 added [ 1504.956134][ T7521] netlink: 'syz.4.24840': attribute type 10 has an invalid length. [ 1504.973050][ T7542] netlink: 96 bytes leftover after parsing attributes in process `syz.7.24841'. [ 1504.994575][ T7521] team0: Port device netdevsim1 removed [ 1505.017003][ T7521] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1505.048328][ T7546] bond1: entered promiscuous mode [ 1505.053514][ T7546] bond1: entered allmulticast mode [ 1505.071670][ T7546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1505.088453][ T7546] bond1 (unregistering): Released all slaves [ 1505.094998][ T7553] futex_wake_op: syz.7.24845 tries to shift op by -1; fix this program [ 1505.112091][ T7553] pimreg: entered allmulticast mode [ 1505.118030][ T7553] pimreg: left allmulticast mode [ 1505.235622][ T7564] futex_wake_op: syz.7.24849 tries to shift op by -1; fix this program [ 1505.267858][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24850'. [ 1505.282223][ T7564] pimreg: entered allmulticast mode [ 1505.282913][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24850'. [ 1505.299022][ T7564] pimreg: left allmulticast mode [ 1505.327261][ T7571] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1505.333823][ T7571] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1505.341582][ T7571] vhci_hcd vhci_hcd.0: Device attached [ 1505.368635][ T7572] vhci_hcd: connection closed [ 1505.369005][T22577] vhci_hcd: stop threads [ 1505.378089][T22577] vhci_hcd: release socket [ 1505.382580][T22577] vhci_hcd: disconnect device [ 1505.437251][ T7588] netlink: 96 bytes leftover after parsing attributes in process `syz.9.24854'. [ 1505.782637][ T7643] netlink: 96 bytes leftover after parsing attributes in process `syz.4.24868'. [ 1505.857273][ T7654] veth1_to_bond: entered allmulticast mode [ 1505.886814][ T7654] veth1_to_bond: left allmulticast mode [ 1505.957740][ T7662] syzkaller0: entered promiscuous mode [ 1505.963289][ T7662] syzkaller0: entered allmulticast mode [ 1506.185918][ T7705] netlink: 87 bytes leftover after parsing attributes in process `syz.8.24879'. [ 1506.209201][ T7706] netlink: 'syz.8.24879': attribute type 10 has an invalid length. [ 1506.218045][ T7705] netlink: 'syz.8.24879': attribute type 10 has an invalid length. [ 1506.230336][ T7706] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1506.347515][ T7725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7725 comm=syz.4.24881 [ 1506.512706][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 1506.512722][ T29] audit: type=1326 audit(2275.492:135864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.560318][ T29] audit: type=1326 audit(2275.532:135865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.583603][ T29] audit: type=1326 audit(2275.532:135866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.606873][ T29] audit: type=1326 audit(2275.532:135867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.630139][ T29] audit: type=1326 audit(2275.532:135868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.653429][ T29] audit: type=1326 audit(2275.532:135869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.677016][ T29] audit: type=1326 audit(2275.532:135870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65c16e5927 code=0x7ffc0000 [ 1506.700179][ T29] audit: type=1326 audit(2275.532:135871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65c168ab39 code=0x7ffc0000 [ 1506.723323][ T29] audit: type=1326 audit(2275.532:135872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.746592][ T29] audit: type=1326 audit(2275.532:135873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.6.24891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1506.840494][ T7734] netlink: 'syz.9.24884': attribute type 3 has an invalid length. [ 1507.044200][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24893'. [ 1507.513293][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24897'. [ 1507.524280][ T7757] netlink: 'syz.7.24897': attribute type 3 has an invalid length. [ 1507.706919][ T7767] futex_wake_op: syz.8.24901 tries to shift op by -1; fix this program [ 1507.794037][ T7775] netlink: 'syz.8.24905': attribute type 10 has an invalid length. [ 1507.804157][ T7775] bond0: (slave netdevsim1): Releasing backup interface [ 1507.813253][ T7775] netlink: 'syz.8.24905': attribute type 10 has an invalid length. [ 1507.823497][ T7775] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1507.842086][ T7775] bond1: entered promiscuous mode [ 1507.847231][ T7775] bond1: entered allmulticast mode [ 1507.854226][ T7775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1507.888249][ T7775] bond1 (unregistering): Released all slaves [ 1508.041934][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24906'. [ 1508.171117][ T7796] futex_wake_op: syz.6.24913 tries to shift op by -1; fix this program [ 1508.291353][ T7801] vhci_hcd: invalid port number 96 [ 1508.296641][ T7801] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1508.423344][ T7801] team0 (unregistering): Port device team_slave_0 removed [ 1508.432991][ T7801] team0 (unregistering): Port device team_slave_1 removed [ 1508.749872][ T7832] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1508.756431][ T7832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1508.764243][ T7832] vhci_hcd vhci_hcd.0: Device attached [ 1508.775216][ T7833] vhci_hcd: connection closed [ 1508.775488][T22577] vhci_hcd: stop threads [ 1508.784562][T22577] vhci_hcd: release socket [ 1508.789104][T22577] vhci_hcd: disconnect device [ 1509.387858][ T7845] FAULT_INJECTION: forcing a failure. [ 1509.387858][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.400597][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.6.24931 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1509.400648][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1509.400743][ T7845] Call Trace: [ 1509.400752][ T7845] [ 1509.400763][ T7845] __dump_stack+0x1d/0x30 [ 1509.400784][ T7845] dump_stack_lvl+0xe8/0x140 [ 1509.400865][ T7845] dump_stack+0x15/0x1b [ 1509.400889][ T7845] should_fail_ex+0x265/0x280 [ 1509.400927][ T7845] ? copy_cgroup_ns+0x162/0x370 [ 1509.400963][ T7845] should_failslab+0x8c/0xb0 [ 1509.400992][ T7845] __kmalloc_cache_noprof+0x4c/0x320 [ 1509.401073][ T7845] ? inc_ucount+0xcb/0x140 [ 1509.401169][ T7845] copy_cgroup_ns+0x162/0x370 [ 1509.401207][ T7845] create_new_namespaces+0x1c2/0x3d0 [ 1509.401274][ T7845] unshare_nsproxy_namespaces+0xe8/0x120 [ 1509.401317][ T7845] ksys_unshare+0x3d0/0x6d0 [ 1509.401402][ T7845] ? ksys_write+0x15f/0x1a0 [ 1509.401426][ T7845] __x64_sys_unshare+0x1f/0x30 [ 1509.401558][ T7845] x64_sys_call+0x2d4b/0x2fb0 [ 1509.401583][ T7845] do_syscall_64+0xd2/0x200 [ 1509.401614][ T7845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1509.401723][ T7845] ? clear_bhb_loop+0x40/0x90 [ 1509.401748][ T7845] ? clear_bhb_loop+0x40/0x90 [ 1509.401914][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.401937][ T7845] RIP: 0033:0x7f65c16ee969 [ 1509.402027][ T7845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.402067][ T7845] RSP: 002b:00007f65bfd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1509.402088][ T7845] RAX: ffffffffffffffda RBX: 00007f65c1915fa0 RCX: 00007f65c16ee969 [ 1509.402103][ T7845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000400 [ 1509.402116][ T7845] RBP: 00007f65bfd57090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.402128][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.402140][ T7845] R13: 0000000000000000 R14: 00007f65c1915fa0 R15: 00007ffc49136318 [ 1509.402160][ T7845] [ 1509.733794][ T7847] vhci_hcd: invalid port number 96 [ 1509.739025][ T7847] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1510.329160][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24936'. [ 1510.380364][ T7866] netlink: 96 bytes leftover after parsing attributes in process `syz.4.24938'. [ 1510.672733][ T7889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7889 comm=syz.4.24944 [ 1510.790801][ T7893] netlink: 96 bytes leftover after parsing attributes in process `syz.9.24949'. [ 1510.971882][ T7906] vhci_hcd: invalid port number 96 [ 1510.977067][ T7906] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1511.012324][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24952'. [ 1511.201388][ T7909] vhci_hcd: invalid port number 96 [ 1511.206564][ T7909] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1511.317704][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 1511.328125][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 1511.439825][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24958'. [ 1511.520577][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 1511.520592][ T29] audit: type=1326 audit(2280.502:136324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.553453][ T29] audit: type=1326 audit(2280.532:136325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.576148][ T29] audit: type=1326 audit(2280.532:136326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.598781][ T29] audit: type=1326 audit(2280.532:136327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.621275][ T29] audit: type=1326 audit(2280.532:136328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.643868][ T29] audit: type=1326 audit(2280.532:136329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.666430][ T29] audit: type=1326 audit(2280.532:136330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.688988][ T29] audit: type=1326 audit(2280.532:136331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.711616][ T29] audit: type=1326 audit(2280.532:136332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.734272][ T29] audit: type=1326 audit(2280.532:136333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f358a2be969 code=0x7ffc0000 [ 1511.758323][ T7923] veth1_to_bond: entered allmulticast mode [ 1511.766513][ T7923] veth1_to_bond: left allmulticast mode [ 1511.772454][ T7925] netlink: 96 bytes leftover after parsing attributes in process `syz.8.24963'. [ 1512.407017][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24966'. [ 1512.416469][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.423918][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.434018][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.441521][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.528985][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24970'. [ 1512.554160][ T7941] bridge0: entered promiscuous mode [ 1512.562254][ T7941] bridge0: port 3(macvlan2) entered blocking state [ 1512.569259][ T7941] bridge0: port 3(macvlan2) entered disabled state [ 1512.576514][ T7941] macvlan2: entered allmulticast mode [ 1512.581984][ T7941] bridge0: entered allmulticast mode [ 1512.588581][ T7941] macvlan2: left allmulticast mode [ 1512.593898][ T7941] bridge0: left allmulticast mode [ 1512.599742][ T7941] bridge0: left promiscuous mode [ 1512.626608][ T7937] netlink: 'syz.9.24967': attribute type 10 has an invalid length. [ 1512.637086][ T7937] bond0: (slave netdevsim1): Releasing backup interface [ 1512.650700][ T7937] netlink: 'syz.9.24967': attribute type 10 has an invalid length. [ 1512.660494][ T7937] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1512.684034][ T7937] bond2: entered promiscuous mode [ 1512.689183][ T7937] bond2: entered allmulticast mode [ 1512.746170][ T7937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1512.773339][ T7937] bond2 (unregistering): Released all slaves [ 1512.786559][ T7955] veth1_to_bond: entered allmulticast mode [ 1512.794298][ T7955] veth1_to_bond: left allmulticast mode [ 1512.801066][ T7960] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1512.807622][ T7960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1512.815506][ T7960] vhci_hcd vhci_hcd.0: Device attached [ 1512.827546][ T7963] vhci_hcd: connection closed [ 1512.827839][ T2805] vhci_hcd: stop threads [ 1512.836878][ T2805] vhci_hcd: release socket [ 1512.841327][ T2805] vhci_hcd: disconnect device [ 1512.960325][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24978'. [ 1513.760181][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24986'. [ 1513.771801][ T7988] bridge0: entered promiscuous mode [ 1513.778627][ T7988] bridge0: port 3(macvlan2) entered blocking state [ 1513.785276][ T7988] bridge0: port 3(macvlan2) entered disabled state [ 1513.792619][ T7988] macvlan2: entered allmulticast mode [ 1513.798073][ T7988] bridge0: entered allmulticast mode [ 1513.820310][ T7988] macvlan2: left allmulticast mode [ 1513.825508][ T7988] bridge0: left allmulticast mode [ 1513.837031][ T7988] bridge0: left promiscuous mode [ 1514.091004][ T8001] vhci_hcd: invalid port number 96 [ 1514.096166][ T8001] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1515.260926][ T8042] vhci_hcd: invalid port number 96 [ 1515.266205][ T8042] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1515.331772][ T8036] netlink: 'syz.6.25003': attribute type 10 has an invalid length. [ 1515.359706][ T8036] bond0: (slave netdevsim1): Releasing backup interface [ 1515.387617][ T8036] netlink: 'syz.6.25003': attribute type 10 has an invalid length. [ 1515.417725][ T8036] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1515.494926][ T8046] bond1: entered promiscuous mode [ 1515.500049][ T8046] bond1: entered allmulticast mode [ 1515.526713][ T8046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1515.542635][ T8046] bond1 (unregistering): Released all slaves [ 1516.030680][ T8069] __nla_validate_parse: 1 callbacks suppressed [ 1516.030758][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25014'. [ 1516.057144][ T8073] 9pnet_fd: Insufficient options for proto=fd [ 1516.184006][ T8082] netlink: 36 bytes leftover after parsing attributes in process `syz.9.25019'. [ 1516.611773][ T8093] netlink: 'syz.6.25024': attribute type 10 has an invalid length. [ 1516.631057][ T8093] bond0: (slave netdevsim1): Releasing backup interface [ 1516.639930][ T8093] netlink: 'syz.6.25024': attribute type 10 has an invalid length. [ 1516.649738][ T8093] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1516.651298][ T8097] vhci_hcd: invalid port number 96 [ 1516.663848][ T8097] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1516.673202][ T8093] bond1: entered promiscuous mode [ 1516.678331][ T8093] bond1: entered allmulticast mode [ 1516.687768][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1516.703112][ T8093] bond1 (unregistering): Released all slaves [ 1516.768913][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 1516.768931][ T29] audit: type=1326 audit(2285.752:136834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8092 comm="syz.6.25024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65c16ee969 code=0x0 [ 1516.887751][ T29] audit: type=1326 audit(2285.862:136835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1516.913325][ T8112] veth1_to_bond: entered allmulticast mode [ 1516.913691][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25027'. [ 1516.920439][ T8112] veth1_to_bond: left allmulticast mode [ 1516.937845][ T8113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8113 comm=syz.9.25029 [ 1516.950757][ T29] audit: type=1326 audit(2285.892:136836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1516.973431][ T29] audit: type=1326 audit(2285.892:136837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1516.995943][ T29] audit: type=1326 audit(2285.892:136838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.018483][ T29] audit: type=1326 audit(2285.892:136839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.041073][ T29] audit: type=1326 audit(2285.892:136840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.063669][ T29] audit: type=1326 audit(2285.892:136841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.086262][ T29] audit: type=1326 audit(2285.892:136842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.109298][ T29] audit: type=1326 audit(2285.892:136843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1517.481282][ T8135] vhci_hcd: invalid port number 96 [ 1517.486472][ T8135] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1517.508048][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25040'. [ 1517.681836][ T8153] siw: device registration error -23 [ 1517.815416][ T8168] netlink: 'syz.8.25050': attribute type 10 has an invalid length. [ 1517.835580][ T8168] bond0: (slave netdevsim1): Releasing backup interface [ 1517.854688][ T8168] netlink: 'syz.8.25050': attribute type 10 has an invalid length. [ 1517.874261][ T8168] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1517.891451][ T8168] bond1: entered promiscuous mode [ 1517.896557][ T8168] bond1: entered allmulticast mode [ 1517.902224][ T8168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1517.913536][ T8168] bond1 (unregistering): Released all slaves [ 1518.365948][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25054'. [ 1518.531024][ T8192] vhci_hcd: invalid port number 96 [ 1518.536188][ T8192] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1518.709825][ T8200] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1518.716426][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1518.724178][ T8200] vhci_hcd vhci_hcd.0: Device attached [ 1518.737483][ T8201] vhci_hcd: connection closed [ 1518.737665][ T8444] vhci_hcd: stop threads [ 1518.746959][ T8444] vhci_hcd: release socket [ 1518.751553][ T8444] vhci_hcd: disconnect device [ 1518.819944][ T8212] FAULT_INJECTION: forcing a failure. [ 1518.819944][ T8212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.833130][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.6.25066 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1518.833159][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1518.833174][ T8212] Call Trace: [ 1518.833183][ T8212] [ 1518.833206][ T8212] __dump_stack+0x1d/0x30 [ 1518.833229][ T8212] dump_stack_lvl+0xe8/0x140 [ 1518.833251][ T8212] dump_stack+0x15/0x1b [ 1518.833337][ T8212] should_fail_ex+0x265/0x280 [ 1518.833360][ T8212] should_fail+0xb/0x20 [ 1518.833379][ T8212] should_fail_usercopy+0x1a/0x20 [ 1518.833404][ T8212] _copy_from_user+0x1c/0xb0 [ 1518.833457][ T8212] ___sys_sendmsg+0xc1/0x1d0 [ 1518.833588][ T8212] __x64_sys_sendmsg+0xd4/0x160 [ 1518.833627][ T8212] x64_sys_call+0x2999/0x2fb0 [ 1518.833651][ T8212] do_syscall_64+0xd2/0x200 [ 1518.833705][ T8212] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1518.833735][ T8212] ? clear_bhb_loop+0x40/0x90 [ 1518.833759][ T8212] ? clear_bhb_loop+0x40/0x90 [ 1518.833833][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.833856][ T8212] RIP: 0033:0x7f65c16ee969 [ 1518.833873][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.833894][ T8212] RSP: 002b:00007f65bfd57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1518.833916][ T8212] RAX: ffffffffffffffda RBX: 00007f65c1915fa0 RCX: 00007f65c16ee969 [ 1518.833930][ T8212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1518.833943][ T8212] RBP: 00007f65bfd57090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.833957][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.833970][ T8212] R13: 0000000000000000 R14: 00007f65c1915fa0 R15: 00007ffc49136318 [ 1518.833991][ T8212] [ 1519.072170][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25070'. [ 1519.231690][ T8227] vhci_hcd: invalid port number 96 [ 1519.236855][ T8227] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1519.752420][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25080'. [ 1520.102777][ T8266] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1520.109341][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1520.117159][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 1520.287641][ T8271] netlink: 'syz.4.25086': attribute type 10 has an invalid length. [ 1520.295669][ T8271] netlink: 'syz.4.25086': attribute type 19 has an invalid length. [ 1520.304054][ T8271] netlink: 156 bytes leftover after parsing attributes in process `syz.4.25086'. [ 1520.321557][ T8267] vhci_hcd: connection closed [ 1520.321853][ T2805] vhci_hcd: stop threads [ 1520.330898][ T2805] vhci_hcd: release socket [ 1520.335373][ T2805] vhci_hcd: disconnect device [ 1520.340903][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25087'. [ 1520.347214][ T8271] netlink: 'syz.4.25086': attribute type 1 has an invalid length. [ 1520.354265][ T8274] bridge0: entered promiscuous mode [ 1520.364604][ T8274] bridge0: port 3(macvlan2) entered blocking state [ 1520.371315][ T8274] bridge0: port 3(macvlan2) entered disabled state [ 1520.378098][ T8274] macvlan2: entered allmulticast mode [ 1520.383540][ T8274] bridge0: entered allmulticast mode [ 1520.389503][ T8274] macvlan2: left allmulticast mode [ 1520.394652][ T8274] bridge0: left allmulticast mode [ 1520.400380][ T8274] bridge0: left promiscuous mode [ 1520.415860][ T8278] bond1 (unregistering): Released all slaves [ 1520.630849][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25091'. [ 1520.643310][ T8288] bridge0: entered promiscuous mode [ 1520.655754][ T8288] bridge0: port 3(macvlan2) entered blocking state [ 1520.662413][ T8288] bridge0: port 3(macvlan2) entered disabled state [ 1520.670414][ T8288] macvlan2: entered allmulticast mode [ 1520.676194][ T8288] bridge0: entered allmulticast mode [ 1520.685206][ T8288] macvlan2: left allmulticast mode [ 1520.690493][ T8288] bridge0: left allmulticast mode [ 1520.732575][ T8288] bridge0: left promiscuous mode [ 1520.978135][ T8294] netlink: 'syz.4.25093': attribute type 10 has an invalid length. [ 1521.003991][ T8294] bond0: (slave netdevsim1): Releasing backup interface [ 1521.016458][ T8294] team0: Port device netdevsim1 added [ 1521.027014][ T8294] netlink: 'syz.4.25093': attribute type 10 has an invalid length. [ 1521.046421][ T8294] team0: Port device netdevsim1 removed [ 1521.056342][ T8294] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1521.066612][ T8309] wg1: entered promiscuous mode [ 1521.071531][ T8309] wg1: entered allmulticast mode [ 1521.081648][ T8305] vhci_hcd: invalid port number 96 [ 1521.086917][ T8305] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1521.088589][ T8309] netlink: 'syz.8.25097': attribute type 27 has an invalid length. [ 1521.115277][ T8294] bond1: entered promiscuous mode [ 1521.120517][ T8294] bond1: entered allmulticast mode [ 1521.128860][ T8294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1521.143397][ T8294] bond1 (unregistering): Released all slaves [ 1521.187749][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.195067][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.245857][ T8309] wg1: left promiscuous mode [ 1521.250627][ T8309] wg1: left allmulticast mode [ 1521.444683][ T8309] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.453788][ T8309] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.462909][ T8309] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.472077][ T8309] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.492425][ T8309] wireguard0: left promiscuous mode [ 1521.497771][ T8309] wireguard0: left allmulticast mode [ 1521.620434][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.665586][ T8311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1521.752300][ T8321] netlink: 96 bytes leftover after parsing attributes in process `syz.9.25098'. [ 1521.851933][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 1521.851973][ T29] audit: type=1326 audit(2290.832:137465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1521.890916][ T29] audit: type=1326 audit(2290.832:137466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1521.914265][ T29] audit: type=1326 audit(2290.832:137467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1521.937897][ T29] audit: type=1326 audit(2290.832:137468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1521.961304][ T29] audit: type=1326 audit(2290.832:137469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1521.984552][ T29] audit: type=1326 audit(2290.832:137470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1522.007885][ T29] audit: type=1326 audit(2290.832:137471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1522.031145][ T29] audit: type=1326 audit(2290.832:137472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe4e1045927 code=0x7ffc0000 [ 1522.054342][ T29] audit: type=1326 audit(2290.832:137473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4e0feab39 code=0x7ffc0000 [ 1522.077444][ T29] audit: type=1326 audit(2290.832:137474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.7.25100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e104e969 code=0x7ffc0000 [ 1522.201673][ T8346] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1522.208249][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1522.215994][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 1522.228236][ T8348] vhci_hcd: connection closed [ 1522.228491][ T2805] vhci_hcd: stop threads [ 1522.237517][ T2805] vhci_hcd: release socket [ 1522.241980][ T2805] vhci_hcd: disconnect device [ 1522.247855][ T8352] netlink: 96 bytes leftover after parsing attributes in process `syz.9.25111'. [ 1522.314527][ T8359] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1522.321073][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1522.328805][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 1522.371453][ T8362] vhci_hcd: connection closed [ 1522.371650][ T8444] vhci_hcd: stop threads [ 1522.381115][ T8444] vhci_hcd: release socket [ 1522.385548][ T8444] vhci_hcd: disconnect device [ 1522.396067][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25118'. [ 1522.526770][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25128'. [ 1522.993298][ T8445] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1522.999965][ T8445] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1523.008010][ T8445] vhci_hcd vhci_hcd.0: Device attached [ 1523.045268][ T8446] vhci_hcd: connection closed [ 1523.045453][ T8444] vhci_hcd: stop threads [ 1523.054542][ T8444] vhci_hcd: release socket [ 1523.059057][ T8444] vhci_hcd: disconnect device [ 1523.237756][ T8474] veth1_to_bond: entered allmulticast mode [ 1523.287118][ T8474] veth1_to_bond: left allmulticast mode [ 1523.382086][ T8481] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1523.388668][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1523.396471][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 1523.441095][ T8485] vhci_hcd: connection closed [ 1523.441396][T22577] vhci_hcd: stop threads [ 1523.450430][T22577] vhci_hcd: release socket [ 1523.454922][T22577] vhci_hcd: disconnect device [ 1523.512997][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25150'. [ 1523.524802][ T8499] bridge0: entered promiscuous mode [ 1523.531577][ T8499] bridge0: port 3(macvlan2) entered blocking state [ 1523.538201][ T8499] bridge0: port 3(macvlan2) entered disabled state [ 1523.545121][ T8499] macvlan2: entered allmulticast mode [ 1523.550542][ T8499] bridge0: entered allmulticast mode [ 1523.566634][ T8499] macvlan2: left allmulticast mode [ 1523.571912][ T8499] bridge0: left allmulticast mode [ 1523.579927][ T8499] bridge0: left promiscuous mode [ 1523.709984][ T8518] FAULT_INJECTION: forcing a failure. [ 1523.709984][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.722298][ T8525] netlink: 'syz.4.25155': attribute type 13 has an invalid length. [ 1523.722730][ T8518] CPU: 1 UID: 0 PID: 8518 Comm: syz.8.25156 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1523.722770][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1523.722790][ T8518] Call Trace: [ 1523.722800][ T8518] [ 1523.722810][ T8518] __dump_stack+0x1d/0x30 [ 1523.722852][ T8518] dump_stack_lvl+0xe8/0x140 [ 1523.722880][ T8518] dump_stack+0x15/0x1b [ 1523.722903][ T8518] should_fail_ex+0x265/0x280 [ 1523.722931][ T8518] ? kobject_uevent_env+0x1c0/0x570 [ 1523.723022][ T8518] should_failslab+0x8c/0xb0 [ 1523.723058][ T8518] __kmalloc_cache_noprof+0x4c/0x320 [ 1523.723126][ T8518] kobject_uevent_env+0x1c0/0x570 [ 1523.723157][ T8518] ? device_pm_check_callbacks+0x683/0x6a0 [ 1523.723189][ T8518] kobject_uevent+0x1d/0x30 [ 1523.723257][ T8518] device_del+0x710/0x790 [ 1523.723300][ T8518] __del_gendisk+0x494/0x570 [ 1523.723337][ T8518] del_gendisk+0xac/0xf0 [ 1523.723369][ T8518] loop_remove+0x26/0x80 [ 1523.723394][ T8518] loop_control_ioctl+0x3b3/0x3f0 [ 1523.723425][ T8518] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1523.723502][ T8518] __se_sys_ioctl+0xcb/0x140 [ 1523.723527][ T8518] __x64_sys_ioctl+0x43/0x50 [ 1523.723573][ T8518] x64_sys_call+0x19a8/0x2fb0 [ 1523.723603][ T8518] do_syscall_64+0xd2/0x200 [ 1523.723705][ T8518] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1523.723743][ T8518] ? clear_bhb_loop+0x40/0x90 [ 1523.723772][ T8518] ? clear_bhb_loop+0x40/0x90 [ 1523.723890][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.723920][ T8518] RIP: 0033:0x7faac2d4e969 [ 1523.723941][ T8518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.723965][ T8518] RSP: 002b:00007faac13b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1523.723991][ T8518] RAX: ffffffffffffffda RBX: 00007faac2f75fa0 RCX: 00007faac2d4e969 [ 1523.724048][ T8518] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 1523.724066][ T8518] RBP: 00007faac13b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.724083][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.724099][ T8518] R13: 0000000000000000 R14: 00007faac2f75fa0 R15: 00007ffd37b7ff88 [ 1523.724125][ T8518] [ 1524.062883][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.070208][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.125898][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25162'. [ 1524.157011][ T8560] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1524.163626][ T8560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1524.171426][ T8560] vhci_hcd vhci_hcd.0: Device attached [ 1524.209251][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.220738][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.251416][ T8550] netlink: 'syz.8.25161': attribute type 10 has an invalid length. [ 1524.281047][ T8525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.290042][ T8525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.299106][ T8525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.308098][ T8525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.337839][ T8561] vhci_hcd: connection closed [ 1524.338917][ T2808] vhci_hcd: stop threads [ 1524.347913][ T2808] vhci_hcd: release socket [ 1524.352405][ T2808] vhci_hcd: disconnect device [ 1524.365487][ T8550] bond0: (slave netdevsim1): Releasing backup interface [ 1524.393526][ T8575] bond2: entered promiscuous mode [ 1524.398766][ T8575] bond2: entered allmulticast mode [ 1524.404565][ T8575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1524.421380][ T8575] bond2 (unregistering): Released all slaves [ 1524.431826][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25165'. [ 1524.463755][ T8585] bridge0: entered promiscuous mode [ 1524.472523][ T8585] bridge0: port 3(macvlan2) entered blocking state [ 1524.479185][ T8585] bridge0: port 3(macvlan2) entered disabled state [ 1524.505319][ T8585] macvlan2: entered allmulticast mode [ 1524.510844][ T8585] bridge0: entered allmulticast mode [ 1524.520191][ T8585] macvlan2: left allmulticast mode [ 1524.525379][ T8585] bridge0: left allmulticast mode [ 1524.558487][ T8585] bridge0: left promiscuous mode [ 1524.619120][ T8597] netlink: 'syz.6.25167': attribute type 10 has an invalid length. [ 1524.627273][ T8597] netlink: 'syz.6.25167': attribute type 19 has an invalid length. [ 1524.635333][ T8597] netlink: 156 bytes leftover after parsing attributes in process `syz.6.25167'. [ 1524.647607][ T8597] netlink: 'syz.6.25167': attribute type 1 has an invalid length. [ 1524.668171][ T8597] bond1 (unregistering): Released all slaves [ 1524.920185][ T8607] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1524.926842][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1524.934624][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 1524.954094][ T8608] vhci_hcd: connection closed [ 1524.967409][T22578] vhci_hcd: stop threads [ 1524.976543][T22578] vhci_hcd: release socket [ 1524.981010][T22578] vhci_hcd: disconnect device [ 1525.712900][ T8633] netlink: 'syz.4.25179': attribute type 10 has an invalid length. [ 1525.721144][ T8633] netlink: 'syz.4.25179': attribute type 19 has an invalid length. [ 1525.729143][ T8633] netlink: 156 bytes leftover after parsing attributes in process `syz.4.25179'. [ 1525.761299][ T8633] netlink: 'syz.4.25179': attribute type 1 has an invalid length. [ 1525.819557][ T8633] bond3 (unregistering): Released all slaves [ 1525.926812][ T8648] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1525.971807][ T8644] netlink: 'syz.8.25183': attribute type 10 has an invalid length. [ 1525.981445][ T8644] netlink: 'syz.8.25183': attribute type 10 has an invalid length. [ 1525.991276][ T8644] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1526.019956][ T8644] bond2: entered promiscuous mode [ 1526.025057][ T8644] bond2: entered allmulticast mode [ 1526.047127][ T8644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1526.071339][ T8644] bond2 (unregistering): Released all slaves [ 1526.085197][ T8653] veth1_to_bond: entered allmulticast mode [ 1526.098937][ T8653] veth1_to_bond: left allmulticast mode [ 1526.241905][ T8672] vhci_hcd: invalid port number 96 [ 1526.247059][ T8672] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1526.340148][ T8679] netlink: 156 bytes leftover after parsing attributes in process `syz.7.25198'. [ 1526.361069][ T8679] bond2 (unregistering): Released all slaves [ 1526.495391][ T8694] veth1_to_bond: entered allmulticast mode [ 1526.502502][ T8694] veth1_to_bond: left allmulticast mode [ 1526.535807][ T8700] bridge0: port 3(macvlan2) entered blocking state [ 1526.542500][ T8700] bridge0: port 3(macvlan2) entered disabled state [ 1526.550188][ T8700] macvlan2: entered allmulticast mode [ 1526.555609][ T8700] bridge0: entered allmulticast mode [ 1526.563036][ T8700] macvlan2: left allmulticast mode [ 1526.568192][ T8700] bridge0: left allmulticast mode [ 1526.771831][ T8720] __nla_validate_parse: 1 callbacks suppressed [ 1526.771850][ T8720] netlink: 156 bytes leftover after parsing attributes in process `syz.9.25215'. [ 1526.796700][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25216'. [ 1526.812520][ T8722] bridge0: entered promiscuous mode [ 1526.819660][ T8722] bridge0: port 3(macvlan2) entered blocking state [ 1526.826317][ T8722] bridge0: port 3(macvlan2) entered disabled state [ 1526.834385][ T8722] macvlan2: entered allmulticast mode [ 1526.839882][ T8722] bridge0: entered allmulticast mode [ 1526.845730][ T8722] macvlan2: left allmulticast mode [ 1526.850916][ T8722] bridge0: left allmulticast mode [ 1526.860314][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 1526.860329][ T29] audit: type=1326 audit(2295.842:138164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1526.863907][ T8722] bridge0: left promiscuous mode [ 1526.866676][ T29] audit: type=1326 audit(2295.842:138165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1526.916543][ T29] audit: type=1326 audit(2295.842:138166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1526.939127][ T29] audit: type=1326 audit(2295.842:138167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1526.961660][ T29] audit: type=1326 audit(2295.842:138168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1526.984305][ T29] audit: type=1326 audit(2295.842:138169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1527.006807][ T29] audit: type=1326 audit(2295.842:138170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1527.029317][ T29] audit: type=1326 audit(2295.842:138171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1527.051797][ T29] audit: type=1326 audit(2295.842:138172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1527.074342][ T29] audit: type=1326 audit(2295.842:138173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1527.102895][ T8729] veth1_to_bond: entered allmulticast mode [ 1527.110199][ T8727] veth1_to_bond: left allmulticast mode [ 1527.183680][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25223'. [ 1527.196042][ T8741] bridge0: entered promiscuous mode [ 1527.203176][ T8741] bridge0: port 3(macvlan2) entered blocking state [ 1527.209835][ T8741] bridge0: port 3(macvlan2) entered disabled state [ 1527.216710][ T8741] macvlan2: entered allmulticast mode [ 1527.222311][ T8741] bridge0: entered allmulticast mode [ 1527.229125][ T8741] macvlan2: left allmulticast mode [ 1527.234346][ T8741] bridge0: left allmulticast mode [ 1527.240907][ T8741] bridge0: left promiscuous mode [ 1527.548681][ T8754] veth1_to_bond: entered allmulticast mode [ 1527.556405][ T8754] veth1_to_bond: left allmulticast mode [ 1527.712485][ T8772] veth1_to_bond: entered allmulticast mode [ 1527.720723][ T8770] veth1_to_bond: left allmulticast mode [ 1527.811692][ T8790] wg1: entered promiscuous mode [ 1527.816639][ T8790] wg1: entered allmulticast mode [ 1527.880574][ T8790] wg1: left promiscuous mode [ 1527.885263][ T8790] wg1: left allmulticast mode [ 1527.903969][ T8804] netlink: 156 bytes leftover after parsing attributes in process `syz.9.25238'. [ 1527.936414][ T8804] bond3 (unregistering): Released all slaves [ 1528.028355][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25241'. [ 1528.176465][ T8837] veth1_to_bond: entered allmulticast mode [ 1528.184937][ T8835] veth1_to_bond: left allmulticast mode [ 1528.390916][ T8861] vhci_hcd: invalid port number 96 [ 1528.396112][ T8861] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1528.600605][ T8877] netlink: 156 bytes leftover after parsing attributes in process `syz.4.25254'. [ 1528.624436][ T8877] bond3 (unregistering): Released all slaves [ 1528.742298][ T8886] veth1_to_bond: entered allmulticast mode [ 1528.759022][ T8885] veth1_to_bond: left allmulticast mode [ 1528.808009][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25261'. [ 1529.560126][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.25279'. [ 1530.000382][ T8962] vhci_hcd: invalid port number 96 [ 1530.005551][ T8962] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1530.537759][ T8985] validate_nla: 13 callbacks suppressed [ 1530.537785][ T8985] netlink: 'syz.4.25294': attribute type 10 has an invalid length. [ 1530.551398][ T8985] netlink: 'syz.4.25294': attribute type 19 has an invalid length. [ 1530.559646][ T8985] netlink: 156 bytes leftover after parsing attributes in process `syz.4.25294'. [ 1530.577564][ T8985] bond3 (unregistering): Released all slaves [ 1530.712716][ T9000] vhci_hcd: invalid port number 96 [ 1530.718119][ T9000] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1530.823266][ T9027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1530.829845][ T9027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1530.837643][ T9027] vhci_hcd vhci_hcd.0: Device attached [ 1530.887476][ T9029] vhci_hcd: invalid port number 96 [ 1530.892751][ T9029] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1531.108923][ T3455] usb 10-1: SetAddress Request (7) to port 0 [ 1531.115123][ T3455] usb 10-1: new SuperSpeed USB device number 7 using vhci_hcd [ 1531.189786][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25305'. [ 1531.205224][ T9076] bridge0: port 3(macvlan2) entered blocking state [ 1531.211993][ T9076] bridge0: port 3(macvlan2) entered disabled state [ 1531.219107][ T9076] macvlan2: entered allmulticast mode [ 1531.224533][ T9076] bridge0: entered allmulticast mode [ 1531.231433][ T9076] macvlan2: left allmulticast mode [ 1531.236600][ T9076] bridge0: left allmulticast mode [ 1531.347392][ T9095] netlink: 'syz.8.25309': attribute type 10 has an invalid length. [ 1531.355539][ T9095] netlink: 'syz.8.25309': attribute type 19 has an invalid length. [ 1531.380260][ T9095] netlink: 'syz.8.25309': attribute type 1 has an invalid length. [ 1531.415748][ T9095] bond2 (unregistering): Released all slaves [ 1531.615587][ T9115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9115 comm=syz.7.25313 [ 1531.739284][ T9030] vhci_hcd: connection reset by peer [ 1531.745195][T14441] vhci_hcd: stop threads [ 1531.749550][T14441] vhci_hcd: release socket [ 1531.753982][T14441] vhci_hcd: disconnect device [ 1531.787737][ T9116] __nla_validate_parse: 1 callbacks suppressed [ 1531.787785][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25316'. [ 1531.870189][ T29] kauditd_printk_skb: 1303 callbacks suppressed [ 1531.870207][ T29] audit: type=1326 audit(2300.852:139477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1531.906404][ T29] audit: type=1326 audit(2300.882:139478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1531.929727][ T29] audit: type=1326 audit(2300.882:139479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1531.953176][ T29] audit: type=1326 audit(2300.882:139480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1531.976432][ T29] audit: type=1326 audit(2300.882:139481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1531.999639][ T29] audit: type=1326 audit(2300.882:139482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1532.022944][ T29] audit: type=1326 audit(2300.882:139483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1532.046122][ T29] audit: type=1326 audit(2300.882:139484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1532.069338][ T29] audit: type=1326 audit(2300.882:139485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1532.092585][ T29] audit: type=1326 audit(2300.882:139486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9113 comm="syz.8.25316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faac2d4e969 code=0x7ffc0000 [ 1532.372416][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25320'. [ 1532.409376][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25322'. [ 1532.458000][ T9143] netlink: 'syz.4.25324': attribute type 10 has an invalid length. [ 1532.466027][ T9143] netlink: 'syz.4.25324': attribute type 19 has an invalid length. [ 1532.474022][ T9143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.25324'. [ 1532.494926][ T9143] bond3 (unregistering): Released all slaves [ 1532.679688][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.25325'. [ 1532.751595][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.9.25329'. [ 1533.212533][ T9247] netlink: 'syz.8.25337': attribute type 10 has an invalid length. [ 1533.220533][ T9247] netlink: 'syz.8.25337': attribute type 19 has an invalid length. [ 1533.228628][ T9247] netlink: 156 bytes leftover after parsing attributes in process `syz.8.25337'. [ 1533.239527][ T9247] netlink: 'syz.8.25337': attribute type 1 has an invalid length. [ 1533.254427][ T9247] bond2 (unregistering): Released all slaves [ 1533.453294][ T9275] vhci_hcd: invalid port number 96 [ 1533.458493][ T9275] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1533.482235][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25342'. [ 1533.623283][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25343'. [ 1533.788072][ T9321] netlink: 156 bytes leftover after parsing attributes in process `syz.7.25350'. [ 1533.832961][ T9321] bond2 (unregistering): Released all slaves [ 1533.842984][ T9309] bond0: (slave netdevsim1): Releasing backup interface [ 1533.853234][ T9309] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1533.873267][ T9309] bond2: entered promiscuous mode [ 1533.878359][ T9309] bond2: entered allmulticast mode [ 1533.883688][ T9309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1533.892909][ T9309] bond2 (unregistering): Released all slaves [ 1536.219388][ T3455] usb 10-1: device descriptor read/8, error -110 [ 1536.328724][ T3455] usb 10-1: new SuperSpeed USB device number 7 using vhci_hcd [ 1536.349001][ T3455] usb 10-1: enqueue for inactive port 0 [ 1536.361303][ T3455] usb 10-1: enqueue for inactive port 0 [ 1536.373107][ T3455] usb 10-1: enqueue for inactive port 0 [ 1536.524224][ T9416] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1536.530861][ T9416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1536.538729][ T9416] vhci_hcd vhci_hcd.0: Device attached [ 1536.549897][ T9417] vhci_hcd: connection closed [ 1536.550175][ T8444] vhci_hcd: stop threads [ 1536.559357][ T8444] vhci_hcd: release socket [ 1536.563829][ T8444] vhci_hcd: disconnect device [ 1536.687016][ T9420] validate_nla: 8 callbacks suppressed [ 1536.687030][ T9420] netlink: 'syz.6.25386': attribute type 10 has an invalid length. [ 1536.700721][ T9420] netlink: 'syz.6.25386': attribute type 19 has an invalid length. [ 1536.712049][ T9420] netlink: 'syz.6.25386': attribute type 1 has an invalid length. [ 1536.729411][ T9420] bond2 (unregistering): Released all slaves [ 1536.770922][ T9423] vhci_hcd: invalid port number 96 [ 1536.776113][ T9423] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1536.916033][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 1536.916052][ T29] audit: type=1326 audit(2305.892:140219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1536.945552][ T29] audit: type=1326 audit(2305.892:140220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1536.968925][ T29] audit: type=1326 audit(2305.892:140221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.011837][ T29] audit: type=1326 audit(2305.892:140222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.035157][ T29] audit: type=1326 audit(2305.892:140223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.058372][ T29] audit: type=1326 audit(2305.892:140224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.082177][ T29] audit: type=1326 audit(2305.892:140225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.086754][ T9435] __nla_validate_parse: 4 callbacks suppressed [ 1537.086799][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25393'. [ 1537.105359][ T29] audit: type=1326 audit(2305.892:140226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.124319][ T9435] bridge0: entered promiscuous mode [ 1537.144157][ T29] audit: type=1326 audit(2305.892:140227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.154135][ T9435] bridge0: port 3(macvlan2) entered blocking state [ 1537.172479][ T29] audit: type=1326 audit(2305.892:140228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9426 comm="syz.6.25389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1537.202410][ T9435] bridge0: port 3(macvlan2) entered disabled state [ 1537.209742][ T9435] macvlan2: entered allmulticast mode [ 1537.215200][ T9435] bridge0: entered allmulticast mode [ 1537.221191][ T9435] macvlan2: left allmulticast mode [ 1537.226498][ T9435] bridge0: left allmulticast mode [ 1537.233253][ T9435] bridge0: left promiscuous mode [ 1537.429015][ T3455] usb usb10-port1: attempt power cycle [ 1537.581128][ T9459] vhci_hcd: invalid port number 96 [ 1537.586302][ T9459] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1537.823741][ T9468] wg1: entered promiscuous mode [ 1537.828755][ T9468] wg1: entered allmulticast mode [ 1537.836196][ T9468] netlink: 'syz.7.25404': attribute type 27 has an invalid length. [ 1537.908912][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.916197][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.992522][ T9468] wg1: left promiscuous mode [ 1537.997283][ T9468] wg1: left allmulticast mode [ 1538.027528][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.055061][ T9480] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1538.061644][ T9480] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1538.069401][ T9480] vhci_hcd vhci_hcd.0: Device attached [ 1538.095996][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.134798][ T9468] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.143834][ T9468] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.152900][ T9468] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.161975][ T9468] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.476014][ T3455] usb 10-1: SetAddress Request (9) to port 0 [ 1538.482332][ T3455] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1538.504538][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.514924][ T9472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1538.691206][ T9507] vhci_hcd: invalid port number 96 [ 1538.696395][ T9507] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1538.713198][ T9481] vhci_hcd: connection reset by peer [ 1538.718883][T14432] vhci_hcd: stop threads [ 1538.723186][T14432] vhci_hcd: release socket [ 1538.727619][T14432] vhci_hcd: disconnect device [ 1538.753367][ T9511] netlink: 'syz.6.25415': attribute type 10 has an invalid length. [ 1538.761417][ T9511] netlink: 'syz.6.25415': attribute type 19 has an invalid length. [ 1538.769394][ T9511] netlink: 156 bytes leftover after parsing attributes in process `syz.6.25415'. [ 1538.819901][ T9511] bond2 (unregistering): Released all slaves [ 1538.900935][ T9518] netlink: 96 bytes leftover after parsing attributes in process `syz.9.25417'. [ 1539.480618][ T9547] netlink: 96 bytes leftover after parsing attributes in process `syz.8.25428'. [ 1539.583015][ T9549] vhci_hcd: invalid port number 96 [ 1539.588365][ T9549] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 1539.643234][ T9554] netlink: 'syz.7.25430': attribute type 10 has an invalid length. [ 1539.651433][ T9554] netlink: 'syz.7.25430': attribute type 19 has an invalid length. [ 1539.659372][ T9554] netlink: 156 bytes leftover after parsing attributes in process `syz.7.25430'. [ 1539.697648][ T9554] bond3 (unregistering): Released all slaves [ 1539.952450][ T9576] netlink: 96 bytes leftover after parsing attributes in process `syz.7.25439'. [ 1540.201559][ T9604] netlink: 96 bytes leftover after parsing attributes in process `syz.7.25450'. [ 1540.464242][ T9629] FAULT_INJECTION: forcing a failure. [ 1540.464242][ T9629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.477534][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.6.25460 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1540.477614][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1540.477632][ T9629] Call Trace: [ 1540.477639][ T9629] [ 1540.477650][ T9629] __dump_stack+0x1d/0x30 [ 1540.477687][ T9629] dump_stack_lvl+0xe8/0x140 [ 1540.477714][ T9629] dump_stack+0x15/0x1b [ 1540.477849][ T9629] should_fail_ex+0x265/0x280 [ 1540.477909][ T9629] should_fail+0xb/0x20 [ 1540.477934][ T9629] should_fail_usercopy+0x1a/0x20 [ 1540.477965][ T9629] _copy_from_user+0x1c/0xb0 [ 1540.478001][ T9629] ___sys_sendmsg+0xc1/0x1d0 [ 1540.478059][ T9629] __x64_sys_sendmsg+0xd4/0x160 [ 1540.478105][ T9629] x64_sys_call+0x2999/0x2fb0 [ 1540.478198][ T9629] do_syscall_64+0xd2/0x200 [ 1540.478239][ T9629] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1540.478274][ T9629] ? clear_bhb_loop+0x40/0x90 [ 1540.478378][ T9629] ? clear_bhb_loop+0x40/0x90 [ 1540.478407][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.478437][ T9629] RIP: 0033:0x7f65c16ee969 [ 1540.478515][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.478540][ T9629] RSP: 002b:00007f65bfd57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.478574][ T9629] RAX: ffffffffffffffda RBX: 00007f65c1915fa0 RCX: 00007f65c16ee969 [ 1540.478591][ T9629] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1540.478608][ T9629] RBP: 00007f65bfd57090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.478680][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.478697][ T9629] R13: 0000000000000000 R14: 00007f65c1915fa0 R15: 00007ffc49136318 [ 1540.478719][ T9629] [ 1540.672565][ T9631] netlink: 96 bytes leftover after parsing attributes in process `syz.4.25461'. [ 1540.718496][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25465'. [ 1540.732887][ T9639] bridge0: entered promiscuous mode [ 1540.752129][ T9639] bridge0: port 3(macvlan2) entered blocking state [ 1540.758757][ T9639] bridge0: port 3(macvlan2) entered disabled state [ 1540.765860][ T9639] macvlan2: entered allmulticast mode [ 1540.771317][ T9639] bridge0: entered allmulticast mode [ 1540.781408][ T9639] macvlan2: left allmulticast mode [ 1540.786700][ T9639] bridge0: left allmulticast mode [ 1540.792300][ T9639] bridge0: left promiscuous mode [ 1540.803367][ T9646] FAULT_INJECTION: forcing a failure. [ 1540.803367][ T9646] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.816183][ T9646] CPU: 0 UID: 0 PID: 9646 Comm: syz.4.25468 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1540.816212][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1540.816226][ T9646] Call Trace: [ 1540.816232][ T9646] [ 1540.816240][ T9646] __dump_stack+0x1d/0x30 [ 1540.816266][ T9646] dump_stack_lvl+0xe8/0x140 [ 1540.816347][ T9646] dump_stack+0x15/0x1b [ 1540.816364][ T9646] should_fail_ex+0x265/0x280 [ 1540.816390][ T9646] should_failslab+0x8c/0xb0 [ 1540.816423][ T9646] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1540.816572][ T9646] ? __alloc_skb+0x101/0x320 [ 1540.816605][ T9646] __alloc_skb+0x101/0x320 [ 1540.816633][ T9646] ? audit_log_start+0x365/0x6c0 [ 1540.816725][ T9646] audit_log_start+0x380/0x6c0 [ 1540.816842][ T9646] audit_seccomp+0x48/0x100 [ 1540.816876][ T9646] ? __seccomp_filter+0x68c/0x10d0 [ 1540.816907][ T9646] __seccomp_filter+0x69d/0x10d0 [ 1540.816939][ T9646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1540.817019][ T9646] ? vfs_write+0x75e/0x8e0 [ 1540.817055][ T9646] __secure_computing+0x82/0x150 [ 1540.817086][ T9646] syscall_trace_enter+0xcf/0x1e0 [ 1540.817191][ T9646] do_syscall_64+0xac/0x200 [ 1540.817222][ T9646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1540.817255][ T9646] ? clear_bhb_loop+0x40/0x90 [ 1540.817354][ T9646] ? clear_bhb_loop+0x40/0x90 [ 1540.817378][ T9646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.817401][ T9646] RIP: 0033:0x7f358a2be969 [ 1540.817418][ T9646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.817500][ T9646] RSP: 002b:00007f3588927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.817521][ T9646] RAX: ffffffffffffffda RBX: 00007f358a4e5fa0 RCX: 00007f358a2be969 [ 1540.817602][ T9646] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1540.817615][ T9646] RBP: 00007f3588927090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.817629][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.817642][ T9646] R13: 0000000000000000 R14: 00007f358a4e5fa0 R15: 00007fff00164578 [ 1540.817738][ T9646] [ 1540.818048][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25468'. [ 1541.073276][ T9656] wg1: entered promiscuous mode [ 1541.073380][ T9656] wg1: entered allmulticast mode [ 1541.074714][ T9656] netlink: 'syz.9.25471': attribute type 27 has an invalid length. [ 1541.525059][ T9673] netlink: 'syz.7.25476': attribute type 10 has an invalid length. [ 1541.611867][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.619168][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.654376][ T9656] wg1: left promiscuous mode [ 1541.659123][ T9656] wg1: left allmulticast mode [ 1541.687193][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.698410][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.735202][ T9656] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.744255][ T9656] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.753494][ T9656] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.762614][ T9656] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.793447][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.804688][ T9657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1541.928706][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 1541.928725][ T29] audit: type=1326 audit(2310.902:140593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.6.25479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c16ee969 code=0x7ffc0000 [ 1542.081075][ T9702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9702 comm=syz.7.25482 [ 1542.196276][ T29] audit: type=1326 audit(2311.132:140594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.219661][ T29] audit: type=1326 audit(2311.132:140595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.243077][ T29] audit: type=1326 audit(2311.132:140596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.266160][ T29] audit: type=1326 audit(2311.132:140597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.289418][ T29] audit: type=1326 audit(2311.132:140598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.312660][ T29] audit: type=1326 audit(2311.132:140599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.335908][ T29] audit: type=1326 audit(2311.132:140600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.359230][ T29] audit: type=1326 audit(2311.132:140601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.382515][ T29] audit: type=1326 audit(2311.132:140602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.9.25484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31465e969 code=0x7ffc0000 [ 1542.428289][ T9706] __nla_validate_parse: 2 callbacks suppressed [ 1542.428309][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25485'. [ 1542.490093][ T9712] netlink: 96 bytes leftover after parsing attributes in process `syz.9.25488'. [ 1542.509038][ T9715] wg1: entered promiscuous mode [ 1542.514068][ T9715] wg1: entered allmulticast mode [ 1542.521847][ T9716] 9pnet_fd: Insufficient options for proto=fd [ 1542.537704][ T9715] validate_nla: 2 callbacks suppressed [ 1542.537722][ T9715] netlink: 'syz.4.25489': attribute type 27 has an invalid length. [ 1542.555367][ T9715] wg1: left promiscuous mode [ 1542.560133][ T9715] wg1: left allmulticast mode [ 1542.599347][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.607282][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.617232][ T9715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1542.876246][ T9737] netlink: 'syz.8.25498': attribute type 10 has an invalid length. [ 1542.884278][ T9737] netlink: 'syz.8.25498': attribute type 19 has an invalid length. [ 1542.892267][ T9737] netlink: 156 bytes leftover after parsing attributes in process `syz.8.25498'. [ 1542.909833][ T9737] bond2 (unregistering): Released all slaves [ 1542.944578][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25499'. [ 1543.045727][ T9750] 9pnet_fd: Insufficient options for proto=fd [ 1543.165077][ T9754] SELinux: ebitmap: truncated map [ 1543.181039][ T9754] SELinux: failed to load policy [ 1543.315819][ T9759] ================================================================== [ 1543.315863][ T9759] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 1543.315915][ T9759] [ 1543.315921][ T9759] read to 0xffff8881065d5830 of 4 bytes by task 9760 on cpu 0: [ 1543.315938][ T9759] atime_needs_update+0x25f/0x3e0 [ 1543.315974][ T9759] pick_link+0x2df/0x830 [ 1543.316005][ T9759] step_into+0x7b6/0x820 [ 1543.316029][ T9759] path_openat+0x13e8/0x2170 [ 1543.316048][ T9759] do_filp_open+0x109/0x230 [ 1543.316069][ T9759] do_sys_openat2+0xa6/0x110 [ 1543.316107][ T9759] __x64_sys_openat+0xf2/0x120 [ 1543.316145][ T9759] x64_sys_call+0x1af/0x2fb0 [ 1543.316173][ T9759] do_syscall_64+0xd2/0x200 [ 1543.316207][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.316228][ T9759] [ 1543.316233][ T9759] write to 0xffff8881065d5830 of 4 bytes by task 9759 on cpu 1: [ 1543.316253][ T9759] touch_atime+0x1e8/0x340 [ 1543.316286][ T9759] pick_link+0x747/0x830 [ 1543.316317][ T9759] step_into+0x7b6/0x820 [ 1543.316356][ T9759] path_openat+0x13e8/0x2170 [ 1543.316377][ T9759] do_filp_open+0x109/0x230 [ 1543.316395][ T9759] do_sys_openat2+0xa6/0x110 [ 1543.316430][ T9759] __x64_sys_openat+0xf2/0x120 [ 1543.316465][ T9759] x64_sys_call+0x1af/0x2fb0 [ 1543.316486][ T9759] do_syscall_64+0xd2/0x200 [ 1543.316524][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.316551][ T9759] [ 1543.316556][ T9759] value changed: 0x26461adc -> 0x116a224f [ 1543.316569][ T9759] [ 1543.316574][ T9759] Reported by Kernel Concurrency Sanitizer on: [ 1543.316588][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.8.25505 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 1543.316623][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1543.316640][ T9759] ================================================================== [ 1543.579756][ T3455] usb 10-1: device descriptor read/8, error -110 [ 1543.688779][ T3455] usb 10-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1543.708853][ T3455] usb 10-1: enqueue for inactive port 0 [ 1543.714606][ T3455] usb 10-1: enqueue for inactive port 0 [ 1543.720398][ T3455] usb 10-1: enqueue for inactive port 0 [ 1544.739548][ T3455] usb usb10-port1: unable to enumerate USB device