last executing test programs: 6m12.207457999s ago: executing program 0 (id=2013): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x98000, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x80000) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 6m11.664846037s ago: executing program 0 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xdffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m11.580581429s ago: executing program 0 (id=2028): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10c010, &(0x7f00000004c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_loose}, {@version_9p2000}, {@mmap}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'kmem_cache_free\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r5, @ANYBLOB="0200000000004200240012800b00010065727370616e000014000280050016000000000006000e00d53c"], 0x44}}, 0x20000010) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0xfffffffffffffd1d, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000400"/28], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x55fe, 0x8}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x5, 0xfc, 0x6, 0x8, 0x18c10, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @value, @void, @value=r2}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 6m11.52633192s ago: executing program 0 (id=2029): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x40000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0, 0x80600a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) unshare(0x62040200) 6m11.365800252s ago: executing program 0 (id=2034): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10c010, &(0x7f00000004c0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x1ff}}, {@cache_loose}, {@version_9p2000}, {@mmap}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'kmem_cache_free\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r5, @ANYBLOB="0200000000004200240012800b00010065727370616e000014000280050016000000000006000e00d53c"], 0x44}}, 0x20000010) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0xfffffffffffffd1d, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000400"/28], 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x55fe, 0x8}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x5, 0xfc, 0x6, 0x8, 0x18c10, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @value, @void, @value=r2}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r13, 0x26, &(0x7f0000000000)) fcntl$lock(r13, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x1ab5, 0x2e}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000200000000000000ff0300009500000000000000936140000100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018260000", @ANYRES32, @ANYBLOB="00000000f8ffffffd21440001000000095000000000000001800000004000000000000000300000095000000ea36804f"], &(0x7f0000000640)='syzkaller\x00', 0xb6c, 0x8, &(0x7f0000000680)=""/8, 0x40f00, 0x8, '\x00', r5, @fallback=0x29, r6, 0x8, &(0x7f0000000700)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x3, 0x9, 0x8}, 0x10, r7, r8, 0x1, &(0x7f0000000c00)=[r9, 0xffffffffffffffff, r10, r11, r12, r13, 0x1], &(0x7f0000000c40)=[{0x3, 0x4, 0x5, 0x6}], 0x10, 0x40, @void, @value}, 0x94) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r14, 0xffffffffffffffff, 0x100000000000000) 6m10.769967662s ago: executing program 2 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xdffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m10.762882832s ago: executing program 2 (id=2041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc2001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYBLOB="3ff76a14a3ea0c30d10de506ee42d3721511f3598608a6a19b7597f94c706baa1946dd05da902d9b500cc33d694b7e6c1a9d4674ced7f0828e38a7f2907c3024db63a074c953410e55354befafd7a8587c961db14bfa750b21933c4f26ddb9e574d03617c14917734740be22ce4cd5c76bc9c9c79d8c03f0137e83"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x432803, 0x56) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000600)="5f9d070e44291e24740511ba540754c713f9d99a29", 0x15}, {&(0x7f0000000640)="8860b7b99bd4837ed2ab1d9ce282f7aa871b2da9ef8906c8b5ad7799e19ce011fa147cd9a73239e35354f5a116eac48d58b0c9b5954319cd599b27b22e6093421a95d30f", 0x44}], 0x3, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x28, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150, 0xa850}}, {{&(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003040)="66605fcc923572e635b28df559be8efa93abe5034c4c3042dc390708521e10614a6163541803d92c5126d874783b49ceefa8e2219bfecbc8cf0dc578fb0631f96c908fae8fdf35a88bd2716e63064f77cf09481e7f7f1c1434f1b3c317d437df19cd14fe174d62afeb6dd859f220452d34400b6384490497b4ac934f5512ad69d64d3dfb8f3a88b6980d92a8d64f60bde30d56fb0a006bd71841c6ca13adacbd72f802f4af9f5c14451717c1ea7d4925", 0xb0}, {&(0x7f0000003100)="cc706fd279638e58a9fad58da4558182", 0x10}, {&(0x7f0000003140)="58ea3770ad00d6fd02a980abbf4cae3197b15d6ae83ed6d1", 0x18}, {&(0x7f0000003180)="0c492d2932def65bc72cab348230e21cd97cdf72bb38d73722852f278b16f192df5321cd618e8cf068c7ffbc8e2f3e291fa1eab872013bbcc54100650a8b145ae19b4efc1d4d67ba393a0a0c90e8f32253ac6695ebd4c607547e22a876ca0150b060d7234d094d3263c9373549f78c387513dd6a49bfe6259aaa70c6b30292daf8c421bede8a18dfdd1e46267f1b79a9ebd4e1ddf819ac38e8634d18c58b06df430466cdac9cd06f76ee5c874c6ec54755d363c614122488869e70114756184f", 0xc0}, {&(0x7f0000003240)="5f91d905d2b4ee6c20edc086b1d9d2db91c23f8b199b0a986b4b706f37528eb8df968b4d0930a48607983a603b6a8ad5f97636671d8e2233b328295048", 0x3d}], 0x5, &(0x7f0000003300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r4, r10]}}], 0x30, 0x2200c044}}], 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_CREATE(0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r12}, 0x38) 6m10.541821445s ago: executing program 2 (id=2044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000c40)={0x53, 0xfffffffffffffffd, 0x16, 0x2, @scatter={0x8, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000800)=""/173, 0xad}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/30, 0x1e}]}, &(0x7f0000000a80)="5758954a749b4a98e52cbf21babf413c24d231a27436", &(0x7f0000000b80)=""/159, 0x7, 0x10, 0xffffffffffffffff, &(0x7f0000000ac0)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x20}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'netpci0\x00', 0x2000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x10000002}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r9, {0xfff1, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) 6m10.28019355s ago: executing program 2 (id=2045): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fc, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x40000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0, 0x80600a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) unshare(0x62040200) 6m10.153561182s ago: executing program 2 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x200000000003, 0x87) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000280)={0x2, 0x2, 0x2, 0x40, 0x0, [@private1]}, 0x18) 6m10.111985572s ago: executing program 0 (id=2049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xe3b9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f00000006000240000000002400"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 6m10.111797242s ago: executing program 32 (id=2049): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xe3b9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f00000006000240000000002400"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 6m9.965679724s ago: executing program 2 (id=2053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc2001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYBLOB="3ff76a14a3ea0c30d10de506ee42d3721511f3598608a6a19b7597f94c706baa1946dd05da902d9b500cc33d694b7e6c1a9d4674ced7f0828e38a7f2907c3024db63a074c953410e55354befafd7a8587c961db14bfa750b21933c4f26ddb9e574d03617c14917734740be22ce4cd5c76bc9c9c79d8c03f0137e83"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x432803, 0x56) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5f4dfb56ab486a493174da1c1941c1d01f00fd709b5028db36c6c52eeef261254ba6f26625452887c7bb335bec19bf67e1848c86201765e09d0f438cc24e53a9353d9de40ce1d6e113df471357b1ca66d18cabcd5d311675f9b533f19527b021a29c3a5c2b43816e496dce6b20c69b2f189cfd1b1a01f093683cdcef5b6a19c591a24fc5e0047afc1af06a92756f252173c579cc243ca95c15ae17b61cfc37fa65f170bacf4788bcc6a074fe33ef5960d42768f80f085c95375d31330a9734c3c6bf3056f0c1dd2a822e69b3d1c90f1ecf44a888f03ce51b647368bce41d47af59b068226314fec1900bfd49fee533b6499ecae88bc78c226d486d79a51d0646e1ff94814d8f296411de7707ccba7d120a3110aa9bd8e866df10bda883c8a8750b8325052e31e92b456a19d56dbb987409f056ac901ffdcd705eecdb7611e06f55ce0913bef1fcfef507da106d374e47a77c09be191ab3c0d21673ed92983ca7ff25977321f6b7dde664577dabdc672170990c9a94ed300efce32eece15b2ee1a6bcc321f7331a3dfa84ae0e197be0221e9686fd660d79ec59145da8c9fcc824ef1ec5e5206b4b990244478b732125113a44409ddeba5f22a54ceedce38f3ae516f4846d824ff2c8bdb7d7e341e6990a37dc8f5a0a77df91ac5839d3fe7bdfd13ad09460eec2b38e97750c8755c9688fa21bbb66cc5585f5f4ae65cf54424b30a1e9bac00c18ee498ddd6a15d988be17a90516cefe9dbdf94b57f5aead80a6ab1bd3a71936176c70dcfb9f2954b3e5c485983d1962353a6eb96f43cc6af1dd4909bc4bcab540625962aea8df597e30820e0aab8b61bee182cfc4779f562bc9ae95a3d2b4068464e434ad328d2f53685ba7fd9532c34ad2eda3ab92456f0d02b2c762ff32dfbc75f7ca2f3e1a05a1c30f663242e3385c14b84d3d11705d6c24155fbc7a92de3cee8dcca028b55993629ab09beb221637e1444e3535dcb32343c8ae75a16be15f28a88f74b70ea37ebf5381130f9f6e73e35b0599a7324d5aab2aac86a16f5e8573fa8117eaae43249d5296b49cb99c981fc93cae2c28848dc4cd8113d68bae55114c9669ad99beada21f5709e2cac969ad26a7bf1174ac0d4b84d7d95b078fdbc74027b40ac677bd9f76efc35c97551c33d1e345b783469c623f75edbba02e60f6ca79b7b841b19ea727e8d4a5d7924162cfa1cf274dfc5fc41281a38cf81b8b22f26147cc435ad33dd4e0a54e6d8cefeb44f5f156b655d7c974dfcc03c463ad751858bc81ff0107810ca31d0f9051dc8ae556b60bb42ce61018de6f4500d4355b09bf274d7ea7acb4cc91687a94ad92fcc1a33f8eba4d953a62c0480f0d19ce14c7a9a6b2e1b91a45b361bb0f3559116e248cbe619969d160650f453507d389b0dedfb4a8c0ad2d7dcac13283087cd871cc0edfbfb3ab0c488c705c9abd25e832210d84399f49a99eff12c1b1b4450d77b79884469029f993b913dc77651abb316bde7ea2525b451782606634667e6f6c749860880942578fda4684244a5a09aaca46f0cc0d4dae2b055b305487f5b356eb79df860c84fdcf4811a295b2ef818af0ac0be500d6bb776e1897728a96d8846e4956f67ac4007e58a887be8585f95fc73f941aaa693b9b4e0c1ce565fa9e1c2f879b89ecf1df508bc9eee8c4d0b436ec94fe9664335d681f2289fba7bfb6b72bce36c7a4a9715b4970641d81181177316fd6cdbd0eb6f1e25f557ad357ebbcb8733cec21eebccd0c1660edeff2ce093854cad9663a2ce1c69852286e64e841fe1bf024062dd143dc863bc562456b653e6d379419470ea6f9285c7eb0f4062d81564361ecc38d714d74b32d92136eb6072b5093e90fe84c15cd237ce6d8fd16370585b0f0ad0670c40802d693ecf269ee8c830fcc2ddfa9258ee33dc1e379d2e7797218509a127cad1831bb02dd0700ec54267944ba261c2752f46c5e1b9da831afbd80910e21404f48739f01655e18ac23541d6e3763766e1c041f13a1b9cb430cf6186147cb7a103bc7bc13c5f06995e640dc3b8a990639606ec57a063283d7bcbc4c92c4f86fe9c2af821632e2a919739b7a2177e6453beebed2aa7103556c22c58c2295d72ad0ae621ade80cd031475f43bed2970c8712a26f03ecb7db460ef5f7e054d4b44c035de52fda3c0f20126696eccb2e19ed54501d073f4422c097dfcf1e1ae827067413869977f09cdd62709241a070840d20883e986a4829342c58ce9fdbb704e5b5a022b4f6f89dcf6ebad465d1d2ad131f78c0a526b5dbf78cd4c37bbd8756c1a8229a062a9169be06cb21262f939118e6fc9e6011055be98719bb7a33d4edf3003ca59861a4d0986af5210dbd726a4a0b67cda1d70d2d3b10cac5d60c5c63dbdf2404e7a1c4c841134d804650f72d1d641904fb2c71bdce2756d4d60385ae218dbf520b5fc902330e3a1bd234e3c668781353919eeb650f37069153e22f63fedc3ad4357a3d1ca95003d70f65e302536ec94c7147c9cfc8baffee02dcc7afc916012ebc0f2026a485f85c3b162b56a674a308512b35bebc037ed0d183e0d2b0e396383e9846c739cdf4abaff989f64cfbdbc0bc0833bc14012132b13d6d4155733f572dc55aebae70c9ff324299d36e6ad82718f38b187f7e710b3732f6106576dbdee4fbed19b2caf61657ec97f6e957600d99568d697f223cd9fd6ef6b8686429d5cfa6fc65ce9e90584c68b8963ad5480b0318431840e0b5f42bde247eaada38c0fc60fdac05f341c788a3f6eeccca02f0132f3ef34fd844c289e778c20e907fd932cb9c7083008efb107875581350c48543c53a4c2d3ee6433cb458e8baefb20369e77076273478dd74da299645cf1e3c0e4116f15d78c189eb7c2d84161fea9a88d05e532e3cb8c3a6bc7d3b35c00268df1f376d92605ac1887a9d29f2d16cc46b7f45d745e5bb10f85ff83491acd0c0df4ecdad895626c6d4fd7c2701332d79b8b8d875037354e0154839f453f7d24343e590a0eaa478ba440706e5d6bc40080144f2ab2ad6056dd6655ce364c593d30e391eada1929a14314003ae7b0cddf98599f35adbefb48e7a6de303d8f092c24007c03092276d3024036dae5bdaf7fd01fbb602770bc52bd60e7b379e239aede7b24cf528dac6bd85100ab886ff54192ab488fcfa0b097af22d7891b90b3edfea38178607accbf92ef55678684ff65cf6e895c2a7125fe400bf2e92f412ad63da7714ab86f1fa5ed9c14df56579c405ddd31958149af907eae2a93ae82f24d5b70a9e1c8a85018ed72c5a9eb8f5221db8a8217a6bdc8c2cf66c4105a206350e5356d4450e4c771f0327b3f710dc71064b1c5b770d9d3d263cb80fcf95ca7faec17288a12ff35157ccece8031a55268e52740c4536d2f0b3d07f6dbd6a79c4912336f3bebe99b6e6e1b7480dc70afdc26b5500587ba64e3a1dbb46509a46cd8a01c946076bfd2265bbe7bf38771857c0979ae36eb16c169f82cdd6dc09240210e08d142580f806fc5edc2ee0be69f28fe9c4cc0fb02ef12eaa2d16f41ff70cfd6fa81e081f26d4f6d9e8d5e0f5d2d0fe76e6ade624a7f51861e79b914da04b09754a00d6b36d168bc2253dd96d3cd3a9c4d8231aaed8c982f2d0b00acf7879e7351cd65930595d82ef63a4b7cb68085791538b212d097022074c746dff8d7a65d2f2e44ea9521fb8e14f54fbe554099ee5d3dd0b898729ebe92cbe09b63f088f57520da8efcf2728a25a4c15ef7055087f1fd5b6edd8c708143a182dc31cbe05ad89e1aea58194793e6d99509ed74e3000791e499479babf36e9fbe9aa97cbcd01390289be927d232789e24783c7b07642ea3e498ab0ed37bdf5ec1330595b9bb6384bce032a166aa689a3bd98592c0355e3283f0b9655ed61abbf83a6424d00c908727da25a43226ebdcb81f0edf092876302e9e7d3a55f54ccfcbed198a511063717300d81d8291bcf85e76c459d5d052b4c77d27888fc9a3d6ccbfd081acb5c11cd4bf575964e930d99370a1381949bce09c05439d44fb067f56db30a47e29fb8e982dde8f2af275dc4ecbdf5da715e68c59b61094610780fd2490e92b7d4160a7f63fd83d603bd272213737a44e66260ba1233e8c7021b5b85344504461c031d3c503bff57ae247ed8d112e53a76adcef45d8b21ae8ae57f733b56c3d5a186e4be2c861b88cdd6ead11cb62bae06e95cb00026ebc8a9db27598801f36681f8db9b5e4cec18aa14a5f8f67866e7ae1fc27d72a103dde6da14471e275cea5f4a5991e6c8c27d4794a9b9869e9404b855c950fe13f08450edb50e65c8ce67f25bcd7a7ee71a496147140573d729693cbbf9a5c89c24215ae6f2ab9f0b7e568dda1950dd7fe974e7c8b92e2b35ff87f49018118d7af694306bb9f1a93e0710f14cb9c628f72920ae389658fb308408ced93daf0e2ac2f15486b2ff028d08ff5fbb5f3f790877850845a5e94f75e23c8cbc39152e3cb706d8d46d31e18bfd6179f338b9ea7b917bb675c00350ac4d6be77f8e3e5969bc115efaa8dcc85e9d5b0d79920dadaf9aea9fda4a6b589f5062cb7553e047a3b00761ea84f4875bceab0568e705afcf4e146af4274d48f866fbd5a1de82892703e42ce43cc3cc13366c8537f17112f4358d0c547364d5e5758cfac8589336508381a4219083642e6a5115e168530f809113bbeadffc822d8944aaec8a16f52fd441f757232735cd22c51f74f7c7b8e2b28ed7e49aa033e83771ac6102486c63c5c6d683884cc47d72f050fd1295b3d7be2902fe373bf2872e9998545fa3bdfcac88857b35552a83e5a50f05e07dbc9002fc1d241c9a5b581a55f47b07d711e191741f45b261d64790ad989e89851a93d305a9d67da43c051d91fd480d091e144fe13c2e7b2db65ae43ffba069110c426c6b38bcbf859abe390eb9663f3d7ea6e5bb52afac9379eb573478c5e4b7ddcb89b3b4991ca877f190a51d661309399896502fb6795b924d4e830ef2de3ece788eb2089bbd0de6b14dad1a543c5efc44a2c0627bc7bebba9cb1713df86752941d941589ef2ad498fcc613a72a16879fb593afed344580e85840b4d7687e853d1487e66ad50299facb4d0e4e1e27a68bcc0a958ec2ba8d780c286cc05f2e9112ee10d5b704d0edb58822b561a5e00a9a46c1f06b7fc9d04b0ef20e565cece8ac8361dcf9970a92c53fd226108abb909d0b15dd30fcfab95c9ae98300ddbd546fb56793cc863ed97d5df854db0b016f00128137153d816d233161edea70e26004734fe19c277666e4a53a309294f674bdf43c0e1fbabc202a3ad88ba18a5a845e62bfe010888fc095c27e3e0a1eb02f494d2529811dafe3465631aa8462ffd74cb045cc5efc9c9f7dfb936028d2137988a99edacb178856c740c5b26bc61d9fe973f429abce7204e1c0c868c77bfce28d9594b3bed9379f9083ac1da21784137c80fb43f16208d40758169ad2c09011f67b5656293611c4cc6194a08e653056eae39cd0ddc40f19e4d1dcd5f1499394994a0952efc03a13d35b9981cbe6d5d813ac81809d6a48eca8e059a0d7f7cb3ee6f0a3d64f2b0b6764f290c9758c064abcc5f99326db00383dd4b5b09325638491cb22d0cc505385b1ad62082504673eebe2a2b01a89fca9df0dcbe633e5abc22accfba694f17a1fa43ef62b8e996fbf74ecb50e50e86071a2d09a203c1efb799d75a4b33c36a6f33aa09c0827a26f596d7aa7c3905b6070341f75052b55f3e01c4bc407b411d7024ec0fa4d66b9e3d7a04e5d29a5c471333a57", 0x1000}, {&(0x7f0000000600)="5f9d070e44291e24740511ba540754c713f9d99a29", 0x15}, {&(0x7f0000000640)="8860b7b99bd4837ed2ab1d9ce282f7aa871b2da9ef8906c8b5ad7799e19ce011fa147cd9a73239e35354f5a116eac48d58b0c9b5954319cd599b27b22e6093421a95d30f", 0x44}], 0x3, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x28, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x150, 0xa850}}, {{&(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003040)="66605fcc923572e635b28df559be8efa93abe5034c4c3042dc390708521e10614a6163541803d92c5126d874783b49ceefa8e2219bfecbc8cf0dc578fb0631f96c908fae8fdf35a88bd2716e63064f77cf09481e7f7f1c1434f1b3c317d437df19cd14fe174d62afeb6dd859f220452d34400b6384490497b4ac934f5512ad69d64d3dfb8f3a88b6980d92a8d64f60bde30d56fb0a006bd71841c6ca13adacbd72f802f4af9f5c14451717c1ea7d4925", 0xb0}, {&(0x7f0000003100)="cc706fd279638e58a9fad58da4558182", 0x10}, {&(0x7f0000003140)="58ea3770ad00d6fd02a980abbf4cae3197b15d6ae83ed6d1", 0x18}, {&(0x7f0000003180)="0c492d2932def65bc72cab348230e21cd97cdf72bb38d73722852f278b16f192df5321cd618e8cf068c7ffbc8e2f3e291fa1eab872013bbcc54100650a8b145ae19b4efc1d4d67ba393a0a0c90e8f32253ac6695ebd4c607547e22a876ca0150b060d7234d094d3263c9373549f78c387513dd6a49bfe6259aaa70c6b30292daf8c421bede8a18dfdd1e46267f1b79a9ebd4e1ddf819ac38e8634d18c58b06df430466cdac9cd06f76ee5c874c6ec54755d363c614122488869e70114756184f", 0xc0}, {&(0x7f0000003240)="5f91d905d2b4ee6c20edc086b1d9d2db91c23f8b199b0a986b4b706f37528eb8df968b4d0930a48607983a603b6a8ad5f97636671d8e2233b328295048", 0x3d}], 0x5, &(0x7f0000003300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r4, r11]}}], 0x30, 0x2200c044}}], 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r13}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r13}, 0x38) 6m9.964471674s ago: executing program 33 (id=2053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc2001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYBLOB="3ff76a14a3ea0c30d10de506ee42d3721511f3598608a6a19b7597f94c706baa1946dd05da902d9b500cc33d694b7e6c1a9d4674ced7f0828e38a7f2907c3024db63a074c953410e55354befafd7a8587c961db14bfa750b21933c4f26ddb9e574d03617c14917734740be22ce4cd5c76bc9c9c79d8c03f0137e83"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x432803, 0x56) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000000600)="5f9d070e44291e24740511ba540754c713f9d99a29", 0x15}, {&(0x7f0000000640)="8860b7b99bd4837ed2ab1d9ce282f7aa871b2da9ef8906c8b5ad7799e19ce011fa147cd9a73239e35354f5a116eac48d58b0c9b5954319cd599b27b22e6093421a95d30f", 0x44}], 0x3, &(0x7f0000002e40)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x28, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r7, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r9}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x150, 0xa850}}, {{&(0x7f0000002fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003040)="66605fcc923572e635b28df559be8efa93abe5034c4c3042dc390708521e10614a6163541803d92c5126d874783b49ceefa8e2219bfecbc8cf0dc578fb0631f96c908fae8fdf35a88bd2716e63064f77cf09481e7f7f1c1434f1b3c317d437df19cd14fe174d62afeb6dd859f220452d34400b6384490497b4ac934f5512ad69d64d3dfb8f3a88b6980d92a8d64f60bde30d56fb0a006bd71841c6ca13adacbd72f802f4af9f5c14451717c1ea7d4925", 0xb0}, {&(0x7f0000003100)="cc706fd279638e58a9fad58da4558182", 0x10}, {&(0x7f0000003140)="58ea3770ad00d6fd02a980abbf4cae3197b15d6ae83ed6d1", 0x18}, {&(0x7f0000003180)="0c492d2932def65bc72cab348230e21cd97cdf72bb38d73722852f278b16f192df5321cd618e8cf068c7ffbc8e2f3e291fa1eab872013bbcc54100650a8b145ae19b4efc1d4d67ba393a0a0c90e8f32253ac6695ebd4c607547e22a876ca0150b060d7234d094d3263c9373549f78c387513dd6a49bfe6259aaa70c6b30292daf8c421bede8a18dfdd1e46267f1b79a9ebd4e1ddf819ac38e8634d18c58b06df430466cdac9cd06f76ee5c874c6ec54755d363c614122488869e70114756184f", 0xc0}, {&(0x7f0000003240)="5f91d905d2b4ee6c20edc086b1d9d2db91c23f8b199b0a986b4b706f37528eb8df968b4d0930a48607983a603b6a8ad5f97636671d8e2233b328295048", 0x3d}], 0x5, &(0x7f0000003300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r4, r11]}}], 0x30, 0x2200c044}}], 0x2, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r13}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r13}, 0x38) 14.256885934s ago: executing program 6 (id=9209): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={r1, 0x0, &(0x7f0000000640)=""/70}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}}, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000000780)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ba1dd5c50f438d8c1dd1c46cb1b4567c1b9cab9e4033c4d0ae770ccd4bb91d78a886d7e8", 0x24}, {&(0x7f0000000400)="9ca45f0baae7854d", 0x8}, {&(0x7f0000000500)="859e40656ed02ba2298fd58f316ac34b7f96727cf39b8fd6b7fd8e8e5515877985e681c046a2d841769d", 0x2a}, {&(0x7f0000000580)}, {&(0x7f00000006c0)="944edcaf3e084b3ae02f869affd80501e5599f05bb749d05ad5beb25bbe10a03047903e61a14d5bc6538bf309b0c587afcb67e0c36b3c80ed2dd6ee473c564d5bd8f3e37c3d713352ca082a85eee9b117ce57794ee7176e209f5670d32db775bbee9eb91d9829f9e92e96ceb98e0340a98c5592daf5909d8d316fef9abdc8e81b89a1d9d3b21f5fd51c9ec251d18aabd06c53da6b1e77f2124eda0a85a899a32514bca7dec7597ffe4", 0xa9}], 0x5}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000100)) 13.632382574s ago: executing program 6 (id=9215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x200000000000000, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 13.529538385s ago: executing program 6 (id=9217): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="7500f5d2c18091fbb4a7e6a63b84d396514d0b3fa9bf2be9f5e43240cab4f0020c8f133cf7e1ed73624c08d58617eb36b1712a9f8e3dd2ce3a629daa4e09554e4f4fab02dbba45a8e47a8136560866d61a12c6a00f5e4c5822b8880a9e646a6383577f5f163df7b0043766488fb58fe56f0d54799cfa5daa14d0d6d78b6618d2f8f94c48a5fc46117db836d880fae7c545aed4595a4cc1675e7e50256c666b1a706b6abbff2e53ba7c8a15b97a61fbcec7c779aad414b493e701d4a1fac0dce89930fd54b5b0615c8c06962436b0502b967b01ee0a12486744", 0xd9}, {&(0x7f0000000180)="74b3385c94c6c9f31898674e252d5faed3346efa5461e492b624ad", 0x1b}], 0x2, &(0x7f0000000400)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x60}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close_range(r1, 0xffffffffffffffff, 0x0) 13.519983806s ago: executing program 6 (id=9218): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0xffffffff, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2010092, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0xed, 0x1d9, &(0x7f00000002c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x1) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 12.548067151s ago: executing program 6 (id=9251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xe8) write$qrtrtun(r1, &(0x7f0000000300)="9cf35470044693", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x2, &(0x7f0000000000)="f7be50ba", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 12.382095454s ago: executing program 6 (id=9253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0)=[{0x0, 0x1c}], 0x1, 0x0, 0x0) 12.377740124s ago: executing program 34 (id=9253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@grpjquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r0, &(0x7f00000015c0)=[{0x0, 0x1c}], 0x1, 0x0, 0x0) 8.618191274s ago: executing program 7 (id=9305): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 8.523541595s ago: executing program 7 (id=9308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) unshare(0x28020480) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2000000000000001, 0x2200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x180}, 0x4040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 8.472570926s ago: executing program 7 (id=9310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8.471383416s ago: executing program 7 (id=9312): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0xffffffff, 0x0, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2010092, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0xed, 0x1d9, &(0x7f00000002c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100005, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x2, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0xd, 0x0, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8.105684121s ago: executing program 7 (id=9320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000000700000003000000"], 0x50) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000004c0)=""/154) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) 6.659458274s ago: executing program 7 (id=9356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x6000500, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, 0x0, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x48, 0x0, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) 6.628790345s ago: executing program 35 (id=9356): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x6000500, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, 0x0, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x48, 0x0, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) 1.557592465s ago: executing program 8 (id=9475): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$kcm(0x21, 0x2, 0x2) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100005, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x2, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x0, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0xd, 0x0, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.463123357s ago: executing program 5 (id=9477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.425957377s ago: executing program 5 (id=9478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000d00a5715d2da4afe6c052bb13733a259709fd879137dc96cb27de2090ac18055e13f5d97fbef0f62558bfcd707cf4243a91403a67f81d3600"/73, @ANYRES16=r6, @ANYBLOB="10002abd7000fbdbdf25430000000c00990071970000180000000c00580046000000000000000c0058004d000000000000000c00580057000000000000000c00580072000000000000000c0058003900000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) getrandom(0xfffffffffffffffc, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r9 = socket$inet(0x2, 0x1, 0x8) setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r10 = socket$inet(0x2, 0x3, 0x6) r11 = epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000600)={0x8, 0x6, 0x4, 0xe, 0x7, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, 0x0) r12 = dup3(r9, r10, 0x0) setsockopt$inet_int(r12, 0x0, 0x5, &(0x7f0000000040)=0x7, 0x4) 1.161765832s ago: executing program 5 (id=9485): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r0, r1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3b00, 0x300, 0x8}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000001840)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000040a6000000070000009500000000000000255087bf29d6d9bd225a930066d1698e5f8958ac5e7bef13ee2a94fbcbc832440def8e64a6189f89710542ce154b5d5cf85c9b21c0c5b8db2edcc609ea6ae9c63e91a189c7f39e5310eea5c10e96d2d9d20dc8ee3c5757fd3ca2d5366c0e6bf19e19e388d6774532abf8328b906ae5a5061f415aa6edec1e642dac0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'ip6gretap0\x00', @broadcast}) 1.096094053s ago: executing program 5 (id=9487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000070c2c2f0b33500000300000a14000e0011000100000000000000000c0000000ae057c8b8fcffd7ef9f2f7103f6c53bda006aa9ebbc040851dfc665a2fe975f2be5974d2417441c9fd465175130afaaa9415ced1045d3fafc9a0a1cb082b58df6ad9b772eb73fd5fa0a58af6a9e9709346466bbfb533dc6462f424954087ead532cc251a58fa3ab76c887292667b7b184302a98db3e4b7b98dbfb922ecab2d0709e8eb16572e9de2c02e60102"], 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x0) 600.157811ms ago: executing program 8 (id=9502): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x10000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 478.046133ms ago: executing program 8 (id=9506): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r6}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c010000100003cf05000000000000000000ae45", @ANYRES32=0x0, @ANYBLOB="00080000004000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="050011000200000014001280090001007665746800000000040002800a000200ffffffffffff0000bc001a8004001c00200002801c000180080017000d000000080014000500000008000c000000000054000a8014000700ff01000000000000000000000000000114000700fe8800000000000000000000000000010500080002000000050008000c000000050008000a00000005000800ee000000050008000c000000400002803c0001800800190002000000080016000500000008001200cc22ffff08001a00ffffffff080003000200000008001d0004000000080015008900000008002900796502"], 0x12c}, 0x1, 0x0, 0x0, 0x881}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@delalloc}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x404}}, {@data_err_abort}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6522}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") fallocate(0xffffffffffffffff, 0x8, 0x40000, 0x10000) clock_adjtime(0x5, &(0x7f0000000580)={0xffffffffffffffff, 0x9a, 0x0, 0x100000000, 0xf, 0x8000000000000000, 0xfffffffffffffffe, 0xffff, 0x10001, 0x5, 0x1, 0xffffffffffffffff, 0x3, 0x6fb9, 0x8000000000000001, 0x2, 0x4, 0xf, 0x6, 0x401, 0x4, 0x6, 0x1, 0x5, 0x80000001, 0x1}) pwritev(r0, 0x0, 0x0, 0x3000000, 0x0) 477.204193ms ago: executing program 1 (id=9507): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x3dfc, &(0x7f00000002c0)={0x0, 0xb7ca, 0x410, 0x2, 0x180}) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1ff, 0x0, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x7e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) mount(0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x40, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xbd, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x377, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffd5, 0x0, 0x8, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x8000, r2, 0xb) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 447.312983ms ago: executing program 1 (id=9510): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 445.527803ms ago: executing program 3 (id=9511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f0000000000), 0xd, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000500)=0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x3, 0x1, 0x2, 0x0, 0x5}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/237, 0xed}], 0x2, 0x8, 0x80) r3 = socket$inet(0x2, 0x2, 0x1) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x24) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000140)=0x7fffffff, 0x4) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000001200), 0x4000a, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB='\x00\x00']) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) socket(0x1d, 0xa, 0x300) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 414.285703ms ago: executing program 8 (id=9513): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 401.676274ms ago: executing program 3 (id=9514): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1fb6, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getuid() r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4442, 0x2) mount_setattr(r4, 0x0, 0x1100, &(0x7f0000000200)={0x100095, 0x70, 0x20000}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 375.209094ms ago: executing program 8 (id=9515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000d00a5715d2da4afe6c052bb13733a259709fd879137dc96cb27de2090ac18055e13f5d97fbef0f62558bfcd707cf4243a91403a67f81d3600"/73, @ANYRES16=r6, @ANYBLOB="10002abd7000fbdbdf25430000000c00990071970000180000000c00580046000000000000000c0058004d000000000000000c00580057000000000000000c00580072000000000000000c0058003900000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) getrandom(0xfffffffffffffffc, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r9 = socket$inet(0x2, 0x1, 0x8) setsockopt$inet_int(r9, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r10 = socket$inet(0x2, 0x3, 0x6) r11 = epoll_create1(0x80000) pselect6(0x40, &(0x7f0000000600)={0x8, 0x6, 0x4, 0xe, 0x7, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x9}) r12 = dup3(r9, r10, 0x0) setsockopt$inet_int(r12, 0x0, 0x5, 0x0, 0x0) 354.360724ms ago: executing program 1 (id=9516): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000003c0)={0x7, 0x1, 0x3, 0x4, 0x7fffffff, 0xfffffff8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r2 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) acct(0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000001a40), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) 353.688474ms ago: executing program 4 (id=9517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0x100000000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 338.230055ms ago: executing program 4 (id=9518): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1fb6, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getuid() r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4442, 0x2) mount_setattr(r4, 0x0, 0x1100, &(0x7f0000000200)={0x100095, 0x70, 0x20000}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 301.367805ms ago: executing program 3 (id=9519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) unshare(0x28020480) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2000000000000001, 0x2200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="980100", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x180}, 0x4040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 264.335576ms ago: executing program 4 (id=9520): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000f40000000000000502000000000579d5625149582074b8cc6add1399b4e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="66002000000000000000000000000000000000000000000000000000a32ee7ee94607826655fb014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x7ffd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) 103.230339ms ago: executing program 3 (id=9521): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x8200e, &(0x7f00000005c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@dax_always}, {@stripe={'stripe', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x1e}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '\x01\x00)\xa4\xa1_%\xa0\xab\xcf\x8c02\x1aW\xcc\xd9\x1c\xcff\xd2[\x11y\xb6k\x92\x96+\x03m\x88YOy\x83\xe9B\xe7\xff\xc0\x11\xeb%$\x9f`~o\xcf\x890\x99\xfc\x90\x80\x9c\xbe\xbbwoX\xa4I7\n\x14\x18q\x90 \xb0\x87\xa0P\xc2\xe3\x04\x86\xb6\"\xac@\x90\xf2\xac\xcc\xee\xb1u)we\xb5 \x9at\xbauq\xd5\xee\xcb\xad'}}]}, 0x3, 0x458, &(0x7f0000000940)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 102.544689ms ago: executing program 1 (id=9522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 102.204459ms ago: executing program 4 (id=9523): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 101.722199ms ago: executing program 4 (id=9524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000006800090300000000000000000a0000000000000004000b00080001000100000008000500", @ANYRES32=0x0, @ANYBLOB="1433"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x3) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000024000000020000000000000000000003000000000100000003000000faa2199effffff0d0000000000000b050000"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, r7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000096030000000000009e0000001811009d", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r11, 0x0, 0xffde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 101.324139ms ago: executing program 3 (id=9525): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 100.978459ms ago: executing program 1 (id=9526): socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f00000004c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}, 0x24040080) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1) r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) read(r4, &(0x7f0000000180)=""/22, 0x16) socket(0x1d, 0xa, 0x300) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="237512f946d0520f6aa1c5868c10319e26667517", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000dab0c65271be3498fb11b5d2532409c02a217da67a20a1f9a0fef7575472c7141108fb75f641c8983c2a5d6cf1b0d23ba27ed0a317388a5e47a4eb1621cb5b6a1a56cef980742d87ba6fe00287fc53ff39a162166653d47ddc040da6ac548776cdeff4f9340a075b1f88f3cd514b81575e07465555cbd78b82b1f660fc72ad0eb41b25ca371831099b8d2a6e540165ed24db5a9239b5f5a80d1d9b48cd467579a81b89000000000000000000000000000000f1f6f65576b2d9041ab7ebece46cd8ed8031e97bc6e4a0085d520983c601141cdec51f64ff704267748667c81948ccdd53db41cbf5b69ebba0cadcffaf0ada8b97c23a2ed60e36657235b90237c5bc087024621a955aafcd50792e303a51735b8b957c86e3762b0708a198d771f005ffdc1980955b04bc46dad9080a8a0025cf88d213377b188b9faf95c8b684bb74bc58adfd56212d3e1705c78d7f03cbebf4a14e980ed381a4296fed8f242c04404801a90b1d39f1a6984c45cc9f8b7c5ec81d34edd0643213c5ebeaac2c8d4ce96870f697ab6aa52d46a15e380617682f6281"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x10000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000800)={0x0, 0xee, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231da1da165220815b24431144fc05e1e207e12dbd9e26254d61bc9f47e4ec7e5e19a58ea2444e97a6daf57c895ec35c497d84e2f0c2e520e123f3cadf380a7e54836f7b5a9ba24b1bbe690b7f3de459adbe4d80a648ac2d8158e8b0948ea6ec4b8ac3ce4dafc8ed0f709c13a5ada9fa6c254b57e3cc83411e26dacb6aee290ced0bd65f18884b33dfd1229acd273f97d3edf7673747193ececc83e9ba1e1a73ceb8c347ac88333308df5e4d9ea133e2c6fa4bb1489980cf8ce20201bbba6334936fbc6bb7e6495ba48a3648fe57a0957de758182d3248601ab2bc9d2edf826255d5774021ae4d5d7f87a18927ac866b24e9fa2ca4fb5623c9e0ccbe491a61566f5f649047f97db9cea177ce08ec58c28e7e174f427b38c2e3c2d7165b321eeffe4fc03e8acc2c0ba7520699e8f6480261de487e33d3169790024cec06e3d776c98ccbc5da2ec0032c8241bedea3db12687a82e1eafa4ff828f5347e8ae0b22bcfa5de853d05381a04e8eb953a54c5ebb528bc03d4f7d74b1741f7833a7b90456ff847619b5893bd1515ed87cfd9aa44208572d1578849d5e7310b29e4a5af6026d9d5d2d6c18cc222fa375bc756e86d30a673420c4ac99c0b0a6baadd5bb53bf161074e85b105d5c8f704ea4fef269b3e2d62dc9e494393957a9aba76d7a7c79a1f37a9c0b20a69c47f74b489a8d60bb017272497f2cc7e3dd85a6622c0c1038978ca44170229f1ef25d11d2757940a5b6d35eab977937a5cccfb979dd79accb86476ae7da6fa96527a0ad6a7613c9008fd3cb2cbf81d7be93304dab9059c38cb54a191118bdf39148f6a7e44eca45272a3a2f1812ab6ac72f3009c235abcfe300a5599340b7baa1d6b07797a8fc29533b1d39b24642a867cc188327927d224045bb65e47238f7e260dbe81e2fdd8dac3f3da3724817975e008e0ccbfd958fec78f01cd6cf9d46594513d8a67c9ff5d1f745a7b1b82ee0d1b0babcbea6d4334f8f474c0f1d438d80da71e1158865621613cb9eb1b08f224fca3c26ed879fb13a7148d7a65ea7d2364b71568e2b56e7ab492866ff1d9f0d83647682fd3a31ca4c3735ed4accb26d45e9b26f80856a287fdd42a12de98d1b5d4f2278dd78a8b287a18d8edd003d338049214faef3d6c17b3117da3e1c60715480e1739b52ac39265803d5d6019559d028bbc2c874071c021c581458c67aea919e14db399a54314b1d734eaeafee4844ee9c208887b1c4b7c475997146ccd5f6df48262ab997fc0e5f3ef5e68506fd1d9835b7028c22933024dd9ea325dbb1f8172f9c564b973a1668fb8b566e484a6f821c7bf709aecc0794a71ecc8bcf2fd5ac8d0c76b19f4ce02fefa9780549df3f606a0e520b059f95cb4f749b8c9204f1a052a588ce8ccc519a89e5444aec50739e92a914782bd1c991ae6e403aec0655570e1f90d921695548a645c317d9c13d36da32f86bb104d4b36b66b1e766731dfca460354bd9194e90523afc4e36d9aadd8dc777cfe26c955dcf57736139668b29f4c8ad197050737ebba3d55eb30cc94bdc3a1e28c3573a98ca4d5502d9893755cf2dfec4843fa39eb0a9948b6589eceebfe750b2db0", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="000000002000000000000000010000e201000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x0) 100.638979ms ago: executing program 5 (id=9527): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 99.934929ms ago: executing program 3 (id=9528): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095", @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000002200)='percpu_alloc_percpu\x00', r1, 0x0, 0x80000000}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x6000500, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000001100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000010c0)=@nullb, r6, &(0x7f0000002180)) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x48, 0x0, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) 99.450739ms ago: executing program 1 (id=9529): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000004c0)=""/154) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x0) 91.841969ms ago: executing program 5 (id=9530): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1fb6, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000200000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getuid() r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4442, 0x2) mount_setattr(r4, 0x0, 0x1100, &(0x7f0000000200)={0x100095, 0x70, 0x20000}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 59.614069ms ago: executing program 4 (id=9531): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x10000080) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000010000000020000000000000071518a2b092b01ed5352546d9e56cbe72162c1420e5000ee37f03fb35c28a4", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32], 0x50) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40043d14, &(0x7f0000000080)={0x3, 0x1}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x80000001, 0x8001, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x3, 0xe}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x6, 0xdce}}}}]}, 0x44}}, 0x40805) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 0s ago: executing program 8 (id=9532): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) unshare(0x28020480) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2000000000000001, 0x2200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x180}, 0x4040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): x7f183402e169 code=0x7ffc0000 [ 480.007496][ T29] audit: type=1326 audit(716.036:60284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.031060][ T29] audit: type=1326 audit(716.036:60285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.054116][ T29] audit: type=1326 audit(716.036:60286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.077843][ T29] audit: type=1326 audit(716.036:60287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.100904][ T29] audit: type=1326 audit(716.036:60288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.116764][T26646] dummy0 speed is unknown, defaulting to 1000 [ 480.124711][ T29] audit: type=1326 audit(716.036:60289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.153137][ T29] audit: type=1326 audit(716.036:60290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.176798][ T29] audit: type=1326 audit(716.036:60291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.6.8509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 480.273961][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8515'. [ 480.290182][T26652] bond1: entered promiscuous mode [ 480.295384][T26652] bond1: entered allmulticast mode [ 480.300742][T26652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.339836][T26655] dummy0 speed is unknown, defaulting to 1000 [ 480.505714][T26661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8518'. [ 480.806508][T26670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8522'. [ 481.342794][T26677] netlink: 'syz.1.8524': attribute type 4 has an invalid length. [ 481.543890][T26687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.555695][T26687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.579961][T26689] netlink: 'syz.1.8528': attribute type 13 has an invalid length. [ 481.606263][T26689] smc: net device bond0 applied user defined pnetid SYZ0 [ 481.617028][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8530'. [ 481.637171][T26689] smc: net device bond0 erased user defined pnetid SYZ0 [ 481.666774][T26687] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8529'. [ 481.719083][T26696] loop6: detected capacity change from 0 to 1024 [ 481.748312][T26698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8533'. [ 481.786950][T26702] loop6: detected capacity change from 0 to 2048 [ 481.844934][T26702] loop6: p1 < > p4 [ 481.849784][T26702] loop6: p4 size 8388608 extends beyond EOD, truncated [ 481.995976][T26716] dummy0 speed is unknown, defaulting to 1000 [ 482.273260][T26735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26735 comm=syz.5.8547 [ 482.311972][T26737] loop6: detected capacity change from 0 to 512 [ 482.367112][T26739] loop6: detected capacity change from 0 to 128 [ 482.379753][T26739] FAT-fs (loop6): Directory bread(block 162) failed [ 482.388585][T26739] FAT-fs (loop6): Directory bread(block 163) failed [ 482.396604][T26739] FAT-fs (loop6): Directory bread(block 164) failed [ 482.403285][T26739] FAT-fs (loop6): Directory bread(block 165) failed [ 482.416759][T26739] FAT-fs (loop6): Directory bread(block 166) failed [ 482.425227][T26739] FAT-fs (loop6): Directory bread(block 167) failed [ 482.427043][T26744] netlink: 'syz.4.8551': attribute type 4 has an invalid length. [ 482.431885][T26739] FAT-fs (loop6): Directory bread(block 168) failed [ 482.431912][T26739] FAT-fs (loop6): Directory bread(block 169) failed [ 482.432944][T26739] FAT-fs (loop6): Directory bread(block 162) failed [ 482.461078][T26739] FAT-fs (loop6): Directory bread(block 163) failed [ 482.468135][T26739] syz.6.8549: attempt to access beyond end of device [ 482.468135][T26739] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 482.482144][T26739] syz.6.8549: attempt to access beyond end of device [ 482.482144][T26739] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 482.498897][T26745] netlink: 'syz.5.8550': attribute type 4 has an invalid length. [ 482.543704][T26751] dummy0 speed is unknown, defaulting to 1000 [ 482.565847][T26755] loop6: detected capacity change from 0 to 1024 [ 482.572967][T26755] EXT4-fs: Ignoring removed nobh option [ 482.578572][T26755] EXT4-fs: Ignoring removed bh option [ 482.608330][T26755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.712289][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.855854][T26780] netlink: 'syz.6.8562': attribute type 13 has an invalid length. [ 482.947316][T26786] loop6: detected capacity change from 0 to 128 [ 482.954868][T26786] FAT-fs (loop6): Directory bread(block 162) failed [ 482.956400][T26788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.961674][T26786] FAT-fs (loop6): Directory bread(block 163) failed [ 482.961699][T26786] FAT-fs (loop6): Directory bread(block 164) failed [ 482.961720][T26786] FAT-fs (loop6): Directory bread(block 165) failed [ 482.961742][T26786] FAT-fs (loop6): Directory bread(block 166) failed [ 482.961764][T26786] FAT-fs (loop6): Directory bread(block 167) failed [ 482.961789][T26786] FAT-fs (loop6): Directory bread(block 168) failed [ 482.961880][T26786] FAT-fs (loop6): Directory bread(block 169) failed [ 482.963064][T26786] FAT-fs (loop6): Directory bread(block 162) failed [ 482.972679][T26788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.978710][T26786] FAT-fs (loop6): Directory bread(block 163) failed [ 483.039833][T26786] syz.6.8565: attempt to access beyond end of device [ 483.039833][T26786] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 483.053194][T26786] syz.6.8565: attempt to access beyond end of device [ 483.053194][T26786] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 483.162653][T26800] netlink: 'syz.1.8569': attribute type 13 has an invalid length. [ 483.175330][T26800] smc: net device bond0 applied user defined pnetid SYZ0 [ 483.183078][T26800] smc: net device bond0 erased user defined pnetid SYZ0 [ 483.263631][T26804] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26804 comm=syz.1.8571 [ 483.462496][T26818] netlink: 'syz.1.8577': attribute type 13 has an invalid length. [ 483.470397][T26818] netlink: 'syz.1.8577': attribute type 27 has an invalid length. [ 483.485784][T26818] smc: net device bond0 applied user defined pnetid SYZ0 [ 483.497145][T26818] smc: net device bond0 erased user defined pnetid SYZ0 [ 483.616025][T26826] dummy0 speed is unknown, defaulting to 1000 [ 483.704326][T26833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26833 comm=syz.3.8583 [ 483.731513][T26829] smc: net device bond0 applied user defined pnetid SYZ0 [ 483.739093][T26829] smc: net device bond0 erased user defined pnetid SYZ0 [ 483.863344][T26849] netlink: 'syz.4.8586': attribute type 4 has an invalid length. [ 483.897881][T26854] __nla_validate_parse: 4 callbacks suppressed [ 483.897901][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8591'. [ 483.902012][T26853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.928091][T26853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.953238][T26857] dummy0 speed is unknown, defaulting to 1000 [ 483.969861][T26853] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8590'. [ 484.001829][T26857] loop6: detected capacity change from 0 to 512 [ 484.008741][T26857] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 484.020961][T26857] EXT4-fs (loop6): 1 truncate cleaned up [ 484.027064][T26857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.056089][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.074080][T26862] loop6: detected capacity change from 0 to 512 [ 484.080968][T26862] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.089315][T26862] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 484.101363][T26862] EXT4-fs (loop6): 1 truncate cleaned up [ 484.108251][T26862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.210135][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.699005][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8602'. [ 484.797045][T26901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26901 comm=syz.4.8608 [ 485.009929][T26917] 9pnet_fd: Insufficient options for proto=fd [ 485.169703][T26919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8614'. [ 485.228190][T26924] loop6: detected capacity change from 0 to 1024 [ 485.271626][T26926] smc: net device bond0 applied user defined pnetid SYZ0 [ 485.280602][T26926] smc: net device bond0 erased user defined pnetid SYZ0 [ 485.409325][T26934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26934 comm=syz.6.8621 [ 485.467138][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 485.467156][ T29] audit: type=1326 audit(721.112:60864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.497553][ T29] audit: type=1326 audit(721.112:60865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.520649][ T29] audit: type=1326 audit(721.149:60866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.544689][ T29] audit: type=1326 audit(721.149:60867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.567757][ T29] audit: type=1326 audit(721.149:60868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.590815][ T29] audit: type=1326 audit(721.186:60869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.613833][ T29] audit: type=1326 audit(721.186:60870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.636891][ T29] audit: type=1326 audit(721.186:60871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.659881][ T29] audit: type=1326 audit(721.186:60872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.683017][ T29] audit: type=1326 audit(721.186:60873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.1.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 485.753336][T26949] dummy0 speed is unknown, defaulting to 1000 [ 486.144308][T26966] validate_nla: 2 callbacks suppressed [ 486.144326][T26966] netlink: 'syz.1.8633': attribute type 4 has an invalid length. [ 486.323554][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8637'. [ 486.401548][T26981] loop6: detected capacity change from 0 to 512 [ 486.408848][T26981] EXT4-fs (loop6): Invalid log cluster size: 2560 [ 486.520482][T26978] 9pnet_fd: Insufficient options for proto=fd [ 487.143772][T26979] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 487.199703][T26992] dummy0 speed is unknown, defaulting to 1000 [ 487.498338][T27000] netlink: 'syz.6.8645': attribute type 13 has an invalid length. [ 487.695959][T27009] loop6: detected capacity change from 0 to 128 [ 487.721874][T27009] FAT-fs (loop6): Directory bread(block 162) failed [ 487.739125][T27009] FAT-fs (loop6): Directory bread(block 163) failed [ 487.780937][T27009] FAT-fs (loop6): Directory bread(block 164) failed [ 487.817307][T27009] FAT-fs (loop6): Directory bread(block 165) failed [ 487.856856][T27019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27019 comm=syz.1.8652 [ 487.872531][T27009] FAT-fs (loop6): Directory bread(block 166) failed [ 487.889116][T27009] FAT-fs (loop6): Directory bread(block 167) failed [ 487.895769][T27009] FAT-fs (loop6): Directory bread(block 168) failed [ 487.921796][T27009] FAT-fs (loop6): Directory bread(block 169) failed [ 487.942510][T27009] FAT-fs (loop6): Directory bread(block 162) failed [ 487.949170][T27009] FAT-fs (loop6): Directory bread(block 163) failed [ 487.977254][T27009] syz.6.8648: attempt to access beyond end of device [ 487.977254][T27009] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 487.994040][T27009] syz.6.8648: attempt to access beyond end of device [ 487.994040][T27009] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 488.058582][T27026] netlink: 'syz.3.8655': attribute type 13 has an invalid length. [ 488.064893][T27028] dummy0 speed is unknown, defaulting to 1000 [ 488.120071][T27026] smc: net device bond0 applied user defined pnetid SYZ0 [ 488.129339][T27026] smc: net device bond0 erased user defined pnetid SYZ0 [ 488.152919][T27032] netlink: 'syz.4.8658': attribute type 4 has an invalid length. [ 488.180738][T27028] loop6: detected capacity change from 0 to 512 [ 488.188261][T27028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 488.206626][T27028] EXT4-fs (loop6): 1 truncate cleaned up [ 488.212816][T27028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.347484][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.403271][T27048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8663'. [ 488.549894][T27052] netlink: 'syz.6.8666': attribute type 13 has an invalid length. [ 488.563418][T27052] smc: net device bond0 applied user defined pnetid SYZ0 [ 488.571782][T27052] smc: net device bond0 erased user defined pnetid SYZ0 [ 488.865824][T27067] loop6: detected capacity change from 0 to 512 [ 488.875486][T27067] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.8671: casefold flag without casefold feature [ 488.890529][T27067] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.8671: couldn't read orphan inode 15 (err -117) [ 488.903057][T27067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.070810][T27080] 9pnet_fd: Insufficient options for proto=fd [ 489.223062][T27067] 9pnet_fd: Insufficient options for proto=fd [ 489.387818][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.524142][T27091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27091 comm=syz.6.8678 [ 489.575274][T27093] netlink: 'syz.1.8681': attribute type 13 has an invalid length. [ 489.618773][T27093] smc: net device bond0 applied user defined pnetid SYZ0 [ 489.641407][T27093] smc: net device bond0 erased user defined pnetid SYZ0 [ 489.672349][T27099] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.8683'. [ 489.705806][T27101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27101 comm=syz.6.8684 [ 490.146467][T27118] netlink: 'syz.6.8691': attribute type 13 has an invalid length. [ 490.194512][T27118] smc: net device bond0 applied user defined pnetid SYZ0 [ 490.225525][T27118] smc: net device bond0 erased user defined pnetid SYZ0 [ 490.245966][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8695'. [ 490.255442][T27124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.267209][T27124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.301126][T27128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27128 comm=syz.6.8697 [ 490.429444][T27136] netlink: 'syz.4.8700': attribute type 4 has an invalid length. [ 490.500383][T27143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27143 comm=syz.4.8703 [ 490.621891][T27148] loop6: detected capacity change from 0 to 2048 [ 490.628624][T27148] ext4: Unknown parameter '¡' [ 490.632982][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8694'. [ 490.643055][T27152] bridge_slave_1: left allmulticast mode [ 490.648776][T27152] bridge_slave_1: left promiscuous mode [ 490.654438][T27152] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.663083][T27152] bridge_slave_0: left allmulticast mode [ 490.668749][T27152] bridge_slave_0: left promiscuous mode [ 490.674495][T27152] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.742699][T27141] 9pnet_fd: Insufficient options for proto=fd [ 490.756856][T27158] rdma_op ffff88810dbcc580 conn xmit_rdma 0000000000000000 [ 490.813304][T27168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8713'. [ 490.893618][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 490.893636][ T29] audit: type=1326 audit(726.124:61655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 490.937030][ T29] audit: type=1326 audit(726.124:61656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 490.960166][ T29] audit: type=1326 audit(726.124:61657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 490.983194][ T29] audit: type=1326 audit(726.124:61658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.006280][ T29] audit: type=1326 audit(726.124:61659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.029342][ T29] audit: type=1326 audit(726.124:61660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.052433][ T29] audit: type=1326 audit(726.124:61661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.075664][ T29] audit: type=1326 audit(726.124:61662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.098842][ T29] audit: type=1326 audit(726.124:61663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.121850][ T29] audit: type=1326 audit(726.124:61664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.4.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 491.189522][T27194] FAULT_INJECTION: forcing a failure. [ 491.189522][T27194] name failslab, interval 1, probability 0, space 0, times 0 [ 491.202326][T27194] CPU: 0 UID: 0 PID: 27194 Comm: syz.4.8722 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 491.202487][T27194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.202504][T27194] Call Trace: [ 491.202512][T27194] [ 491.202521][T27194] dump_stack_lvl+0xf6/0x150 [ 491.202550][T27194] dump_stack+0x15/0x1a [ 491.202571][T27194] should_fail_ex+0x261/0x270 [ 491.202628][T27194] should_failslab+0x8f/0xb0 [ 491.202652][T27194] kmem_cache_alloc_noprof+0x59/0x340 [ 491.202686][T27194] ? getname_flags+0x81/0x3b0 [ 491.202715][T27194] getname_flags+0x81/0x3b0 [ 491.202771][T27194] __se_sys_newstat+0x4c/0x280 [ 491.202810][T27194] ? fput+0x99/0xd0 [ 491.202832][T27194] ? ksys_write+0x180/0x1b0 [ 491.202851][T27194] __x64_sys_newstat+0x31/0x40 [ 491.202979][T27194] x64_sys_call+0x6f3/0x2e10 [ 491.203061][T27194] do_syscall_64+0xc9/0x1a0 [ 491.203092][T27194] ? clear_bhb_loop+0x25/0x80 [ 491.203170][T27194] ? clear_bhb_loop+0x25/0x80 [ 491.203257][T27194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.203281][T27194] RIP: 0033:0x7f678f62e169 [ 491.203299][T27194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.203382][T27194] RSP: 002b:00007f678dc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 491.203405][T27194] RAX: ffffffffffffffda RBX: 00007f678f855fa0 RCX: 00007f678f62e169 [ 491.203419][T27194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 491.203434][T27194] RBP: 00007f678dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 491.203449][T27194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.203463][T27194] R13: 0000000000000000 R14: 00007f678f855fa0 R15: 00007fffddf75908 [ 491.203511][T27194] [ 491.414869][T27197] rdma_op ffff88811502e980 conn xmit_rdma 0000000000000000 [ 491.423643][T27195] netlink: 'syz.5.8720': attribute type 4 has an invalid length. [ 491.441594][T27199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8726'. [ 491.452608][T27199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.460471][T27199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.501920][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8727'. [ 491.511128][T27203] bridge_slave_1: left allmulticast mode [ 491.516899][T27203] bridge_slave_1: left promiscuous mode [ 491.522833][T27203] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.531324][T27203] bridge_slave_0: left allmulticast mode [ 491.537053][T27203] bridge_slave_0: left promiscuous mode [ 491.542799][T27203] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.683021][T27212] veth1_to_bond: entered allmulticast mode [ 491.690199][T27212] veth1_to_bond: left allmulticast mode [ 491.720767][T27219] netlink: 'syz.4.8732': attribute type 13 has an invalid length. [ 491.729454][T27215] loop6: detected capacity change from 0 to 1024 [ 491.747374][T27219] smc: net device bond0 applied user defined pnetid SYZ0 [ 491.755007][T27219] smc: net device bond0 erased user defined pnetid SYZ0 [ 491.766372][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8733'. [ 491.807640][T27225] loop6: detected capacity change from 0 to 512 [ 491.826663][T27225] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.8735: casefold flag without casefold feature [ 491.856622][T27225] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.8735: couldn't read orphan inode 15 (err -117) [ 491.869805][T27225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.902289][T27232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8736'. [ 491.938091][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8737'. [ 491.942214][T27225] 9pnet_fd: Insufficient options for proto=fd [ 491.969976][T27233] bond1: entered promiscuous mode [ 491.975097][T27233] bond1: entered allmulticast mode [ 491.980355][T27233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.990257][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.441101][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8744'. [ 492.476202][T27256] netlink: 'syz.6.8746': attribute type 13 has an invalid length. [ 492.488703][T27256] smc: net device bond0 applied user defined pnetid SYZ0 [ 492.496683][T27256] smc: net device bond0 erased user defined pnetid SYZ0 [ 492.583274][T27213] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 492.798324][T27267] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=27267 comm=syz.3.8751 [ 492.846736][T27273] loop6: detected capacity change from 0 to 1024 [ 492.873437][T27273] EXT4-fs: Ignoring removed nobh option [ 492.879161][T27273] EXT4-fs: Ignoring removed bh option [ 492.918326][T27279] netlink: 'syz.4.8756': attribute type 13 has an invalid length. [ 492.941551][T27273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.236934][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.259835][T27300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.283480][T27300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.338642][T27310] FAULT_INJECTION: forcing a failure. [ 493.338642][T27310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.352609][T27310] CPU: 0 UID: 0 PID: 27310 Comm: syz.6.8764 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 493.352639][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.352651][T27310] Call Trace: [ 493.352657][T27310] [ 493.352665][T27310] dump_stack_lvl+0xf6/0x150 [ 493.352751][T27310] dump_stack+0x15/0x1a [ 493.352770][T27310] should_fail_ex+0x261/0x270 [ 493.352797][T27310] should_fail+0xb/0x10 [ 493.352818][T27310] should_fail_usercopy+0x1a/0x20 [ 493.352868][T27310] _copy_from_iter+0xd8/0xd10 [ 493.352898][T27310] ? kmalloc_reserve+0x16e/0x190 [ 493.352921][T27310] ? __build_skb_around+0x199/0x1f0 [ 493.352941][T27310] ? __alloc_skb+0x227/0x320 [ 493.352995][T27310] ? __virt_addr_valid+0x1ed/0x250 [ 493.353017][T27310] ? __check_object_size+0x367/0x510 [ 493.353054][T27310] netlink_sendmsg+0x492/0x720 [ 493.353095][T27310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.353118][T27310] __sock_sendmsg+0x140/0x180 [ 493.353174][T27310] ____sys_sendmsg+0x350/0x4e0 [ 493.353207][T27310] __sys_sendmsg+0x1a0/0x240 [ 493.353253][T27310] __x64_sys_sendmsg+0x46/0x50 [ 493.353280][T27310] x64_sys_call+0x26f3/0x2e10 [ 493.353370][T27310] do_syscall_64+0xc9/0x1a0 [ 493.353418][T27310] ? clear_bhb_loop+0x25/0x80 [ 493.353441][T27310] ? clear_bhb_loop+0x25/0x80 [ 493.353461][T27310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.353482][T27310] RIP: 0033:0x7f183402e169 [ 493.353500][T27310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.353570][T27310] RSP: 002b:00007f1832697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.353592][T27310] RAX: ffffffffffffffda RBX: 00007f1834255fa0 RCX: 00007f183402e169 [ 493.353606][T27310] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 493.353621][T27310] RBP: 00007f1832697090 R08: 0000000000000000 R09: 0000000000000000 [ 493.353636][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.353650][T27310] R13: 0000000000000000 R14: 00007f1834255fa0 R15: 00007ffcf163c988 [ 493.353686][T27310] [ 493.378335][T27301] dummy0 speed is unknown, defaulting to 1000 [ 493.634162][T27319] loop6: detected capacity change from 0 to 2048 [ 493.647870][T27301] chnl_net:caif_netlink_parms(): no params data found [ 493.685591][T27319] loop6: p1 < > p4 [ 493.690175][T27319] loop6: p4 size 8388608 extends beyond EOD, truncated [ 493.690662][T27301] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.704295][T27301] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.712587][T27301] bridge_slave_0: entered allmulticast mode [ 493.719379][T27301] bridge_slave_0: entered promiscuous mode [ 493.751576][T27301] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.758775][T27301] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.768808][T27301] bridge_slave_1: entered allmulticast mode [ 493.777118][T27301] bridge_slave_1: entered promiscuous mode [ 493.798180][T27301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.808927][T27301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.837439][T27301] team0: Port device team_slave_0 added [ 493.853653][T27301] team0: Port device team_slave_1 added [ 493.884311][T27301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.891402][T27301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.917354][T27301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.931895][T27301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.939004][T27301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.965189][T27301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.995793][T27335] netlink: 'syz.4.8770': attribute type 13 has an invalid length. [ 494.036312][T27301] hsr_slave_0: entered promiscuous mode [ 494.053594][T27301] hsr_slave_1: entered promiscuous mode [ 494.059515][T27301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.069646][T27301] Cannot create hsr debugfs directory [ 494.098215][ T3797] bridge_slave_1: left allmulticast mode [ 494.104061][ T3797] bridge_slave_1: left promiscuous mode [ 494.110062][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.123955][ T3797] bridge_slave_0: left allmulticast mode [ 494.129729][ T3797] bridge_slave_0: left promiscuous mode [ 494.135498][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.142722][T27342] loop6: detected capacity change from 0 to 512 [ 494.169615][T27342] EXT4-fs: Ignoring removed mblk_io_submit option [ 494.183197][T27342] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 494.229887][T27342] EXT4-fs (loop6): 1 truncate cleaned up [ 494.235952][T27342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.352650][T27355] netlink: 'syz.5.8776': attribute type 13 has an invalid length. [ 494.748658][ T3797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.760139][ T3797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.769370][ T3797] bond0 (unregistering): Released all slaves [ 494.778168][ T3797] bond1 (unregistering): Released all slaves [ 494.812011][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.847496][ T3797] hsr_slave_0: left promiscuous mode [ 494.854835][ T3797] hsr_slave_1: left promiscuous mode [ 494.862209][T27367] rdma_op ffff888117d54580 conn xmit_rdma 0000000000000000 [ 494.867799][ T3797] pim6reg (unregistering): left allmulticast mode [ 494.878730][T27365] loop6: detected capacity change from 0 to 2048 [ 494.923331][ T3797] team0 (unregistering): Port device team_slave_1 removed [ 494.942578][T27365] loop6: p1 < > p4 [ 494.949539][T27365] loop6: p4 size 8388608 extends beyond EOD, truncated [ 494.963438][ T3797] team0 (unregistering): Port device team_slave_0 removed [ 494.963771][T27372] netlink: 'syz.1.8781': attribute type 13 has an invalid length. [ 495.073291][T27380] 9pnet_fd: Insufficient options for proto=fd [ 495.135684][T27384] netlink: 'syz.6.8783': attribute type 13 has an invalid length. [ 495.154184][T27384] smc: net device bond0 applied user defined pnetid SYZ0 [ 495.162108][T27384] smc: net device bond0 erased user defined pnetid SYZ0 [ 495.173683][T27386] __nla_validate_parse: 1 callbacks suppressed [ 495.173701][T27386] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8784'. [ 495.246003][T27388] loop6: detected capacity change from 0 to 512 [ 495.269498][T27388] EXT4-fs (loop6): Invalid log cluster size: 2560 [ 495.700708][T27301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.823310][T27403] rdma_op ffff888120a8bd80 conn xmit_rdma 0000000000000000 [ 495.842799][T27301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.862698][T27301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.876359][T27301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 495.930842][T27405] netlink: 'syz.6.8791': attribute type 13 has an invalid length. [ 495.947581][T27301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.963358][T27301] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.973442][T25417] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.980587][T25417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.005855][T27301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.016333][T27301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.038190][T25417] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.045339][T25417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.096210][T27409] loop6: detected capacity change from 0 to 512 [ 496.113525][T27409] EXT4-fs (loop6): Invalid log cluster size: 2560 [ 496.138902][T27301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.256554][T27427] loop6: detected capacity change from 0 to 512 [ 496.289046][T27301] veth0_vlan: entered promiscuous mode [ 496.310273][T27301] veth1_vlan: entered promiscuous mode [ 496.342972][T27301] veth0_macvtap: entered promiscuous mode [ 496.363167][T27301] veth1_macvtap: entered promiscuous mode [ 496.369452][T27431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27431 comm=syz.6.8798 [ 496.421911][T27301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.438365][T27301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.458369][T27301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.467132][T27301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.475946][T27301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.484725][T27301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.554730][T27439] loop6: detected capacity change from 0 to 512 [ 496.570728][T27439] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.585257][T27439] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 496.596189][T27442] xt_l2tp: invalid flags combination: 0 [ 496.606364][T27442] binfmt_misc: register: failed to install interpreter file ./file0 [ 496.609869][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 496.609888][ T29] audit: type=1400 audit(731.395:62472): avc: denied { relabelfrom } for pid=27441 comm="syz.3.8763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 496.641227][ T29] audit: type=1400 audit(731.395:62473): avc: denied { relabelto } for pid=27441 comm="syz.3.8763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 496.676346][T27439] EXT4-fs (loop6): 1 truncate cleaned up [ 496.682390][T27439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.768738][T27446] 9pnet_fd: Insufficient options for proto=fd [ 496.836507][T27445] 9pnet_fd: Insufficient options for proto=fd [ 496.922990][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.935887][ T29] audit: type=1326 audit(731.690:62474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 496.959001][ T29] audit: type=1326 audit(731.690:62475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 496.982066][ T29] audit: type=1326 audit(731.708:62476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.005141][ T29] audit: type=1326 audit(731.708:62477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.028319][ T29] audit: type=1326 audit(731.708:62478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.051447][ T29] audit: type=1326 audit(731.708:62479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.074455][ T29] audit: type=1326 audit(731.708:62480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.097658][ T29] audit: type=1326 audit(731.708:62481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27450 comm="syz.4.8803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678f62e169 code=0x7ffc0000 [ 497.135749][T27453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.163084][T27453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.256826][T27453] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8805'. [ 497.280594][T27463] loop6: detected capacity change from 0 to 512 [ 497.325810][T27463] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.8808: casefold flag without casefold feature [ 497.376335][T27463] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.8808: couldn't read orphan inode 15 (err -117) [ 497.394130][T27469] netlink: 'syz.1.8811': attribute type 13 has an invalid length. [ 497.427465][T27469] smc: net device bond0 applied user defined pnetid SYZ0 [ 497.442247][T27463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.466091][T27469] smc: net device bond0 erased user defined pnetid SYZ0 [ 497.628351][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8815'. [ 497.638709][T27463] 9pnet_fd: Insufficient options for proto=fd [ 497.895645][T27488] rdma_op ffff888120a88180 conn xmit_rdma 0000000000000000 [ 498.009295][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.079955][T27491] 9pnet_fd: Insufficient options for proto=fd [ 498.116558][T27505] netlink: 'syz.6.8826': attribute type 13 has an invalid length. [ 498.150352][T27505] smc: net device bond0 applied user defined pnetid SYZ0 [ 498.160962][T27505] smc: net device bond0 erased user defined pnetid SYZ0 [ 498.661276][T27523] dummy0 speed is unknown, defaulting to 1000 [ 498.783326][T27534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.824504][T27534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.904343][T27534] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8837'. [ 499.416979][T27546] netlink: '+}[@': attribute type 4 has an invalid length. [ 499.439486][T27546] netlink: '+}[@': attribute type 4 has an invalid length. [ 499.514645][T27560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.530884][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.595642][T27560] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8846'. [ 499.626308][T27565] dummy0 speed is unknown, defaulting to 1000 [ 499.790155][T27574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8851'. [ 499.901286][T27577] netlink: 'syz.5.8852': attribute type 13 has an invalid length. [ 499.915302][T27577] smc: net device bond0 applied user defined pnetid SYZ0 [ 499.923819][T27577] smc: net device bond0 erased user defined pnetid SYZ0 [ 500.178861][T27595] netlink: 'syz.4.8859': attribute type 13 has an invalid length. [ 500.197596][T27597] dummy0 speed is unknown, defaulting to 1000 [ 500.297861][T27609] netlink: 'syz.4.8865': attribute type 13 has an invalid length. [ 500.311554][T27609] smc: net device bond0 applied user defined pnetid SYZ0 [ 500.321256][T27609] smc: net device bond0 erased user defined pnetid SYZ0 [ 500.529012][T27620] 9pnet_fd: Insufficient options for proto=fd [ 500.662054][T27627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8872'. [ 500.812585][T27630] netlink: 'syz.5.8873': attribute type 13 has an invalid length. [ 500.838860][T27630] smc: net device bond0 applied user defined pnetid SYZ0 [ 500.924140][T27638] dummy0 speed is unknown, defaulting to 1000 [ 500.950659][T27640] netlink: 'syz.3.8878': attribute type 13 has an invalid length. [ 501.037367][T27640] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.044749][T27640] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.094422][T27640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.105587][T27640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.146817][T27640] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.155975][T27640] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.165068][T27640] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.174795][T27640] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.196144][T27647] smc: net device bond0 erased user defined pnetid SYZ0 [ 501.475441][T27665] netlink: 'syz.6.8887': attribute type 13 has an invalid length. [ 501.489553][T27665] smc: net device bond0 applied user defined pnetid SYZ0 [ 502.192230][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 502.192244][ T29] audit: type=1326 audit(736.554:63074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.192431][ T29] audit: type=1326 audit(736.554:63075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.192598][ T29] audit: type=1326 audit(736.554:63076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.192821][ T29] audit: type=1326 audit(736.554:63077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.193065][ T29] audit: type=1326 audit(736.554:63078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.193178][ T29] audit: type=1326 audit(736.554:63079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.193335][ T29] audit: type=1326 audit(736.554:63080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.193604][ T29] audit: type=1326 audit(736.554:63081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.193964][ T29] audit: type=1326 audit(736.554:63082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.194116][ T29] audit: type=1326 audit(736.554:63083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27680 comm="syz.1.8891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c455e169 code=0x7ffc0000 [ 502.414899][T27683] dummy0 speed is unknown, defaulting to 1000 [ 502.518469][T27683] chnl_net:caif_netlink_parms(): no params data found [ 502.532766][T27694] smc: net device bond0 erased user defined pnetid SYZ0 [ 502.565000][T27683] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.572830][T27683] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.581240][T27683] bridge_slave_0: entered allmulticast mode [ 502.587793][T27683] bridge_slave_0: entered promiscuous mode [ 502.594887][T27683] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.602724][T27683] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.611015][T27683] bridge_slave_1: entered allmulticast mode [ 502.617708][T27683] bridge_slave_1: entered promiscuous mode [ 502.638983][T27683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.652928][T27683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.688646][T27683] team0: Port device team_slave_0 added [ 502.700862][T27683] team0: Port device team_slave_1 added [ 502.740677][T27683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.748445][T27683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.775112][T27683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.788129][T27711] smc: net device bond0 applied user defined pnetid SYZ0 [ 502.796631][T27683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.803632][T27683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.830306][T27683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.861754][T27683] hsr_slave_0: entered promiscuous mode [ 502.868020][T27683] hsr_slave_1: entered promiscuous mode [ 502.876010][T27683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.883718][T27683] Cannot create hsr debugfs directory [ 502.887710][T27717] FAULT_INJECTION: forcing a failure. [ 502.887710][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 502.902060][T27717] CPU: 1 UID: 0 PID: 27717 Comm: syz.6.8902 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 502.902093][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.902108][T27717] Call Trace: [ 502.902116][T27717] [ 502.902131][T27717] dump_stack_lvl+0xf6/0x150 [ 502.902152][T27717] dump_stack+0x15/0x1a [ 502.902167][T27717] should_fail_ex+0x261/0x270 [ 502.902188][T27717] should_failslab+0x8f/0xb0 [ 502.902208][T27717] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 502.902334][T27717] ? shmem_alloc_inode+0x34/0x50 [ 502.902369][T27717] shmem_alloc_inode+0x34/0x50 [ 502.902442][T27717] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 502.902464][T27717] alloc_inode+0x40/0x170 [ 502.902482][T27717] new_inode+0x1e/0xe0 [ 502.902580][T27717] shmem_get_inode+0x24e/0x730 [ 502.902604][T27717] __shmem_file_setup+0x127/0x1f0 [ 502.902624][T27717] shmem_file_setup+0x3b/0x50 [ 502.902673][T27717] __se_sys_memfd_create+0x2e1/0x5a0 [ 502.902704][T27717] __x64_sys_memfd_create+0x31/0x40 [ 502.902810][T27717] x64_sys_call+0x1163/0x2e10 [ 502.902830][T27717] do_syscall_64+0xc9/0x1a0 [ 502.902863][T27717] ? clear_bhb_loop+0x25/0x80 [ 502.902882][T27717] ? clear_bhb_loop+0x25/0x80 [ 502.902901][T27717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.902920][T27717] RIP: 0033:0x7f183402e169 [ 502.902933][T27717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.903022][T27717] RSP: 002b:00007f1832696e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 502.903038][T27717] RAX: ffffffffffffffda RBX: 0000000000000597 RCX: 00007f183402e169 [ 502.903049][T27717] RDX: 00007f1832696ef0 RSI: 0000000000000000 RDI: 00007f18340b1404 [ 502.903060][T27717] RBP: 0000200000000b80 R08: 00007f1832696bb7 R09: 00007f1832696e40 [ 502.903071][T27717] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 502.903081][T27717] R13: 00007f1832696ef0 R14: 00007f1832696eb0 R15: 0000200000000340 [ 502.903098][T27717] [ 503.264196][T27731] validate_nla: 3 callbacks suppressed [ 503.264213][T27731] netlink: 'syz.5.8906': attribute type 13 has an invalid length. [ 503.281737][T27731] smc: net device bond0 erased user defined pnetid SYZ0 [ 503.281905][T27732] netlink: 'syz.6.8905': attribute type 4 has an invalid length. [ 503.337106][T27734] netlink: 'syz.5.8907': attribute type 13 has an invalid length. [ 503.350415][T27734] smc: net device bond0 applied user defined pnetid SYZ0 [ 503.357995][T27734] smc: net device bond0 erased user defined pnetid SYZ0 [ 503.422833][T27683] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.432667][T27683] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.442143][T27683] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.451363][T27683] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.488962][T27683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.503108][T27683] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.515483][T25409] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.522731][T25409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.544784][T25409] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.551882][T25409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.605815][T27748] rdma_op ffff88810800c980 conn xmit_rdma 0000000000000000 [ 503.615586][T27683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.701030][T27683] veth0_vlan: entered promiscuous mode [ 503.710296][T27683] veth1_vlan: entered promiscuous mode [ 503.729699][T27683] veth0_macvtap: entered promiscuous mode [ 503.737568][T27683] veth1_macvtap: entered promiscuous mode [ 503.752768][T27683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.767307][T27683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.777915][T27683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.778036][T27683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.778100][T27683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.778144][T27683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.808417][T27763] netlink: 'syz.3.8916': attribute type 13 has an invalid length. [ 503.843097][T27763] smc: net device bond0 applied user defined pnetid SYZ0 [ 503.850731][T27763] smc: net device bond0 erased user defined pnetid SYZ0 [ 504.273092][T27794] netlink: 'syz.4.8928': attribute type 13 has an invalid length. [ 504.287003][T27794] smc: net device bond0 applied user defined pnetid SYZ0 [ 504.295004][T27794] smc: net device bond0 erased user defined pnetid SYZ0 [ 504.340408][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8929'. [ 504.371244][T27798] rdma_op ffff888147d17180 conn xmit_rdma 0000000000000000 [ 504.864366][T27827] netlink: 'syz.4.8939': attribute type 13 has an invalid length. [ 504.896843][T27827] smc: net device bond0 applied user defined pnetid SYZ0 [ 504.918173][T27827] smc: net device bond0 erased user defined pnetid SYZ0 [ 504.931314][T27831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8940'. [ 504.977695][T27835] rdma_op ffff8881170c9d80 conn xmit_rdma 0000000000000000 [ 505.231972][ T3380] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 505.241704][ T3380] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 505.414489][T27855] dummy0 speed is unknown, defaulting to 1000 [ 505.485385][T27855] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.8944' sets config #-1 [ 505.969690][T27871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8952'. [ 506.007974][T27875] rdma_op ffff8881042da580 conn xmit_rdma 0000000000000000 [ 506.059747][T27881] netlink: 'syz.6.8957': attribute type 13 has an invalid length. [ 506.099055][T27881] smc: net device bond0 applied user defined pnetid SYZ0 [ 506.106936][T27881] smc: net device bond0 erased user defined pnetid SYZ0 [ 506.230890][T27895] loop6: detected capacity change from 0 to 512 [ 506.242206][T27897] IPVS: Error connecting to the multicast addr [ 506.279687][T27900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8964'. [ 506.377139][T27906] rdma_op ffff8881042d9980 conn xmit_rdma 0000000000000000 [ 506.489078][T27918] netlink: 'syz.4.8973': attribute type 13 has an invalid length. [ 506.501449][T27918] smc: net device bond0 applied user defined pnetid SYZ0 [ 506.508896][T27918] smc: net device bond0 erased user defined pnetid SYZ0 [ 506.540048][T27922] loop6: detected capacity change from 0 to 256 [ 506.547020][T27922] vfat: Unknown parameter 'i2Ì#;Î ‡ÔG£É7Ä' [ 506.581827][T27926] FAULT_INJECTION: forcing a failure. [ 506.581827][T27926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.595467][T27926] CPU: 0 UID: 0 PID: 27926 Comm: syz.4.8977 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 506.595502][T27926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.595519][T27926] Call Trace: [ 506.595526][T27926] [ 506.595533][T27926] dump_stack_lvl+0xf6/0x150 [ 506.595555][T27926] dump_stack+0x15/0x1a [ 506.595569][T27926] should_fail_ex+0x261/0x270 [ 506.595630][T27926] should_fail+0xb/0x10 [ 506.595660][T27926] should_fail_usercopy+0x1a/0x20 [ 506.595682][T27926] _copy_from_iter+0xd8/0xd10 [ 506.595724][T27926] ? kmalloc_reserve+0x16e/0x190 [ 506.595743][T27926] ? __build_skb_around+0x199/0x1f0 [ 506.595762][T27926] ? __alloc_skb+0x227/0x320 [ 506.595778][T27926] ? __virt_addr_valid+0x1ed/0x250 [ 506.595794][T27926] ? __check_object_size+0x367/0x510 [ 506.595864][T27926] netlink_sendmsg+0x492/0x720 [ 506.595886][T27926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.596022][T27926] __sock_sendmsg+0x140/0x180 [ 506.596049][T27926] ____sys_sendmsg+0x350/0x4e0 [ 506.596072][T27926] __sys_sendmsg+0x1a0/0x240 [ 506.596104][T27926] __x64_sys_sendmsg+0x46/0x50 [ 506.596124][T27926] x64_sys_call+0x26f3/0x2e10 [ 506.596155][T27926] do_syscall_64+0xc9/0x1a0 [ 506.596177][T27926] ? clear_bhb_loop+0x25/0x80 [ 506.596196][T27926] ? clear_bhb_loop+0x25/0x80 [ 506.596217][T27926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.596271][T27926] RIP: 0033:0x7f678f62e169 [ 506.596337][T27926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.596354][T27926] RSP: 002b:00007f678dc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.596372][T27926] RAX: ffffffffffffffda RBX: 00007f678f855fa0 RCX: 00007f678f62e169 [ 506.596383][T27926] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 506.596432][T27926] RBP: 00007f678dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 506.596445][T27926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.596456][T27926] R13: 0000000000000000 R14: 00007f678f855fa0 R15: 00007fffddf75908 [ 506.596472][T27926] [ 507.117994][T27953] can: request_module (can-proto-0) failed. [ 507.206218][T27955] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8986'. [ 507.215978][T27953] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.8986'. [ 507.326905][T27971] 9pnet_fd: Insufficient options for proto=fd [ 507.389057][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8995'. [ 507.489782][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9000'. [ 507.506004][T27989] bond1: entered promiscuous mode [ 507.511139][T27989] bond1: entered allmulticast mode [ 507.516616][T27989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.526415][T27992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9001'. [ 507.550119][T27992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9001'. [ 507.588170][T27992] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 507.614322][T27992] SELinux: failed to load policy [ 507.704105][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 507.704123][ T29] audit: type=1400 audit(741.631:64031): avc: granted { setsecparam } for pid=28000 comm="syz.1.9004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 507.731736][ T29] audit: type=1400 audit(741.668:64032): avc: granted { setsecparam } for pid=28000 comm="syz.1.9004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 507.818411][ T29] audit: type=1326 audit(741.741:64033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.841609][ T29] audit: type=1326 audit(741.741:64034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.865438][ T29] audit: type=1326 audit(741.741:64035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.888380][ T29] audit: type=1326 audit(741.741:64036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.912088][ T29] audit: type=1326 audit(741.741:64037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.935120][ T29] audit: type=1326 audit(741.741:64038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.945893][T28015] netlink: 'syz.5.9006': attribute type 13 has an invalid length. [ 507.959027][ T29] audit: type=1326 audit(741.741:64039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 507.971253][T28015] smc: net device bond0 applied user defined pnetid SYZ0 [ 507.989068][ T29] audit: type=1326 audit(741.741:64040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28012 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 508.021143][T28015] smc: net device bond0 erased user defined pnetid SYZ0 [ 508.192985][T28037] loop6: detected capacity change from 0 to 1024 [ 508.200267][T28037] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.213975][T28037] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.9017: Invalid block bitmap block 0 in block_group 0 [ 508.229468][T28037] EXT4-fs (loop6): Remounting filesystem read-only [ 508.229625][T28037] EXT4-fs (loop6): 1 orphan inode deleted [ 508.230061][T28037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.268970][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.345897][T28052] macvlan2: entered promiscuous mode [ 508.346041][T28052] bridge0: port 3(macvlan2) entered blocking state [ 508.346077][T28052] bridge0: port 3(macvlan2) entered disabled state [ 508.346166][T28052] macvlan2: entered allmulticast mode [ 508.379656][T28052] macvlan2: left allmulticast mode [ 508.410457][T28055] netlink: 'syz.4.9022': attribute type 13 has an invalid length. [ 508.434556][T28052] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 508.439660][T28055] smc: net device bond0 applied user defined pnetid SYZ0 [ 508.452417][T28055] smc: net device bond0 erased user defined pnetid SYZ0 [ 508.562964][T28066] FAULT_INJECTION: forcing a failure. [ 508.562964][T28066] name failslab, interval 1, probability 0, space 0, times 0 [ 508.575694][T28066] CPU: 1 UID: 0 PID: 28066 Comm: syz.6.9027 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 508.575728][T28066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.575744][T28066] Call Trace: [ 508.575753][T28066] [ 508.575763][T28066] dump_stack_lvl+0xf6/0x150 [ 508.575859][T28066] dump_stack+0x15/0x1a [ 508.575881][T28066] should_fail_ex+0x261/0x270 [ 508.575929][T28066] should_failslab+0x8f/0xb0 [ 508.575956][T28066] kmem_cache_alloc_noprof+0x59/0x340 [ 508.575990][T28066] ? getname_flags+0x81/0x3b0 [ 508.576021][T28066] getname_flags+0x81/0x3b0 [ 508.576099][T28066] __se_sys_newstat+0x4c/0x280 [ 508.576138][T28066] ? ksys_write+0xb8/0x1b0 [ 508.576169][T28066] ? fput+0x99/0xd0 [ 508.576258][T28066] ? ksys_write+0x180/0x1b0 [ 508.576324][T28066] __x64_sys_newstat+0x31/0x40 [ 508.576375][T28066] x64_sys_call+0x6f3/0x2e10 [ 508.576399][T28066] do_syscall_64+0xc9/0x1a0 [ 508.576433][T28066] ? clear_bhb_loop+0x25/0x80 [ 508.576456][T28066] ? clear_bhb_loop+0x25/0x80 [ 508.576483][T28066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.576507][T28066] RIP: 0033:0x7f183402e169 [ 508.576525][T28066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.576545][T28066] RSP: 002b:00007f1832697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 508.576620][T28066] RAX: ffffffffffffffda RBX: 00007f1834255fa0 RCX: 00007f183402e169 [ 508.576635][T28066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 508.576649][T28066] RBP: 00007f1832697090 R08: 0000000000000000 R09: 0000000000000000 [ 508.576662][T28066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.576676][T28066] R13: 0000000000000000 R14: 00007f1834255fa0 R15: 00007ffcf163c988 [ 508.576693][T28066] [ 508.930275][T28073] FAULT_INJECTION: forcing a failure. [ 508.930275][T28073] name failslab, interval 1, probability 0, space 0, times 0 [ 508.942968][T28073] CPU: 0 UID: 0 PID: 28073 Comm: syz.4.9030 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 508.943037][T28073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.943050][T28073] Call Trace: [ 508.943057][T28073] [ 508.943067][T28073] dump_stack_lvl+0xf6/0x150 [ 508.943096][T28073] dump_stack+0x15/0x1a [ 508.943112][T28073] should_fail_ex+0x261/0x270 [ 508.943135][T28073] should_failslab+0x8f/0xb0 [ 508.943159][T28073] kmem_cache_alloc_noprof+0x59/0x340 [ 508.943333][T28073] ? getname_flags+0x81/0x3b0 [ 508.943357][T28073] getname_flags+0x81/0x3b0 [ 508.943449][T28073] __x64_sys_rename+0x40/0x70 [ 508.943474][T28073] x64_sys_call+0x2cd9/0x2e10 [ 508.943501][T28073] do_syscall_64+0xc9/0x1a0 [ 508.943554][T28073] ? clear_bhb_loop+0x25/0x80 [ 508.943609][T28073] ? clear_bhb_loop+0x25/0x80 [ 508.943634][T28073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.943752][T28073] RIP: 0033:0x7f678f62e169 [ 508.943851][T28073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.943872][T28073] RSP: 002b:00007f678dc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 508.943893][T28073] RAX: ffffffffffffffda RBX: 00007f678f855fa0 RCX: 00007f678f62e169 [ 508.943905][T28073] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000780 [ 508.943917][T28073] RBP: 00007f678dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 508.943928][T28073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.943946][T28073] R13: 0000000000000000 R14: 00007f678f855fa0 R15: 00007fffddf75908 [ 508.943965][T28073] [ 509.140712][T28077] netlink: 'syz.5.9032': attribute type 13 has an invalid length. [ 509.168137][T28077] smc: net device bond0 applied user defined pnetid SYZ0 [ 509.175682][T28077] smc: net device bond0 erased user defined pnetid SYZ0 [ 509.188895][T28083] loop6: detected capacity change from 0 to 1024 [ 509.195570][T28083] EXT4-fs: Ignoring removed nobh option [ 509.201339][T28083] EXT4-fs: Ignoring removed bh option [ 509.211652][T28083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.308976][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.532519][T28108] loop6: detected capacity change from 0 to 512 [ 509.604520][T28116] netlink: 'syz.4.9046': attribute type 13 has an invalid length. [ 509.633719][T28116] smc: net device bond0 applied user defined pnetid SYZ0 [ 509.663339][T28116] smc: net device bond0 erased user defined pnetid SYZ0 [ 509.675266][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9049'. [ 509.778022][T28133] netlink: 'syz.3.9052': attribute type 13 has an invalid length. [ 509.790131][T28133] smc: net device bond0 applied user defined pnetid SYZ0 [ 509.798288][T28133] smc: net device bond0 erased user defined pnetid SYZ0 [ 509.897589][T28141] netlink: 'syz.3.9055': attribute type 13 has an invalid length. [ 509.910581][T28141] smc: net device bond0 applied user defined pnetid SYZ0 [ 509.918306][T28141] smc: net device bond0 erased user defined pnetid SYZ0 [ 510.198924][T28153] loop6: detected capacity change from 0 to 512 [ 510.206391][T28153] EXT4-fs (loop6): Invalid log cluster size: 2560 [ 510.226900][T28157] pim6reg1: entered promiscuous mode [ 510.232390][T28157] pim6reg1: entered allmulticast mode [ 510.383799][T28168] netlink: 'syz.5.9063': attribute type 13 has an invalid length. [ 510.396345][T28168] smc: net device bond0 applied user defined pnetid SYZ0 [ 510.403855][T28168] smc: net device bond0 erased user defined pnetid SYZ0 [ 510.415079][T28171] netlink: 'syz.6.9061': attribute type 4 has an invalid length. [ 510.445603][T28173] netlink: 'syz.3.9065': attribute type 13 has an invalid length. [ 510.464360][T28173] smc: net device bond0 applied user defined pnetid SYZ0 [ 510.471755][T28173] smc: net device bond0 erased user defined pnetid SYZ0 [ 510.801115][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9073'. [ 510.871634][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9076'. [ 510.962667][T28216] FAULT_INJECTION: forcing a failure. [ 510.962667][T28216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.976031][T28216] CPU: 1 UID: 0 PID: 28216 Comm: syz.4.9081 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 510.976064][T28216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.976094][T28216] Call Trace: [ 510.976103][T28216] [ 510.976113][T28216] dump_stack_lvl+0xf6/0x150 [ 510.976142][T28216] dump_stack+0x15/0x1a [ 510.976161][T28216] should_fail_ex+0x261/0x270 [ 510.976186][T28216] should_fail+0xb/0x10 [ 510.976206][T28216] should_fail_usercopy+0x1a/0x20 [ 510.976282][T28216] _copy_to_user+0x20/0xa0 [ 510.976369][T28216] simple_read_from_buffer+0xb2/0x130 [ 510.976403][T28216] proc_fail_nth_read+0x103/0x140 [ 510.976438][T28216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.976550][T28216] vfs_read+0x1b2/0x710 [ 510.976566][T28216] ? __rcu_read_unlock+0x4e/0x70 [ 510.976656][T28216] ? __fget_files+0x186/0x1c0 [ 510.976686][T28216] ksys_read+0xeb/0x1b0 [ 510.976705][T28216] __x64_sys_read+0x42/0x50 [ 510.976782][T28216] x64_sys_call+0x2a3b/0x2e10 [ 510.976804][T28216] do_syscall_64+0xc9/0x1a0 [ 510.976829][T28216] ? clear_bhb_loop+0x25/0x80 [ 510.976851][T28216] ? clear_bhb_loop+0x25/0x80 [ 510.977009][T28216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.977030][T28216] RIP: 0033:0x7f678f62cb7c [ 510.977090][T28216] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 510.977108][T28216] RSP: 002b:00007f678dc97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.977126][T28216] RAX: ffffffffffffffda RBX: 00007f678f855fa0 RCX: 00007f678f62cb7c [ 510.977139][T28216] RDX: 000000000000000f RSI: 00007f678dc970a0 RDI: 0000000000000004 [ 510.977151][T28216] RBP: 00007f678dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 510.977163][T28216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.977174][T28216] R13: 0000000000000000 R14: 00007f678f855fa0 R15: 00007fffddf75908 [ 510.977213][T28216] [ 511.212285][T28224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28224 comm=syz.5.9082 [ 511.214964][T28221] netlink: 'syz.6.9084': attribute type 13 has an invalid length. [ 511.226832][T28224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28224 comm=syz.5.9082 [ 511.284272][T28229] smc: net device bond0 applied user defined pnetid SYZ0 [ 511.359342][T28235] block device autoloading is deprecated and will be removed. [ 511.506923][T28248] netlink: 'syz.3.9090': attribute type 10 has an invalid length. [ 511.524844][T28248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.533867][T28248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.542788][T28248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.552214][T28248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.596639][T28248] team0: Port device geneve1 added [ 511.770780][T28258] netlink: 'syz.1.9094': attribute type 4 has an invalid length. [ 512.114029][T28221] smc: net device bond0 erased user defined pnetid SYZ0 [ 512.248205][T28268] dummy0 speed is unknown, defaulting to 1000 [ 512.297402][T28269] lo speed is unknown, defaulting to 1000 [ 512.304830][T28269] lo speed is unknown, defaulting to 1000 [ 512.322170][T28269] lo speed is unknown, defaulting to 1000 [ 512.329036][T28269] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 512.339461][T28269] lo speed is unknown, defaulting to 1000 [ 512.345633][T28269] lo speed is unknown, defaulting to 1000 [ 512.351910][T28269] lo speed is unknown, defaulting to 1000 [ 512.359762][T28269] lo speed is unknown, defaulting to 1000 [ 512.367529][T28269] lo speed is unknown, defaulting to 1000 [ 512.379334][T28273] __nla_validate_parse: 9 callbacks suppressed [ 512.379353][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9098'. [ 512.381209][T28269] lo speed is unknown, defaulting to 1000 [ 512.408644][T28269] lo speed is unknown, defaulting to 1000 [ 512.415087][T28269] lo speed is unknown, defaulting to 1000 [ 512.512131][T28285] smc: net device bond0 applied user defined pnetid SYZ0 [ 512.520235][T28285] smc: net device bond0 erased user defined pnetid SYZ0 [ 512.642137][T28291] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.649855][T28291] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.706149][T28291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.726517][T28291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.778965][T28291] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.787940][T28291] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.796920][T28291] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.805893][T28291] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.845785][T28293] smc: net device bond0 applied user defined pnetid SYZ0 [ 512.871412][T28301] pim6reg1: entered promiscuous mode [ 512.876825][T28301] pim6reg1: entered allmulticast mode [ 512.885772][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9108'. [ 512.901903][T28297] 8021q: adding VLAN 0 to HW filter on device team1 [ 512.928724][T28305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 512.935447][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 512.943172][T28305] vhci_hcd vhci_hcd.0: Device attached [ 512.951342][T28305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 512.957978][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 512.965741][T28305] vhci_hcd vhci_hcd.0: Device attached [ 512.972281][T28305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 512.981539][T28305] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 512.988205][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 512.996434][T28305] vhci_hcd vhci_hcd.0: Device attached [ 513.004365][T28305] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 513.011019][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 513.018740][T28305] vhci_hcd vhci_hcd.0: Device attached [ 513.029885][T28305] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 513.036563][T28305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 513.044307][T28305] vhci_hcd vhci_hcd.0: Device attached [ 513.054917][T28305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 513.090997][T28316] vhci_hcd: connection closed [ 513.091158][T28308] vhci_hcd: connection closed [ 513.091190][T25417] vhci_hcd: stop threads [ 513.095977][T28314] vhci_hcd: connection closed [ 513.100602][T25417] vhci_hcd: release socket [ 513.100614][T25417] vhci_hcd: disconnect device [ 513.104565][T25417] vhci_hcd: stop threads [ 513.105177][T28306] vhci_hcd: connection closed [ 513.109571][T25417] vhci_hcd: release socket [ 513.114151][T28310] vhci_hcd: connection closed [ 513.118709][T25417] vhci_hcd: disconnect device [ 513.142396][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 513.142469][ T29] audit: type=1400 audit(746.642:64681): avc: denied { read write } for pid=28318 comm="syz.4.9111" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.172547][T24949] vhci_hcd: vhci_device speed not set [ 513.177979][ T29] audit: type=1400 audit(746.642:64682): avc: denied { open } for pid=28318 comm="syz.4.9111" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.213363][T25417] vhci_hcd: stop threads [ 513.217725][T25417] vhci_hcd: release socket [ 513.222199][T25417] vhci_hcd: disconnect device [ 513.229054][ T29] audit: type=1400 audit(746.726:64683): avc: denied { read write } for pid=25329 comm="syz-executor" name="loop6" dev="devtmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.252622][ T29] audit: type=1400 audit(746.735:64684): avc: denied { open } for pid=25329 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.275390][ T29] audit: type=1400 audit(746.735:64685): avc: denied { ioctl } for pid=25329 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=566 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.275480][T25417] vhci_hcd: stop threads [ 513.299711][ T29] audit: type=1400 audit(746.753:64686): avc: denied { create } for pid=28318 comm="syz.4.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.303820][T25417] vhci_hcd: release socket [ 513.324636][ T29] audit: type=1400 audit(746.762:64687): avc: denied { write } for pid=28318 comm="syz.4.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.328383][T25417] vhci_hcd: disconnect device [ 513.348337][ T29] audit: type=1400 audit(746.762:64688): avc: denied { read } for pid=28318 comm="syz.4.9111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.358739][T28328] loop6: detected capacity change from 0 to 1024 [ 513.373447][ T29] audit: type=1400 audit(746.762:64689): avc: denied { ioctl } for pid=28318 comm="syz.4.9111" path="socket:[106428]" dev="sockfs" ino=106428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 513.382004][T28328] EXT4-fs: Ignoring removed nobh option [ 513.411192][T28328] EXT4-fs: Ignoring removed bh option [ 513.416743][T25417] vhci_hcd: stop threads [ 513.421009][T25417] vhci_hcd: release socket [ 513.425691][T25417] vhci_hcd: disconnect device [ 513.431198][ T29] audit: type=1400 audit(746.882:64690): avc: denied { mounton } for pid=28327 comm="syz.6.9113" path="/210/file1" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 513.458662][T28328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.597141][T28338] smc: net device bond0 applied user defined pnetid SYZ0 [ 513.621311][T28338] smc_pnet_remove_by_pnetid: 1 callbacks suppressed [ 513.621332][T28338] smc: net device bond0 erased user defined pnetid SYZ0 [ 513.756327][T28348] smc: net device bond0 applied user defined pnetid SYZ0 [ 513.764102][T28348] smc: net device bond0 erased user defined pnetid SYZ0 [ 513.784646][T28344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9118'. [ 513.793784][T28344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9118'. [ 513.806618][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.857153][T28359] dummy0 speed is unknown, defaulting to 1000 [ 513.864294][T28359] lo speed is unknown, defaulting to 1000 [ 514.069416][T28365] dummy0 speed is unknown, defaulting to 1000 [ 514.076495][T28365] lo speed is unknown, defaulting to 1000 [ 514.141425][T28365] chnl_net:caif_netlink_parms(): no params data found [ 514.177947][T28365] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.185182][T28365] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.192681][T28365] bridge_slave_0: entered allmulticast mode [ 514.199388][T28365] bridge_slave_0: entered promiscuous mode [ 514.206722][T28365] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.213842][T28365] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.221205][T28365] bridge_slave_1: entered allmulticast mode [ 514.228521][T28365] bridge_slave_1: entered promiscuous mode [ 514.249866][T28365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.261172][T28365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.270440][T28381] dummy0 speed is unknown, defaulting to 1000 [ 514.277249][T28381] lo speed is unknown, defaulting to 1000 [ 514.284949][T28365] team0: Port device team_slave_0 added [ 514.294781][T28365] team0: Port device team_slave_1 added [ 514.318797][T28365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.325872][T28365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.351846][T28365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.368084][T28365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.375077][T28365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.401082][T28365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.444787][T28365] hsr_slave_0: entered promiscuous mode [ 514.450873][T28365] hsr_slave_1: entered promiscuous mode [ 514.457066][T28365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.465221][T28365] Cannot create hsr debugfs directory [ 514.590411][T28389] validate_nla: 5 callbacks suppressed [ 514.590430][T28389] netlink: 'syz.3.9130': attribute type 13 has an invalid length. [ 514.605649][T28389] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.614664][T28389] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.623694][T28389] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.632652][T28389] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.647400][T28389] smc: net device bond0 applied user defined pnetid SYZ0 [ 514.654828][T28389] smc: net device bond0 erased user defined pnetid SYZ0 [ 514.744600][T28398] FAULT_INJECTION: forcing a failure. [ 514.744600][T28398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.757762][T28398] CPU: 1 UID: 0 PID: 28398 Comm: syz.3.9134 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 514.757796][T28398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 514.757811][T28398] Call Trace: [ 514.757818][T28398] [ 514.757826][T28398] dump_stack_lvl+0xf6/0x150 [ 514.757849][T28398] dump_stack+0x15/0x1a [ 514.757918][T28398] should_fail_ex+0x261/0x270 [ 514.757949][T28398] should_fail+0xb/0x10 [ 514.757974][T28398] should_fail_usercopy+0x1a/0x20 [ 514.758011][T28398] _copy_from_user+0x1c/0xa0 [ 514.758047][T28398] ____sys_sendmsg+0x1e0/0x4e0 [ 514.758082][T28398] __sys_sendmsg+0x1a0/0x240 [ 514.758127][T28398] __x64_sys_sendmsg+0x46/0x50 [ 514.758182][T28398] x64_sys_call+0x26f3/0x2e10 [ 514.758210][T28398] do_syscall_64+0xc9/0x1a0 [ 514.758301][T28398] ? clear_bhb_loop+0x25/0x80 [ 514.758328][T28398] ? clear_bhb_loop+0x25/0x80 [ 514.758427][T28398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.758453][T28398] RIP: 0033:0x7f7dbf95e169 [ 514.758472][T28398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.758495][T28398] RSP: 002b:00007f7dbdfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.758518][T28398] RAX: ffffffffffffffda RBX: 00007f7dbfb85fa0 RCX: 00007f7dbf95e169 [ 514.758611][T28398] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 514.758625][T28398] RBP: 00007f7dbdfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 514.758638][T28398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.758653][T28398] R13: 0000000000000000 R14: 00007f7dbfb85fa0 R15: 00007ffd4690d188 [ 514.758676][T28398] [ 514.966633][T28365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 514.975719][T28401] netlink: 'syz.3.9135': attribute type 13 has an invalid length. [ 514.983712][T28403] loop6: detected capacity change from 0 to 2048 [ 514.989917][T28401] smc: net device bond0 applied user defined pnetid SYZ0 [ 514.998325][T28401] smc: net device bond0 erased user defined pnetid SYZ0 [ 515.007926][T28365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 515.017107][T28365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 515.027820][T28365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.029840][T28403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.063258][T28403] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.9136: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 515.095311][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.712430][T25433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.722521][T25433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.731506][T25433] bond0 (unregistering): Released all slaves [ 515.740217][T25433] bond1 (unregistering): Released all slaves [ 515.748612][T25433] bond2 (unregistering): Released all slaves [ 515.763018][T28418] netlink: 'syz.1.9139': attribute type 4 has an invalid length. [ 515.803312][T25433] hsr_slave_0: left promiscuous mode [ 515.809906][T25433] hsr_slave_1: left promiscuous mode [ 515.829313][T25433] pim6reg (unregistering): left allmulticast mode [ 515.869865][T25433] team0 (unregistering): Port device team_slave_1 removed [ 515.872958][T25433] team0 (unregistering): Port device C removed [ 515.924338][T28430] dummy0 speed is unknown, defaulting to 1000 [ 515.931507][ T10] usb usb4-port1: attempt power cycle [ 515.937101][T28365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.951866][T28365] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.959505][T28430] lo speed is unknown, defaulting to 1000 [ 515.967229][T25425] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.974365][T25425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.983212][T25425] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.990326][T25425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.080500][T28365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.194991][T28365] veth0_vlan: entered promiscuous mode [ 516.204000][T28365] veth1_vlan: entered promiscuous mode [ 516.222187][T28365] veth0_macvtap: entered promiscuous mode [ 516.229966][T28365] veth1_macvtap: entered promiscuous mode [ 516.259967][T28365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.276868][T28365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.288870][T28365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.297774][T28365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.306641][T28365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.315373][T28365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.498020][T28472] netlink: 'syz.3.9149': attribute type 4 has an invalid length. [ 516.597222][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9155'. [ 516.683047][T28489] pim6reg1: entered promiscuous mode [ 516.688502][T28489] pim6reg1: entered allmulticast mode [ 516.778009][T28498] netlink: 'syz.6.9163': attribute type 13 has an invalid length. [ 516.794420][T28498] smc: net device bond0 applied user defined pnetid SYZ0 [ 516.802166][T28498] smc: net device bond0 erased user defined pnetid SYZ0 [ 516.810271][T28502] netlink: 'syz.4.9165': attribute type 13 has an invalid length. [ 516.850115][T28502] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.857437][T28502] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.898836][T28502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.909497][T28502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.922238][T28512] loop6: detected capacity change from 0 to 1024 [ 516.931052][T28512] EXT4-fs: Ignoring removed nobh option [ 516.937008][T28512] EXT4-fs: Ignoring removed bh option [ 516.951668][T28502] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.961432][T28502] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.970574][T28512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.970724][T28502] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.993516][T28502] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.012804][T28507] smc: net device bond0 applied user defined pnetid SYZ0 [ 517.024799][T28513] smc: net device bond0 erased user defined pnetid SYZ0 [ 517.179878][T28529] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9173'. [ 517.219413][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.318212][T28542] FAULT_INJECTION: forcing a failure. [ 517.318212][T28542] name failslab, interval 1, probability 0, space 0, times 0 [ 517.330989][T28542] CPU: 1 UID: 0 PID: 28542 Comm: syz.5.9177 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 517.331047][T28542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.331060][T28542] Call Trace: [ 517.331067][T28542] [ 517.331074][T28542] dump_stack_lvl+0xf6/0x150 [ 517.331099][T28542] dump_stack+0x15/0x1a [ 517.331118][T28542] should_fail_ex+0x261/0x270 [ 517.331150][T28542] should_failslab+0x8f/0xb0 [ 517.331174][T28542] kmem_cache_alloc_noprof+0x59/0x340 [ 517.331262][T28542] ? getname_flags+0x81/0x3b0 [ 517.331291][T28542] getname_flags+0x81/0x3b0 [ 517.331317][T28542] do_sys_openat2+0x65/0x110 [ 517.331484][T28542] __x64_sys_openat+0xf8/0x120 [ 517.331567][T28542] x64_sys_call+0x1ac/0x2e10 [ 517.331590][T28542] do_syscall_64+0xc9/0x1a0 [ 517.331650][T28542] ? clear_bhb_loop+0x25/0x80 [ 517.331672][T28542] ? clear_bhb_loop+0x25/0x80 [ 517.331733][T28542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.331755][T28542] RIP: 0033:0x7fb123c5e169 [ 517.331770][T28542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.331789][T28542] RSP: 002b:00007fb1222c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.331822][T28542] RAX: ffffffffffffffda RBX: 00007fb123e85fa0 RCX: 00007fb123c5e169 [ 517.331835][T28542] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 517.331899][T28542] RBP: 00007fb1222c7090 R08: 0000000000000000 R09: 0000000000000000 [ 517.331911][T28542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.331923][T28542] R13: 0000000000000000 R14: 00007fb123e85fa0 R15: 00007fff92898ea8 [ 517.331943][T28542] [ 517.706165][T28561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9185'. [ 517.940999][T28570] FAULT_INJECTION: forcing a failure. [ 517.940999][T28570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.955101][T28570] CPU: 1 UID: 0 PID: 28570 Comm: syz.6.9187 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 517.955136][T28570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.955149][T28570] Call Trace: [ 517.955156][T28570] [ 517.955165][T28570] dump_stack_lvl+0xf6/0x150 [ 517.955195][T28570] dump_stack+0x15/0x1a [ 517.955217][T28570] should_fail_ex+0x261/0x270 [ 517.955254][T28570] should_fail+0xb/0x10 [ 517.955274][T28570] should_fail_usercopy+0x1a/0x20 [ 517.955301][T28570] _copy_to_user+0x20/0xa0 [ 517.955401][T28570] simple_read_from_buffer+0xb2/0x130 [ 517.955497][T28570] proc_fail_nth_read+0x103/0x140 [ 517.955535][T28570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.955623][T28570] vfs_read+0x1b2/0x710 [ 517.955683][T28570] ? __rcu_read_unlock+0x4e/0x70 [ 517.955720][T28570] ? __fget_files+0x186/0x1c0 [ 517.955742][T28570] ksys_read+0xeb/0x1b0 [ 517.955767][T28570] __x64_sys_read+0x42/0x50 [ 517.955789][T28570] x64_sys_call+0x2a3b/0x2e10 [ 517.955810][T28570] do_syscall_64+0xc9/0x1a0 [ 517.955933][T28570] ? clear_bhb_loop+0x25/0x80 [ 517.955957][T28570] ? clear_bhb_loop+0x25/0x80 [ 517.956036][T28570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.956135][T28570] RIP: 0033:0x7f183402cb7c [ 517.956150][T28570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 517.956172][T28570] RSP: 002b:00007f1832697030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.956195][T28570] RAX: ffffffffffffffda RBX: 00007f1834255fa0 RCX: 00007f183402cb7c [ 517.956209][T28570] RDX: 000000000000000f RSI: 00007f18326970a0 RDI: 0000000000000004 [ 517.956274][T28570] RBP: 00007f1832697090 R08: 0000000000000000 R09: 0000000000000000 [ 517.956294][T28570] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 517.956305][T28570] R13: 0000000000000000 R14: 00007f1834255fa0 R15: 00007ffcf163c988 [ 517.956322][T28570] [ 517.997518][ T10] usb usb4-port1: unable to enumerate USB device [ 518.195404][T28607] netlink: 'syz.1.9191': attribute type 13 has an invalid length. [ 518.242728][T28607] smc: net device bond0 applied user defined pnetid SYZ0 [ 518.250158][T28607] smc: net device bond0 erased user defined pnetid SYZ0 [ 518.351639][T28615] loop6: detected capacity change from 0 to 512 [ 518.372717][T28615] EXT4-fs (loop6): Invalid log cluster size: 2560 [ 518.462590][T28634] FAULT_INJECTION: forcing a failure. [ 518.462590][T28634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.475883][T28634] CPU: 1 UID: 0 PID: 28634 Comm: syz.6.9202 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 518.475918][T28634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 518.475933][T28634] Call Trace: [ 518.475940][T28634] [ 518.475949][T28634] dump_stack_lvl+0xf6/0x150 [ 518.475977][T28634] dump_stack+0x15/0x1a [ 518.476055][T28634] should_fail_ex+0x261/0x270 [ 518.476083][T28634] should_fail+0xb/0x10 [ 518.476106][T28634] should_fail_usercopy+0x1a/0x20 [ 518.476217][T28634] _copy_from_user+0x1c/0xa0 [ 518.476251][T28634] __sys_bpf+0x16a/0x800 [ 518.476350][T28634] __x64_sys_bpf+0x43/0x50 [ 518.476376][T28634] x64_sys_call+0x23da/0x2e10 [ 518.476399][T28634] do_syscall_64+0xc9/0x1a0 [ 518.476430][T28634] ? clear_bhb_loop+0x25/0x80 [ 518.476495][T28634] ? clear_bhb_loop+0x25/0x80 [ 518.476521][T28634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.476599][T28634] RIP: 0033:0x7f183402e169 [ 518.476618][T28634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.476639][T28634] RSP: 002b:00007f1832697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.476712][T28634] RAX: ffffffffffffffda RBX: 00007f1834255fa0 RCX: 00007f183402e169 [ 518.476726][T28634] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 518.476738][T28634] RBP: 00007f1832697090 R08: 0000000000000000 R09: 0000000000000000 [ 518.476753][T28634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.476767][T28634] R13: 0000000000000001 R14: 00007f1834255fa0 R15: 00007ffcf163c988 [ 518.476790][T28634] [ 518.686550][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 518.686568][ T29] audit: type=1326 audit(751.774:65134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.5.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 518.686698][ T29] audit: type=1326 audit(751.774:65135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.5.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 518.691107][ T29] audit: type=1326 audit(751.784:65136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.5.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 518.691223][ T29] audit: type=1326 audit(751.784:65137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.5.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 518.691253][ T29] audit: type=1326 audit(751.784:65138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28639 comm="syz.5.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 518.714202][T28645] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 518.714279][T28645] SELinux: failed to load policy [ 518.714504][ T29] audit: type=1400 audit(751.802:65139): avc: denied { load_policy } for pid=28643 comm="syz.5.9207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 518.718032][T28642] FAULT_INJECTION: forcing a failure. [ 518.718032][T28642] name failslab, interval 1, probability 0, space 0, times 0 [ 518.718124][T28642] CPU: 0 UID: 0 PID: 28642 Comm: syz.6.9205 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 518.718150][T28642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 518.718164][T28642] Call Trace: [ 518.718170][T28642] [ 518.718177][T28642] dump_stack_lvl+0xf6/0x150 [ 518.718274][T28642] dump_stack+0x15/0x1a [ 518.718295][T28642] should_fail_ex+0x261/0x270 [ 518.718324][T28642] should_failslab+0x8f/0xb0 [ 518.718350][T28642] kmem_cache_alloc_noprof+0x59/0x340 [ 518.718384][T28642] ? audit_log_start+0x37f/0x6e0 [ 518.718466][T28642] audit_log_start+0x37f/0x6e0 [ 518.718520][T28642] ? kstrtouint+0x7b/0xc0 [ 518.718548][T28642] audit_seccomp+0x49/0x100 [ 518.718579][T28642] __seccomp_filter+0x694/0x10e0 [ 518.718606][T28642] ? vfs_write+0x669/0x950 [ 518.718702][T28642] ? putname+0xe1/0x100 [ 518.718734][T28642] __secure_computing+0x7e/0x150 [ 518.718757][T28642] syscall_trace_enter+0xcf/0x1f0 [ 518.718778][T28642] ? fpregs_assert_state_consistent+0x83/0xa0 [ 518.718883][T28642] do_syscall_64+0xaa/0x1a0 [ 518.718984][T28642] ? clear_bhb_loop+0x25/0x80 [ 518.719005][T28642] ? clear_bhb_loop+0x25/0x80 [ 518.719081][T28642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.719106][T28642] RIP: 0033:0x7f183402e169 [ 518.719123][T28642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.719227][T28642] RSP: 002b:00007f1832697038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 518.719248][T28642] RAX: ffffffffffffffda RBX: 00007f1834255fa0 RCX: 00007f183402e169 [ 518.719260][T28642] RDX: 0000000000000000 RSI: 1d966054de0bd61c RDI: ffffffffffffffff [ 518.719272][T28642] RBP: 00007f1832697090 R08: 0000000000000000 R09: 0000000000000000 [ 518.719283][T28642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.719297][T28642] R13: 0000000000000000 R14: 00007f1834255fa0 R15: 00007ffcf163c988 [ 518.719368][T28642] [ 518.719386][T28642] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 518.719402][T28642] audit: out of memory in audit_log_start [ 518.720409][ T29] audit: type=1326 audit(751.802:65140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28641 comm="syz.6.9205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 518.720444][ T29] audit: type=1326 audit(751.802:65141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28641 comm="syz.6.9205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183402e169 code=0x7ffc0000 [ 518.752792][T28650] loop6: detected capacity change from 0 to 512 [ 518.793656][T28646] netlink: 'syz.3.9206': attribute type 13 has an invalid length. [ 518.813787][T28650] EXT4-fs: Ignoring removed mblk_io_submit option [ 519.192423][T28650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 519.194446][T28650] EXT4-fs (loop6): 1 truncate cleaned up [ 519.209410][T28650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.316105][T28667] SELinux: policydb version -555114960 does not match my version range 15-34 [ 519.359804][T28667] SELinux: failed to load policy [ 519.393151][T25329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.749487][T28702] netlink: 'syz.1.9222': attribute type 13 has an invalid length. [ 519.789350][T28702] smc: net device bond0 applied user defined pnetid SYZ0 [ 519.806219][T28686] loop6: detected capacity change from 0 to 256 [ 519.813021][T28702] smc: net device bond0 erased user defined pnetid SYZ0 [ 519.897899][T28721] smc: net device bond0 applied user defined pnetid SYZ0 [ 519.905825][T28721] smc: net device bond0 erased user defined pnetid SYZ0 [ 520.037957][T28729] block device autoloading is deprecated and will be removed. [ 520.579316][T28774] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9252'. [ 520.663883][T28782] netlink: 'syz.5.9255': attribute type 21 has an invalid length. [ 520.673421][T28782] netlink: 'syz.5.9255': attribute type 20 has an invalid length. [ 520.681469][T28782] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.749484][T28795] netlink: 'syz.5.9257': attribute type 13 has an invalid length. [ 520.763854][T28795] smc: net device bond0 applied user defined pnetid SYZ0 [ 520.771632][T28795] smc: net device bond0 erased user defined pnetid SYZ0 [ 520.778462][T28784] dummy0 speed is unknown, defaulting to 1000 [ 520.785233][T28784] lo speed is unknown, defaulting to 1000 [ 520.842732][T25461] bridge_slave_1: left allmulticast mode [ 520.848550][T25461] bridge_slave_1: left promiscuous mode [ 520.854252][T25461] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.862430][T25461] bridge_slave_0: left allmulticast mode [ 520.868539][T25461] bridge_slave_0: left promiscuous mode [ 520.874450][T25461] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.097851][T25461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.108941][T25461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.118284][T25461] bond0 (unregistering): Released all slaves [ 521.127240][T25461] bond1 (unregistering): Released all slaves [ 521.147880][T28805] ip6gretap0: entered promiscuous mode [ 521.153783][T28805] ip6gretap0: entered allmulticast mode [ 521.188736][T25461] hsr_slave_0: left promiscuous mode [ 521.196024][T25461] hsr_slave_1: left promiscuous mode [ 521.212902][T25461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.222402][T25461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.340014][T25461] team0 (unregistering): Port device team_slave_1 removed [ 521.352130][T25461] team0 (unregistering): Port device team_slave_0 removed [ 521.404184][T28784] chnl_net:caif_netlink_parms(): no params data found [ 521.471461][T28784] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.478602][T28784] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.486048][T28784] bridge_slave_0: entered allmulticast mode [ 521.492598][T28784] bridge_slave_0: entered promiscuous mode [ 521.499579][T28784] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.507284][T28784] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.525894][T28784] bridge_slave_1: entered allmulticast mode [ 521.538340][T28784] bridge_slave_1: entered promiscuous mode [ 521.576394][T28784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.590694][T28784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.619014][T28784] team0: Port device team_slave_0 added [ 521.626042][T28784] team0: Port device team_slave_1 added [ 521.645308][T28784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.653017][T28784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.679007][T28784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.709799][T28784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.717522][T28784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.743861][T28784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.772738][T28784] hsr_slave_0: entered promiscuous mode [ 521.780127][T28784] hsr_slave_1: entered promiscuous mode [ 521.867958][T28784] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 521.878282][T28784] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 521.897078][T28784] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 521.916825][T28784] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 521.934220][T28784] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.941443][T28784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.948859][T28784] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.955996][T28784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.992401][T28784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.000933][T28784] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.002391][T25461] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.016760][T25461] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.043541][T25433] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.050688][T25433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.061927][T25461] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.069011][T25461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.106917][T28784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.167450][T28784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.302634][T28891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9279'. [ 522.377067][T28891] bond2: entered promiscuous mode [ 522.382173][T28891] bond2: entered allmulticast mode [ 522.389318][T28891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.523287][T28784] veth0_vlan: entered promiscuous mode [ 522.550854][T28784] veth1_vlan: entered promiscuous mode [ 522.596541][T28784] veth0_macvtap: entered promiscuous mode [ 522.633040][T28784] veth1_macvtap: entered promiscuous mode [ 522.665881][T28784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.717627][T28784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.749502][T28784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.759073][T28784] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.767839][T28784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.776598][T28784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.944391][T28920] loop7: detected capacity change from 0 to 512 [ 523.275207][T28931] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 523.804687][T28961] netlink: 'syz.4.9301': attribute type 4 has an invalid length. [ 524.102754][T28966] netlink: 'syz.5.9313': attribute type 13 has an invalid length. [ 524.114289][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 524.114304][ T29] audit: type=1326 audit(756.786:65560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.150110][T28966] smc: net device bond0 applied user defined pnetid SYZ0 [ 524.160974][T28966] smc: net device bond0 erased user defined pnetid SYZ0 [ 524.171904][ T29] audit: type=1326 audit(756.823:65561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.195769][ T29] audit: type=1326 audit(756.823:65562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.218724][ T29] audit: type=1326 audit(756.823:65563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.242461][ T29] audit: type=1326 audit(756.823:65564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.265482][ T29] audit: type=1326 audit(756.823:65565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.289107][ T29] audit: type=1326 audit(756.823:65566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.312266][ T29] audit: type=1326 audit(756.823:65567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.336034][ T29] audit: type=1326 audit(756.823:65568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb123c5e169 code=0x7ffc0000 [ 524.359125][ T29] audit: type=1326 audit(756.823:65569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb123c60087 code=0x7ffc0000 [ 524.439375][T28976] netlink: 'syz.1.9307': attribute type 13 has an invalid length. [ 524.454065][T28976] smc: net device bond0 applied user defined pnetid SYZ0 [ 524.465345][T28976] smc: net device bond0 erased user defined pnetid SYZ0 [ 524.751794][T28998] netlink: 'syz.4.9316': attribute type 13 has an invalid length. [ 524.765106][T28986] loop7: detected capacity change from 0 to 256 [ 524.972481][T29009] netlink: 'syz.5.9322': attribute type 13 has an invalid length. [ 524.996725][T29009] smc: net device bond0 applied user defined pnetid SYZ0 [ 525.008562][T29009] smc: net device bond0 erased user defined pnetid SYZ0 [ 525.102990][T29022] pim6reg1: entered promiscuous mode [ 525.108516][T29022] pim6reg1: entered allmulticast mode [ 525.164001][T29032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9331'. [ 525.242612][T29040] netlink: 'syz.3.9330': attribute type 4 has an invalid length. [ 525.491087][T29054] dummy0 speed is unknown, defaulting to 1000 [ 525.498119][T29054] lo speed is unknown, defaulting to 1000 [ 525.660916][T29064] pimreg: entered allmulticast mode [ 525.668158][T29064] pimreg: left allmulticast mode [ 525.754444][T29067] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9342'. [ 526.004289][T29090] netlink: 'syz.4.9349': attribute type 13 has an invalid length. [ 526.116407][T29097] dummy0 speed is unknown, defaulting to 1000 [ 526.124009][T29097] lo speed is unknown, defaulting to 1000 [ 526.126900][T29095] dummy0 speed is unknown, defaulting to 1000 [ 526.136714][T29095] lo speed is unknown, defaulting to 1000 [ 526.414852][T25425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.515444][T25425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.536617][T29131] netlink: 'syz.1.9362': attribute type 13 has an invalid length. [ 526.561282][T29131] smc: net device bond0 applied user defined pnetid SYZ0 [ 526.570616][T29131] smc: net device bond0 erased user defined pnetid SYZ0 [ 526.572392][T29135] netlink: 'syz.4.9361': attribute type 4 has an invalid length. [ 526.601868][T25425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.650354][T29118] dummy0 speed is unknown, defaulting to 1000 [ 526.660679][T25425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.682056][T29118] lo speed is unknown, defaulting to 1000 [ 526.775482][T29141] dummy0 speed is unknown, defaulting to 1000 [ 526.796341][T29118] chnl_net:caif_netlink_parms(): no params data found [ 526.805401][T29141] lo speed is unknown, defaulting to 1000 [ 526.891040][T25425] bridge_slave_1: left allmulticast mode [ 526.891142][T25425] bridge_slave_1: left promiscuous mode [ 526.891331][T25425] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.892782][T25425] bridge_slave_0: left allmulticast mode [ 526.892803][T25425] bridge_slave_0: left promiscuous mode [ 526.892966][T25425] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.014196][T25425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.034295][T25425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.053792][T25425] bond0 (unregistering): Released all slaves [ 527.139587][T29118] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.147439][T29118] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.161677][T29118] bridge_slave_0: entered allmulticast mode [ 527.176385][T29118] bridge_slave_0: entered promiscuous mode [ 527.199268][T29118] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.207113][T29118] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.228758][T29118] bridge_slave_1: entered allmulticast mode [ 527.237174][T29118] bridge_slave_1: entered promiscuous mode [ 527.246530][T25425] hsr_slave_0: left promiscuous mode [ 527.259194][T25425] hsr_slave_1: left promiscuous mode [ 527.272851][T25425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.280343][T25425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.289035][T25425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.296644][T25425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.309463][T25425] veth1_macvtap: left promiscuous mode [ 527.316939][T25425] veth0_macvtap: left promiscuous mode [ 527.323078][T25425] veth1_vlan: left promiscuous mode [ 527.328667][T25425] veth0_vlan: left promiscuous mode [ 527.398214][T25425] team0 (unregistering): Port device team_slave_1 removed [ 527.410781][T25425] team0 (unregistering): Port device team_slave_0 removed [ 527.466920][T29167] pim6reg1: entered promiscuous mode [ 527.473883][T29167] pim6reg1: entered allmulticast mode [ 527.489585][T29179] netlink: 'syz.5.9372': attribute type 4 has an invalid length. [ 527.545406][T29118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.556441][T29118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.607225][T29118] team0: Port device team_slave_0 added [ 527.621501][T29188] netlink: 'syz.1.9377': attribute type 13 has an invalid length. [ 527.631656][T29118] team0: Port device team_slave_1 added [ 527.661337][T29188] smc: net device bond0 applied user defined pnetid SYZ0 [ 527.664969][T29190] dummy0 speed is unknown, defaulting to 1000 [ 527.669143][T29118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.681606][T29118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.684615][T29188] smc: net device bond0 erased user defined pnetid SYZ0 [ 527.708343][T29118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.726899][T29190] lo speed is unknown, defaulting to 1000 [ 527.727505][T29118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.740642][T29118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.766713][T29118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.827315][T29118] hsr_slave_0: entered promiscuous mode [ 527.841087][T29118] hsr_slave_1: entered promiscuous mode [ 528.004468][T29118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 528.015209][T29118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 528.025994][T29118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 528.041327][T29118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 528.122212][T29118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.141401][T29118] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.162333][T25433] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.169521][T25433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.185686][T25461] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.192871][T25461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.242171][T29118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.252759][T29118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.381918][T29118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.513961][T29118] veth0_vlan: entered promiscuous mode [ 528.527248][T29118] veth1_vlan: entered promiscuous mode [ 528.545153][T29118] veth0_macvtap: entered promiscuous mode [ 528.553275][T29118] veth1_macvtap: entered promiscuous mode [ 528.580725][T29118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.599084][T29118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.607685][T29118] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.607727][T29118] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.607837][T29118] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.607874][T29118] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.622812][T29258] pim6reg1: entered promiscuous mode [ 528.622828][T29258] pim6reg1: entered allmulticast mode [ 529.478386][T29338] dummy0 speed is unknown, defaulting to 1000 [ 529.485362][T29338] lo speed is unknown, defaulting to 1000 [ 529.558891][T29345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9428'. [ 529.574473][T29345] 8021q: adding VLAN 0 to HW filter on device team1 [ 529.967248][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 529.967265][ T29] audit: type=1326 audit(762.186:66265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 529.996604][ T29] audit: type=1326 audit(762.186:66266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.039275][ T29] audit: type=1326 audit(762.186:66267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.062363][ T29] audit: type=1326 audit(762.186:66268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.085396][ T29] audit: type=1326 audit(762.186:66269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.108437][ T29] audit: type=1326 audit(762.186:66270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.131614][ T29] audit: type=1326 audit(762.186:66271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.154733][ T29] audit: type=1326 audit(762.186:66272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.177827][ T29] audit: type=1326 audit(762.186:66273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.201600][ T29] audit: type=1326 audit(762.195:66274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29367 comm="syz.8.9438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246300e169 code=0x7ffc0000 [ 530.847384][T29446] netlink: 'syz.1.9466': attribute type 4 has an invalid length. [ 530.989384][T29454] dummy0 speed is unknown, defaulting to 1000 [ 530.996280][T29454] lo speed is unknown, defaulting to 1000 [ 531.706314][T29512] dummy0 speed is unknown, defaulting to 1000 [ 531.714802][T29512] lo speed is unknown, defaulting to 1000 [ 532.202485][T29561] dummy0 speed is unknown, defaulting to 1000 [ 532.209066][T29561] lo speed is unknown, defaulting to 1000 [ 532.299179][T29571] netlink: 'syz.1.9498': attribute type 13 has an invalid length. [ 532.312163][T29571] smc: net device bond0 applied user defined pnetid SYZ0 [ 532.324042][T29571] smc: net device bond0 erased user defined pnetid SYZ0 [ 532.385495][T29578] netlink: 'syz.4.9500': attribute type 13 has an invalid length. [ 532.612539][T29612] netlink: 'syz.4.9512': attribute type 13 has an invalid length. [ 532.943782][T29654] netlink: 'syz.3.9528': attribute type 13 has an invalid length. [ 532.996002][T25425] ================================================================== [ 533.004129][T25425] BUG: KCSAN: data-race in copy_process / free_pid [ 533.010653][T25425] [ 533.012986][T25425] read-write to 0xffffffff8685f028 of 4 bytes by task 29118 on cpu 0: [ 533.021135][T25425] free_pid+0x7e/0x180 [ 533.025220][T25425] free_pids+0x54/0xb0 [ 533.029308][T25425] release_task+0xa32/0xba0 [ 533.033823][T25425] wait_consider_task+0x117a/0x16a0 [ 533.039058][T25425] __do_wait+0x108/0x520 [ 533.043317][T25425] do_wait+0xb9/0x270 [ 533.047315][T25425] kernel_wait4+0x147/0x1d0 [ 533.051851][T25425] __x64_sys_wait4+0x99/0x120 [ 533.056541][T25425] x64_sys_call+0x25f3/0x2e10 [ 533.061229][T25425] do_syscall_64+0xc9/0x1a0 [ 533.065745][T25425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.071679][T25425] [ 533.074030][T25425] read to 0xffffffff8685f028 of 4 bytes by task 25425 on cpu 1: [ 533.082373][T25425] copy_process+0x1754/0x1f60 [ 533.087586][T25425] kernel_clone+0x168/0x5d0 [ 533.092123][T25425] user_mode_thread+0x7f/0xb0 [ 533.097462][T25425] call_usermodehelper_exec_work+0x7a/0x150 [ 533.103644][T25425] process_scheduled_works+0x4de/0xa20 [ 533.109554][T25425] worker_thread+0x52c/0x710 [ 533.114261][T25425] kthread+0x4b7/0x540 [ 533.118341][T25425] ret_from_fork+0x4b/0x60 [ 533.122768][T25425] ret_from_fork_asm+0x1a/0x30 [ 533.127540][T25425] [ 533.129867][T25425] value changed: 0x800000f2 -> 0x800000f1 [ 533.135589][T25425] [ 533.137917][T25425] Reported by Kernel Concurrency Sanitizer on: [ 533.144106][T25425] CPU: 1 UID: 0 PID: 25425 Comm: kworker/u8:33 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 533.157580][T25425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 533.167731][T25425] Workqueue: events_unbound call_usermodehelper_exec_work [ 533.174864][T25425] ==================================================================