last executing test programs: 6m31.668028675s ago: executing program 32 (id=1702): unshare(0x20000400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getaddr={0x58, 0x16, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0xd1, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xcf4}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LABEL={0x14, 0x3, 'wg2\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4010) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0xe, 0x8) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000200a00000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1m44.06432272s ago: executing program 33 (id=8192): socket$kcm(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x29, 0x6, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m42.892015675s ago: executing program 34 (id=8220): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="76d69eb19feb01000000001000001800000018000000070000000500000001000004e03f942904000000020000000600000000612e304f5f0081f21408e24192fa6f44df9104cc7c99accb46b895212946b854d3f64c5ac009c7a9a8eddd045dce8098"], &(0x7f00000003c0)=""/196, 0x37, 0xc4, 0x1, 0x9, 0x0, @void, @value}, 0x28) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) 1m40.075187864s ago: executing program 35 (id=8269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x1ff}]}, @volatile={0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x7}}]}, {0x0, [0x2e, 0x2e, 0x0, 0x0, 0x30, 0x2e, 0x30]}}, &(0x7f0000000380)=""/106, 0x59, 0x6a, 0x1, 0x97, 0x0, @void, @value}, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x81, 0x5, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x20, 0x5}}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x800, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r7, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r10, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80854) close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) 1m39.463871881s ago: executing program 36 (id=8281): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000001c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/2248], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$sock(r0, &(0x7f0000000500)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)="57c69b902a11e209d6b98f2dd970f5e436f3534bc2c8143fcfb3c12f1f5399b0acebde0e44049f2414ebf29a6840868fe107d1a6a0e7df48f1a8f933dafc03d51bc3665e531b206f1bc84339b83e8286a1abaf9595d4ef3d16654e8260c8219c1137249085de9d28f33a628d9c", 0x6d}], 0x1, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0xa37}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x2a9}}, @timestamping={{0x14, 0x1, 0x25, 0x819}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xc0}, 0x24008036) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000080)="b9bf03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000400), &(0x7f0000000340)=""/173}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x6, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xbc}, [@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000740)='GPL\x00', 0x9, 0xf3, &(0x7f0000000780)=""/243, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1, r2], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x0, 0x5, 0x2000000, 0x200403}, 0x6c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x0) 1m36.811879571s ago: executing program 37 (id=8318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040), 0x0) 1m35.940168427s ago: executing program 38 (id=8326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m30.102166844s ago: executing program 39 (id=8402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="26381fd66c18000000420009b8eae2e4000a912491fcdde907d0f62ffba7ff2872fa2d8f73304cea9fd334211c06f680c34a07e57c9354fb7a9eb16eae7f0504e862934ab81453cacb89f9d0ec91683d4b74de"], 0x18}}, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) listen(r1, 0x0) close(r1) 1m30.016265284s ago: executing program 40 (id=8405): bind$xdp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$eJzs3U1v28gdx/EfZfmxQFC0xSIIsvFs0gUcNFUkeeOFkR7KUpTNrSQKJF3Yp0W6sRdB5GybpEDjy9aXPgDtG+htL3voiyjQc899Az0WWLS3Ar2oIClKskRZip+Sdr8fI9GI/JPzJ4fRhBY5FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2tk1kzm1wG+eMj9d27zupoW7U+uVrPiPlpZ0PZ10/TuD2e/Ef93WzfTdTS3FL0s6+sY733z47WIhW/6UhM5Cr7vCF6+Onj7qdPafn622rnWW5S7FWCYqzLDUltvyQt9r2luu8ULfbG5slO9v10NT9xpuuBdGbtM4gVuI/MCsOXdNZXNz3bilPX+ntVWzG2428cPvV8vlDfPRYq/5739UCp1tr9HwWltJTDw7jlnsHyGu3TTm4Elnf31aknFQZZag6rSgarlarVSq1crGg80HH5bLxbEJ5REaixgctG9P4+MqXdAnN3B+hbj//7slNbSklna0K5P746imQL6aE+b3ZP3/+/fdU+sd7v+zXv76YPYNJf3/rfTdrUn9/4RcjEyyQN4ca8L0s/280Csd6akeqaOO9vX8Yta7enEZXu7PllSUPIXy5akpW1tyZXpTjDa1oQ2V9bG2VVcoo7o8NeQq1J5CRXLVTNokkCtbkXwFMlqTo7syqmhTm1qXkauS9uRrRy1tqSZb/+52uwd6kuz39VNyVBZUmSWo2D8Gx4Mm9f8//Txd4vX6f/z/6R87M8QAb1y3d/4/2VzexNXLywgAAAAAAFw0K/ntu5V8d/+upK7qXsMtv+m0AAAAAADABUq++b8Zv8zHpXdlTTj/7159bgAAAAAA4GJYyT12lqSV5KJ+a3An1CwXAeTeHAAAAAAAAN4uyff/txakbjK02qqs1zr/BwAAAAAA/wN+OzTGfjEbY7ebfa1fkBS2F60//3NRwbx13N79rnVox3Psw17M2BUAUf2GVVQ6UG8yXu+CpOSd4960euMD9wbBtNKBfaWvDqaN9W8FIwkszGW/vshJ4NrRUAIbxd47/V7vpTHv9ep9fFRQMietZaXuNdyS4zceVmTb1wqRuxv94tmTX0pBfzsPnnT2S5981nmc5HIcTzo+jPP4/EQ6hWm5vEzGW0juucjb4mXVsyp/12quWEm95Wz752QfFoYrmm37f63bacztlfR15ShrAVm/6hUqpaTJBlufjA5hDbKojG55XkNMyGIpyeJOGnNn7U76kuWXtsLS9+akamm8DYLhLKrDWUzfF9a/xvbFlCziY2E9zuIv8YomZLH+elmMtQgAvCkHg14oGcR8fIz90X73LJ9y03v3H56s5eUfu+kNh3NSsffdRHoT4qR+RfEn+loatpCO4l68kfOJXu71K0ua8IlePkfvFtf1p8EzkHpp9+YU+1n8p9vtPqwk9f5hpFf9Il7gi4n1ho3qXLwL7788/FkyAH7s0/1P959Vq+sb5Q/K5QdVzSeb0Xuh7wEA5Jj+jJ2TEUuD/qzfd3/QP6t+/I/309KJfvdb/UsKSvpEn6mjx7qXPUJgNb/elaHLEO6Nn7XGscvSaGxF9yae1SV96VBstR87r2yRk/9fGMSuX3YzAABwpW5P6YdH+/+8c/d72Xn32o3c8+6TffnoE4InxVaueE8AAPD14QZfWSvRb6wg8NofVzY3K3a07ZrAd35sAq+25RqvFbmBs223tlzTDvzId/yGaQda9GpuaMKddtsPIlP3A9P2Q283efK76T36PXSbdivynLDdcO3QNY7fimwnMjUvdEx750cNL9x2g2ThsO06Xt1z7MjzWyb0l+W4JWNC1x0K9GpuK/LqXlxsmXbgNe1gz/zEb+w0XVNzQyfw2pGfrjCry2vV/aCZrLak7mkPOgQA4Gvjxaujp486nf3npxSOlRay69FOCV7IW+Eb3kQAADCCXhoAAAAAAAAAAAAAAAAAAAAAgLffLPf/nVrIbgrMpswrJ1jqT/n5tZnWbGkw5cu/nSvDMxQKo1N6I+12py/+17RQzItZjgsLkjrZ7h+OOb7QrVidKVhpoXjx+3BZyjsSLq3wg4OTx+FYTDwzd9Zivy2K5//nkFd49uWEWdOPqMWT+3DhtA08WShKer5wjia4+s8iAFfrvwEAAP//pJI9bA==") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) timerfd_create(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m29.404522452s ago: executing program 41 (id=8418): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioperm(0x9, 0x602c, 0x13f) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) epoll_create1(0x80000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='i9', @ANYBLOB="9b3445d95f8c348d41bc9c3b49f7699eb1a7adcd3326a387eae3e2e69af6bf6393de88d69b581a7886102511224c", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20801468"], 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1m29.270543321s ago: executing program 42 (id=8423): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xfc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) close_range(r0, r1, 0x0) 1m18.223236838s ago: executing program 43 (id=8544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x400000007fff}, 0x18) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @mss={0x2, 0x5}, @window={0x3, 0x401, 0x6}, @mss={0x2, 0x4}, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x5}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 1m14.476299743s ago: executing program 44 (id=8595): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x100800) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48140, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = open(0x0, 0x80142, 0x0) ftruncate(r1, 0x2007ffb) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f00000003c0), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r3, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x4, 0xa1, 0x27, @vifc_lcl_addr=@broadcast, @remote}, 0x10) 1m12.560403135s ago: executing program 45 (id=8618): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x600010c) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xffffffff, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100), &(0x7f0000000680)=ANY=[@ANYBLOB="00fbf802025708b3aa72d1200bcba21a1e2452972aff7996cfb792562a2e7975ea6cee32f7c7469e4edf6ccc2446821268234b0ba5c45a3bc15a0f5418c99fca9ae15a058dcda32c1ee87731ff885c3ea86575d74dd894dedd7272a18515195dc6751bd7bd58c4f963ca11ba43d9b5a85c90dd88f20226ee612e5cb5340b34c60da1df296062f67af421bbe16d70098b54399e24fd176df875ae21be0ea9c5666441b620b29def2c9287790577a1536e661e2d7f974d1b5fc1d9455bae1b554fd9326933448988322f4d537ed2fa67be2e1816d00a21e3dc801ada80bcf8bd513bef5da2e8a25a0796d1f74fb0ac21c8c474dcf9ad9388d8fa2a"], 0xf8, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "8e2f5bdf46c7b89c", "1568aec696bb3208409d0796ed39cf77", "f9834bf0", "4ee5d06cf7bb2e3d"}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x0) 1m11.524842521s ago: executing program 46 (id=8632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000ff0000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 42.840830098s ago: executing program 47 (id=9075): ioperm(0x3, 0x4, 0x1000008) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 42.260242396s ago: executing program 48 (id=9084): socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote}, 0xc) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f00000017c0)=""/4108, 0x100c}], 0x2, 0x0, 0x3) 41.877580645s ago: executing program 49 (id=9088): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sync_file_range(r2, 0x4, 0x8, 0x7) fcntl$setpipe(r1, 0x8, 0x80000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e74ef4a8044fd424", @ANYRES32=r12, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$packet(r10, &(0x7f0000000180)={0x11, 0x5, r12, 0x1, 0x3, 0x6, @remote}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r9, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) timer_create(0x2, &(0x7f0000000280)={0x0, 0x6, 0x0, @thr={&(0x7f0000000300)="1d5fa765c43f6490b4fbc30884c978ae2bc73caa31b7556f6744d2000d7cdbdcc70a2bd80c6b2f96d1739253ab689e5690396afc69f98c2ff4a36e7735d492d9cd5189b225ff103c61ac91a730b3a4892489b4462362334049c11ee2697435abb129a447d2c021281f674df16c785271e9143862bb121fae46b10dcc68b573ab34b4a95890060abcf79e52399b65b077bff9680f15e01ee3cebcaec25388eab49bf3ca4f858401030d766506bbb1", &(0x7f0000000240)="d0ef8f88595add46d632e59e640be9110aceaf66a69731decb7507f1402a574fb82a9a38fdd401bf4be916ae4480c4"}}, &(0x7f00000003c0)=0x0) timer_settime(r14, 0x0, &(0x7f0000000400)={{0x77359400}}, &(0x7f00000004c0)) 40.824561211s ago: executing program 50 (id=9097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r6 = socket(0x27, 0x80000, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r6, r5, 0x0, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 39.762947956s ago: executing program 51 (id=9105): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300020c000000000000000000000002000800"], 0x60}, 0x1, 0x7}, 0x0) r5 = dup(r2) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xc, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000400), &(0x7f0000000600)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r9}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 34.968954788s ago: executing program 1 (id=9115): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x3, 0x80}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = msgget(0x1, 0x140) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000680)=""/4096) 34.931161957s ago: executing program 1 (id=9116): mkdir(&(0x7f0000000040)='./file0\x00', 0x140) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 34.784709666s ago: executing program 1 (id=9120): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x10, 0x8af4, 0xf365, {{0x33, 0x4, 0x3, 0x2a, 0xcc, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @local, {[@generic={0x83, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x97, 0x3, 0x8, [{@empty, 0x35}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x7f}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}]}, @timestamp_addr={0x44, 0x4c, 0x5a, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x36d}, {@loopback, 0xb67}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x273f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@remote, 0x1ff}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x1}]}, @ssrr={0x89, 0xf, 0xf8, [@private=0xa010102, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x24, 0x73, 0x3, 0x7, [{@rand_addr=0x64010101}, {@empty, 0x10}, {@multicast2, 0x3}, {@multicast2, 0x18ed}]}, @generic={0x7, 0xf, "5173d40c1edc149f49b47b167f"}]}}}}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x2, r1, 0x15}, 0x10) (async) nanosleep(0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000080)={0x0, 0x4, 0x4, @thr={&(0x7f0000000340)="5af46b5f3b2da7e128eb88ca12bb663af1ce36d9dd8eff376e49c230cb295332c409ac7667ab234f1a49ac4a5e1b56465e0af48b3af3ed1d2e9de0d17729cd6564b4190a24118f284a295547269024de76ff62dc8962b5645d301b093949a532cdaf221c2846cd2de107a4918ec6", &(0x7f00000003c0)="227cae0d17fd25aff68092914b5b36640e1bd8b1cb1f99a68e5ce71a06a74bc0b07b853f8ad66b311c110e5e7bfe57ee2630098fa83bd2454f958f29d210b5ba2cc4bd3b6606c19d3227d43e5a46d4cd5176b15ca56db6ec42f6669143ba082f54b72a522f5b7ea9f237b2169db435a73bccecc127e457894c6982136eeb5504c21a0d2c2e12e35eb3e7306aece16f4305e854b5660d8b395a49865f5a013236fe0fb03b96413633a2de35045f13270f8c9c594acfc1030761a1e2900a"}}, &(0x7f0000000180)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000580)='./file0/bus\x00', 0x4000001) inotify_add_watch(r6, &(0x7f0000000240)='./file0/bus\x00', 0x10000882) (async) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f00000001c0)) 34.440853755s ago: executing program 1 (id=9122): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 34.384925705s ago: executing program 1 (id=9125): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x7}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x5, 0x32, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8c, 0x0, &(0x7f0000000100)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) signalfd4(r5, &(0x7f00000002c0)={[0x25]}, 0x8, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r6 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="ede59159a4bc8b4c1106e3c96c4cb6ed4b8a2ad65a2813014177a348532aa93a", 0x20, 0xfffffffffffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x17, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', r6) 34.008886404s ago: executing program 1 (id=9128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/47, 0x2f, 0x3) 33.984066084s ago: executing program 52 (id=9128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/47, 0x2f, 0x3) 26.800967565s ago: executing program 2 (id=9221): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0xb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x9c, 0x9, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_MARK={0x8, 0x10}]}, {0x61, 0x6, "2db77847499536d1ae3e3635e27af7f667857cc7c359c1fda1b2b55f7f2bf9c12b5e5e7847d5f288100202af1508ef84ec50b6bfc2bff35866bf9920cb25e1fb00000000c50b8328e218b4d02a3ed4cd55642a8cbacae68fdc39b76420"}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x10000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='block_bio_remap\x00', r2}, 0x18) syz_clone(0x26003500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDISABIO(r3, 0x4b37) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="1500000065ffff03300000080039303030df6aa173c3da4773b1debf110ac8aba4b5489f701c067f9c203f20c8e3055cce4886e8f6734dc6b1ccdfceadbf76741041416811b9e0f6fc87ab2bc835228fa7e89dc619c919d0686ddc6571eff92d1aa7dd1ad6bbd6ddb75597194adf7808e748bc5d6cb4b5e0cac9036f1068fd8156c6"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x53) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 26.526318664s ago: executing program 2 (id=9227): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x10, &(0x7f00000000c0)={[], [{@rootcontext={'rootcontext', 0xa, 'staff_u'}}]}, 0x1, 0x458, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000081) r5 = dup2(r3, r3) faccessat2(r5, &(0x7f0000000880)='\x00', 0x1, 0x1100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x251, &(0x7f0000000480)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) creat(0x0, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0xffffffffffffffff}, 0x13) 26.306845693s ago: executing program 2 (id=9230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100edff00000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000c80)="4c32d2db3aff3c8c1b673c3a995dd8dbc4756ef2073b9fa7a31da8ffdedaa3034a8495cb534e39ab60f2395e005127707ec7a567768427f0b4fa88d48cd7682bbe02cc2785b79abe09b7b68da9feb30f2207b773557c5a2f31e72182595c440105d48a9d1cea748d75c3740f7bfa64f2c295f29dc9526997a0d9b1b4b0219b73354aed2d5ed92153", &(0x7f0000000d40)=""/212}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "0000000006090100ea6f001000"}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000006000000fa00000000000067040000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe05, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000380)=[{&(0x7f0000001080)='e', 0x1}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$eJzs3c9rHG0dAPDvzCYxed9oWpFii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM60a3Y32ebN7mwznw/M9plnZvd5vjv7dJ5nNs9OALU1nz2kEWcj4k4SMdexbTbaG+eL/fb+8exutiTRan3j70kkRV65/+vi3w+zhyRiOiJ+fz3ik43ucrefPL2/0my1fT9icWdza3H7ydOLG5sr99burT1YvvTly1eWvrJ8eflY4izjunHz65/5yQ++86X1PzQvJnE1bk9+bzX2xXFc5mM+XhchduZPRMSVLNHjfXnflCEkFdeDo2kUn8fJiDgTc9HI19rmYuPHlVYOGKpWI6IF1FSi/UNNlf2Acmw/jHHwOHt1rT0A6o5/on1tJKbzsdEHe0nHyKg93j11DOVnZfz32blfZEv0uQ4xcQzl9LP7PCI+3Sv+JK/bqfwqThZ/GmnH87L0UkRMFe/FYOP/ya6c+X3ro/78vUv8ncchi/9q8W+Wf/2I5VcdPwD19PJacSLfzdbenv+ynmHZ/4ke/Z/ZHueuo6j6/Ne//1ee76fza+Tpvn5Y1t+51fsluzo5f/nRjZ/1K7+z/5ctWfllX3AUXj2POLcv/h/mHb3kzfFPehz/bJc7A5bxtT/+7Ua/bVXH33oRcb7n+OdtjzZLLe5sbpV5+76fXFzfaK4ttR97lvGb3337V/3Krzr+7PhHn/HfQcc/y9sasIxf33qx2W/b7KHxp3+dSm7nqaki57srOzuPliOmkpvFLh35lw6uS7lP+RpZ/Bc+37v994q/KCo/0Lv/9270t/XN+3v99hv4+HcPnTKvWweHe6gs/tU+n//Djv9PByzjX996/Nl9WTNl4qD4Z7pfKtl95wgBAAAAAACgPtL8O9gkXXiTTtOFhfYc3k/FB2nz4fbOF9YfPn6wGnEh/3vIybT8pnuuvZ5k68vF38OW65f2rX8xIk5HxM8bM/n6wt2HzdWqgwcAAAAAAAAAAAAAAAAAAIAx8WEx/7+8T/U/G+35/wPZOTPk2gFDN8wbzAHjTfuH+srbf1p1LYAqOP9DfWn/UF/aP9SX9g/1pf1DfWn/UF/aP9SX9g8AAAAAJ9Lpz738cxIRu1+dyZfMVLFtstKaAcP27m18fij1AEavMdKnAePkzVf/pv9D7QzU//938eOAw68OUIGkV2beOWgd3Phf9nwmAAAAAAAAAAAAADAE58+a/w91lcZvq64CUJHuifxn9wac6Oc3AOA956f/ob4+0hjfBQI4EQ6bxT/db4P5/wAAAAAAAAAAAAAwMrP5kqQLxS1AZyNNFxYiPh4Rp2IyWd9ori1FxCci4k+NyY9l68tVVxoAAAAAAAAAAAAAAAAAAABOmO0nT++vNJtrjzoT/+nKOdmJ8i6o41KfzkQkoy90JiLGIfbhJCY6cpKI3ezIj0XFHm3HWFQjzatR8X9MAAAAAAAAAAAAAAAAAABQQx1zj3s798sR1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARu/t/f+PnkgOeZ2qYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k//CwAA//9vNjw9") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r9 = syz_open_pts(r2, 0x8001) r10 = dup3(r9, r2, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.810432231s ago: executing program 2 (id=9240): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 25.743697411s ago: executing program 2 (id=9241): symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 25.626426641s ago: executing program 2 (id=9242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)="04b7", 0x2}], 0x2) (fail_nth: 2) 25.60537405s ago: executing program 53 (id=9242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)="04b7", 0x2}], 0x2) (fail_nth: 2) 23.993937094s ago: executing program 3 (id=9263): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = getpid() r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000b0000000e00000005000085b80300000a00000001000000f60a000065f7bb6801000000f00f00000900000004000000060000000200000000000000060000000a000000000000009b0000000b0000000300000400100000050000000200008036c767070600000005000000800000000100000002000000000000000d0000000000000205000000002e2e5f00612e30613000"], &(0x7f0000000500)=""/147, 0xa7, 0x93, 0x1, 0x80, 0x10000, @value=r5}, 0x28) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) wait4(r4, &(0x7f0000000080), 0x20000000, &(0x7f0000000280)) futex(&(0x7f00000005c0)=0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x7fe, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x210000, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r6, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0) io_destroy(r6) fcntl$setstatus(r0, 0x4, 0x400) clock_settime(0x6, &(0x7f0000000100)={0x77359400}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 23.632939403s ago: executing program 3 (id=9268): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x211]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x6282, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") 23.510666843s ago: executing program 3 (id=9269): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000060010880540007800800050000000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800050000000000240007800800050000000000080006000000000008000600000000000800050000000000440007800800060000000000080006000000000008000600000000000800060000000000080005000000000008000600000000000800060000000000080005000000000034000780080006000000000008000500"], 0x1a0}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) clock_adjtime(0xa1860100, &(0x7f0000000000)={0x3fd, 0x6, 0x21, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xffff, 0x0, 0x4, 0x0, 0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x4, 0x5}, &(0x7f0000000040)=0xc) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000038fb9500f8b357c43a2ee2390c00"/41], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 22.652783799s ago: executing program 3 (id=9276): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 22.616705569s ago: executing program 3 (id=9278): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x211]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x6282, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") 22.448982068s ago: executing program 3 (id=9279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28842, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000680)={0x0, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x50, r7, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60, 0x0, 0x0, 0x81}]}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000001900010000000000000000001c1404"], 0xa0}}, 0x0) 22.448672518s ago: executing program 54 (id=9279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28842, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000000680)={0x0, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x50, r7, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x60, 0x0, 0x0, 0x81}]}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000001900010000000000000000001c1404"], 0xa0}}, 0x0) 12.533916269s ago: executing program 0 (id=9453): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x0, 0x0) (fail_nth: 2) 12.235102168s ago: executing program 0 (id=9457): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12.177069488s ago: executing program 0 (id=9460): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x400000007fff}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) iopl(0x51) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b9090000000b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd40dd6", 0xd8}], 0x1}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000009980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=ANY=[@ANYBLOB="100007"], 0x20}}], 0x2, 0x0) 11.843463666s ago: executing program 0 (id=9464): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 11.808522416s ago: executing program 0 (id=9470): r0 = socket(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 11.697090286s ago: executing program 0 (id=9471): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syncfs(r1) 11.687462926s ago: executing program 55 (id=9471): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syncfs(r1) 10.498122591s ago: executing program 4 (id=9488): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c40)="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", 0x508, 0x0, 0x0, 0x0) 10.426637981s ago: executing program 4 (id=9493): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 10.397034461s ago: executing program 4 (id=9494): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000010000000000dd000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x8}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'batadv0\x00'}, 0x18) r6 = open(&(0x7f0000000140)='./file1\x00', 0x107842, 0x184) preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) timer_gettime(0x0, 0x0) 10.22679812s ago: executing program 4 (id=9498): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 10.226276s ago: executing program 4 (id=9499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 10.13695886s ago: executing program 4 (id=9501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 10.12753461s ago: executing program 56 (id=9501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) 4.180049846s ago: executing program 8 (id=9578): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x8) 4.101135586s ago: executing program 8 (id=9579): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) prlimit64(r1, 0x6, &(0x7f0000000300)={0x0, 0xd829}, &(0x7f0000000340)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_clone(0x1a000400, &(0x7f0000000000)="c6411532e316c14bd25eada96bac390183419520f89c3ae2fa21111bce5edfcce6d170dceb44316acb78e82499ba7c9e2dcc661043a005912ff561b55e05d202bfb2ff4fede718a79e6146bb7f51b91132c6a44506636ae10bc89770f30b8cb62f573a06c529de578b939d2416d39d3ed970dd884017498729cc2363fd59f1136987f6a39b55ca79284083ed149dd472c918ca45b3cd33f305288a7bd4f70f0569733cff7fea8fec37be28d65b887d3baeb63d4881b425582ac40945146aa1cef95611b73a7393bbc8f43c4d71e872fc0df73c5aa4016564ffc72cc9a7a7cdfaf12dbbf436d442c31850c22ea7af3c5f647fcb4a74", 0xf5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="50bf9ea979d72524aab0cba02a5372f71ef6fcd6ca4f9b7c56a50bcb507a873baed793ce36f107eaccd449bb0a3cd77e99119ce2c4755b6ade50bd3d0ddd1299a01ad05ed0f301978013b7434bbd47bc209e4d7d1710c6303d0b6a48101d59d046f148bea69334dfc8580e3de40ad28cf2b57e9740bd1817aa423598d616f160a06c2d835c6516826e5c109298f8f0b638a19e816b3a80a60ad8efbf43c5ac6e117dd56eed747f68dfd5a3b7fa2d3df09971412e496d52043d92d8482f7b6181") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x8a19, 0x5, {{0x31, 0x4, 0x3, 0x3, 0xc4, 0x68, 0x0, 0xdf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@generic={0x86, 0xb, "868091b6898413673a"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x1}, {@broadcast, 0x4fb7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@multicast2, 0x2823}, {@multicast1, 0xafc0}, {@remote, 0xfffffff7}]}, @generic={0x59, 0x7, "a54b0c42a1"}, @cipso={0x86, 0x3a, 0x3, [{0x6, 0x6, "699d1fbb"}, {0x5, 0xb, "95b499b33dc548e2a3"}, {0x5, 0x11, "2756ab11f93eed9d2cd81c6090416c"}, {0x0, 0x12, "e2d71350a9e83b8d8096a9ea97ed965b"}]}, @rr={0x7, 0x23, 0xf3, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @multicast1, @local, @multicast2, @empty]}]}}}}}) setns(0xffffffffffffffff, 0x24020000) 3.705254715s ago: executing program 8 (id=9582): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xc, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2) 3.625318624s ago: executing program 8 (id=9584): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 3.559060114s ago: executing program 8 (id=9586): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = semget$private(0x0, 0x4, 0xa4db9bd18b72fb4f) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) wait4(r7, &(0x7f0000000080), 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITSW(r11, 0x40044590, &(0x7f0000000840)=""/243) ioctl$EVIOCGRAB(r11, 0x40044590, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="020000000000faff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000"], 0x50) flock(r3, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x1c8) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 3.408950204s ago: executing program 8 (id=9589): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2000008, 0x6}, 0x0, 0x3, 0x4, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100800004006dd035d53186f83993e1fa1dc4d7118dd7e803935bdeab3882d314808cbd5ce3515733f07f39283eaadd9a4ff9b21ff53c132aa8350e8d701af1c765069aa910d6ebf1b47466132b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x702, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r8, &(0x7f00000003c0)='./file0\x00') statx(r8, &(0x7f0000001d80)='./file0/../file0\x00', 0x4000, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.408526403s ago: executing program 6 (id=9590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100edff00000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000c80)="4c32d2db3aff3c8c1b673c3a995dd8dbc4756ef2073b9fa7a31da8ffdedaa3034a8495cb534e39ab60f2395e005127707ec7a567768427f0b4fa88d48cd7682bbe02cc2785b79abe09b7b68da9feb30f2207b773557c5a2f31e72182595c440105d48a9d1cea748d75c3740f7bfa64f2c295f29dc9526997a0d9b1b4b0219b73354aed2d5ed92153", &(0x7f0000000d40)=""/212}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "0000000006090100ea6f001000"}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000006000000fa00000000000067040000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe05, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000380)=[{&(0x7f0000001080)='e', 0x1}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$eJzs3c9rHG0dAPDvzCYxed9oWpFii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM60a3Y32ebN7mwznw/M9plnZvd5vjv7dJ5nNs9OALU1nz2kEWcj4k4SMdexbTbaG+eL/fb+8exutiTRan3j70kkRV65/+vi3w+zhyRiOiJ+fz3ik43ucrefPL2/0my1fT9icWdza3H7ydOLG5sr99burT1YvvTly1eWvrJ8eflY4izjunHz65/5yQ++86X1PzQvJnE1bk9+bzX2xXFc5mM+XhchduZPRMSVLNHjfXnflCEkFdeDo2kUn8fJiDgTc9HI19rmYuPHlVYOGKpWI6IF1FSi/UNNlf2Acmw/jHHwOHt1rT0A6o5/on1tJKbzsdEHe0nHyKg93j11DOVnZfz32blfZEv0uQ4xcQzl9LP7PCI+3Sv+JK/bqfwqThZ/GmnH87L0UkRMFe/FYOP/ya6c+X3ro/78vUv8ncchi/9q8W+Wf/2I5VcdPwD19PJacSLfzdbenv+ynmHZ/4ke/Z/ZHueuo6j6/Ne//1ee76fza+Tpvn5Y1t+51fsluzo5f/nRjZ/1K7+z/5ctWfllX3AUXj2POLcv/h/mHb3kzfFPehz/bJc7A5bxtT/+7Ua/bVXH33oRcb7n+OdtjzZLLe5sbpV5+76fXFzfaK4ttR97lvGb3337V/3Krzr+7PhHn/HfQcc/y9sasIxf33qx2W/b7KHxp3+dSm7nqaki57srOzuPliOmkpvFLh35lw6uS7lP+RpZ/Bc+37v994q/KCo/0Lv/9270t/XN+3v99hv4+HcPnTKvWweHe6gs/tU+n//Djv9PByzjX996/Nl9WTNl4qD4Z7pfKtl95wgBAAAAAACgPtL8O9gkXXiTTtOFhfYc3k/FB2nz4fbOF9YfPn6wGnEh/3vIybT8pnuuvZ5k68vF38OW65f2rX8xIk5HxM8bM/n6wt2HzdWqgwcAAAAAAAAAAAAAAAAAAIAx8WEx/7+8T/U/G+35/wPZOTPk2gFDN8wbzAHjTfuH+srbf1p1LYAqOP9DfWn/UF/aP9SX9g/1pf1DfWn/UF/aP9SX9g8AAAAAJ9Lpz738cxIRu1+dyZfMVLFtstKaAcP27m18fij1AEavMdKnAePkzVf/pv9D7QzU//938eOAw68OUIGkV2beOWgd3Phf9nwmAAAAAAAAAAAAADAE58+a/w91lcZvq64CUJHuifxn9wac6Oc3AOA956f/ob4+0hjfBQI4EQ6bxT/db4P5/wAAAAAAAAAAAAAwMrP5kqQLxS1AZyNNFxYiPh4Rp2IyWd9ori1FxCci4k+NyY9l68tVVxoAAAAAAAAAAAAAAAAAAABOmO0nT++vNJtrjzoT/+nKOdmJ8i6o41KfzkQkoy90JiLGIfbhJCY6cpKI3ezIj0XFHm3HWFQjzatR8X9MAAAAAAAAAAAAAAAAAABQQx1zj3s798sR1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARu/t/f+PnkgOeZ2qYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k//CwAA//9vNjw9") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r9 = syz_open_pts(r2, 0x8001) r10 = dup3(r9, r2, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.408337553s ago: executing program 57 (id=9589): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2000008, 0x6}, 0x0, 0x3, 0x4, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100800004006dd035d53186f83993e1fa1dc4d7118dd7e803935bdeab3882d314808cbd5ce3515733f07f39283eaadd9a4ff9b21ff53c132aa8350e8d701af1c765069aa910d6ebf1b47466132b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x702, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r8, &(0x7f00000003c0)='./file0\x00') statx(r8, &(0x7f0000001d80)='./file0/../file0\x00', 0x4000, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.947136651s ago: executing program 6 (id=9602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) sendfile(r1, r1, &(0x7f00000000c0), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.025109898s ago: executing program 6 (id=9612): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a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x1a0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x4, 0x5}, &(0x7f0000000040)=0xc) 1.920989218s ago: executing program 6 (id=9613): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2000006, 0x80000000}, 0x13008, 0x3, 0x2, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmmsg(r1, &(0x7f0000000340)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/80, 0x50}], 0x1}, 0x5}], 0x1, 0x10002, &(0x7f0000000380)={0x0, 0x989680}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x800, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000040), &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 1.798949227s ago: executing program 9 (id=9616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x2, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/108, 0x6c}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.516350136s ago: executing program 7 (id=9618): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, r2, 0x2) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x90) 1.488178716s ago: executing program 9 (id=9619): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) getegid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x2a020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7fff, 0x100000000, 0x1) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030428b570000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8004700", @ANYRES16=r4, @ANYBLOB="000028bd7000f9dbdf254f0000002c007a800c000300fa22c7b6d1fc9ab40c0003001068937054bd0d0008000400800000000800040007000000b8007a800c00030026cafb8ce29b1315140002007181f935b358ea339f7fc38f66307eb214000100fe0c8ab072c80e9c324e26a19f93079814000100579cf8eeac86239cd3c42ba93fa481ad0c000300c516fa44db087c9014000100a9e7c0dd8f18bc3475d5ecdb4e6e88e414000100ce5dd2ca76768033c1c0e2bbcd19a58314000100cbd840eb395d88a735fbd3bba093690824000100b16d20751da58a75a1bc6a5c8edaf42d774e14fee20b07ebea04608352217719"], 0xf8}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) pipe2$watch_queue(0x0, 0x80) timer_create(0x3, 0x0, &(0x7f000000e7c0)) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r8, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) 1.425034346s ago: executing program 7 (id=9620): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x211]}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") 1.385662575s ago: executing program 7 (id=9621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) sendfile(r1, r1, &(0x7f00000000c0), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1.357543815s ago: executing program 5 (id=9622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x800) 1.277090745s ago: executing program 9 (id=9623): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a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x1a0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x4, 0x5}, &(0x7f0000000040)=0xc) 1.275336275s ago: executing program 9 (id=9624): umount2(0x0, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffffa, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000020000000900010073797a30000000001400020077673000000200"/46], 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x810) 1.177538634s ago: executing program 5 (id=9625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x800) 1.059004374s ago: executing program 5 (id=9626): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000010000000000dd000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) 809.040823ms ago: executing program 5 (id=9627): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000002040), 0x288, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r3}, 0x38) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x3000000) 491.856342ms ago: executing program 7 (id=9628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 432.977912ms ago: executing program 7 (id=9629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x2, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/108, 0x6c}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 367.414661ms ago: executing program 7 (id=9630): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x77d, &(0x7f0000000f40)="$eJzs3d1rW+UfAPDvSdt17fb7tYIg86ogaGUstbNuCl5MvBDBwUDBO7eQZmVr2owmHWspuCGCN4KKF4Le7NqXeeetL7f6X3ghG1O74cQLqZw06dI1qenaJEg/H3ja5znnJM/zPW95Ts5DTgD71lj6JxNxJCI+SCJGatOTiBio5vojTq0vd291JZ+mJNbWXv8tqS5zd3UlHw2vSR2qFZ6OiO/fjTia2VpveWl5NlcsFhZq5YnK3KWJ8tLysQtzuZnCTGH+xOTU1PGTz508sXex/vHT8uFbH77y1Fen/nrnsRvv/5DEqThcm9cYx14Zi7HaOhlIV+EmL+91ZT2W9LoBPJTM+hFeTUdiJPqquRaGutkyAKBT3o6INQBgn0l8/gPAPlP/HuDu6kq+nnr7jUR33X4pIg6ux1+/v7k+p792z+5g9T7o8N1k052RJCJG96D+sYj47Ju3vkhTdOg+JEAzV69FxLnRsa3n/2TLmIWdeqaNZarjT+LNq/Wy8x90z7dp/+f5Zv2/zEb/J5r0fwY3jt3defA9th7/mZt7UE1Laf/vxYaxbfca4q8Z7auV/lft8w0k5y8UC+m57f8RMR4Dg2l5cps6xu/8fafVvMb+3+8fXfw8rT/9f3+JzM3+wc2vmc5VcruJudHtaxGP9zeLP9nY/kmL/u+ZNut49YX3Pm01L40/jbeetsbfWWvXI55suv3vj2hLth2fOFHdHSbqO0UTX//8yXCr+hu3f5rS+uvXAt2Qbv/h7eMfTRrHa5Z3XseP10e+azXv3+Nvvv8fSN6o5g/Upl3JVSoLkxEHkte2Tj8ea32byxvLp/GPP9H8+N9u/0+vCc+1GX//rV+/fPj4OyuNf3pH23/nmRv3Zvta1d86/vpgw3T7T1Vz47Up7Zz/2m3gLlcfAAAAAAAAAAAAAAAAAAAAAAAAALQlExGHI8lkN/KZTDa7/gzvR2M4UyyVK0fPlxbnp6P6rOzRGMjUf+pypOH3UCdrv4dfLx9/oPxsRDwSER8PDlXL2XypON3r4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5lCL5/+nfhnsdesAgI452OsGAABd5/MfAPafnX3+D3WsHQBA97j+B4B95uJIr1sAAPSA638AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA67Mzp02la+3N1JZ+Wpy8vLc6WLh+bLpRns3OL+Wy+tHApO1MqzRQL2XxpruUbXV3/VyyVLk3F/OKViUqhXJkoLy2fnSstzlfOXpjLzRTOFga6FhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtK+8tDybKxYLCzLtZqw6mX2QaTxLDPXk3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX/BPAAAA//8llinB") mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="06000000f820000000000000020000090000000084067620995256a8d379bc9b77ee759d34f17710004b61941bb44516e632510b8ae406224a4b377b57b8d1a1e5685cbe55b4452f9af150223a3b133194c47552010000808367bec57b31513dedca83d870", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x357, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117200000000008510000002000000850000000900000095000004000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 364.107301ms ago: executing program 9 (id=9631): syz_emit_ethernet(0x6c, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x211]}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") 281.643271ms ago: executing program 5 (id=9632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x400000, 0x100000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000001b2ed56d8fe5000000"], 0x1c}}, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, r1, 0x2e, 0x4608, @void}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x3, 0x0, 0x1000}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e00000006000000f8ffffff0600000000600000", @ANYRES32=0x1, @ANYBLOB="08000000000000000000000000000000000000009f44857fb3ca8642945d88f90a6b816572afde384b18c327370449cb6665dfbf8b49daefa878d55733b7ed48d02addcc653080a9fcf24be4cadcdb2607c0f73de489772f53c298b7ed7690987a9a6c354a957e8d753838a24594adab39d4fe5621d1c7d4d5818668fad931ee88f88109f5c4461b1aa9453006425bc87edff20711859ff3bae157d863c6a01c225e9aa9e8cd6858ec8f0fbf0961a8040dffb7cb04a701d4f6ad05e4c62fdaace3263a1142b158eb4e3aa9deca8fa05e208a00f5f4fd424a591114b3394c4a9be999d7e2565a2a4b9663fb1804ff3fe89f249e1b4019fe0c105352605eb75a50a287b4", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0500000004000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000004c6b00000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 257.541981ms ago: executing program 9 (id=9633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @timestamp, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendfile(r1, r1, &(0x7f00000000c0), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 165.073131ms ago: executing program 6 (id=9634): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x800) 19.99019ms ago: executing program 6 (id=9635): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r1 = dup2(r0, r0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f00000001c0)={&(0x7f00000000c0)=""/172, 0xac, 0x0, &(0x7f0000000180)=""/8, 0x8}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='stat\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @remote, 0x2}, 0x1c) getpid() r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0xee1d, 0x400242) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa4f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000003c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x74, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xdc04}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[r1], &(0x7f00000004c0)=[{0x1, 0x3, 0x10, 0x2}, {0x2, 0x2, 0x9, 0x8}, {0x3, 0x2, 0x2, 0xa}, {0x3, 0x1, 0x9, 0x3}, {0x0, 0x3, 0x3, 0x4}, {0x5, 0x4, 0xa, 0xa}, {0x4, 0x4, 0x1}, {0x5, 0x4, 0x10, 0xa}, {0xffffffff, 0x5, 0xe, 0x2}], 0x10, 0x7, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdd}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000007c0)=0x1ff, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004054}, 0x8000) ioctl$RTC_PIE_ON(r1, 0x7005) setsockopt$inet_buf(r7, 0x0, 0x7a, &(0x7f0000000940)="b133f6ec99a51e5f16870627902e634c4483887ee4cb426d25e98dc5c5c7adc7a5235fbe563742f7abd1cba0eb140e11be404ea67a4b25c2b1a4cc3bd8675fb8e5efd69a12ff353d5defb719226e6bb85ce068a299f6e2ed842966345707756eb525650f5e3eef3dcfac8463a6bd4d6e384a454180a7c5ef8ea7e90beea6f8c6df106fc15bf83eefdf0025fdf5ccabbb4cda012fd61a52b5b221299552eeca140140c1de9a6b0b5acf427f51a068f337d88907405c9fc2ea1680f57f62aa43473dac6ec8ffa49b4d3f593264cfab71fe3d321eb3c6e75400f533bcdaad633df08909f00d8fb8e86aaf013af5", 0xec) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000a40)=0x4, 0x4) lseek(r0, 0x4, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, 0x97, 0x90, &(0x7f0000000a80)="ab1bf360a20ac7b405e92b8ba5dfd60644e902ce00a6dcc5ee5c91978858506cca90354454366ae339da1b9a1e151e27880b75f204257e5a08e3d049ba466f9bd74f18ffde15677e98ce741ceaf03300ca2644268bb130eeccd70d6551098b5864529982d95333aa5b15e92842304f86b28665fde426a62505074cf4e6f926fccf1a4044b848d038fb44083f2e2a93c9f363897a3a830a", &(0x7f0000000b40)=""/144, 0x7f, 0x0, 0xf9, 0x9f, &(0x7f0000000c00)="ecd764be2aed45fb881cda90161f49e58bb87a84edebb6a1d70be0ea15d61597ca53669f06a92cfa141a83ec8dfe96610e5c33f37a333eec173361c5ee94f9060b40f8afecccef6963e489b9886009b04013d1b1e6fb05e8a1272b20515d17a5bc94a88a98444ff6562306529c5b8a45a714629e73c747f6bb43dbbdb0bb11a41f06e41f2040f753c8eb29da1ec21a48a801d5b12ef70ddef2f8437f0ad8bb01628caa44de7190e9f8dae8a9bce05bd897e3aa57d4a3815b39e2b29dfaa6ed86027cc2f328999da3ad5065179c16a4a13ffc2479f55bffe22401aa90086ca25cff10e45be382f4be66165464df59b083e3ddae2bbebd24aa3d", &(0x7f0000000d00)="027e18c998d8787348830f141403d4ea8270bc703b6d7f2aaeb9942f0777c2d357f62fb8a7e6b0b874ccebdb9fccd78ba662b116c6a16eb955b8cb568f67084d008f3e5840a9c83f4e4976bd3db89b55fdc71e014668e0ba9a024de4e9c68ecc00c60d78793fb76dff2654374c71d39c1e8f8f3659837bfc8b8e770cd00487444326657a5236cc4a0823c881eb2e796188d1ae8d37872c69304186c9489bab", 0x1, 0x0, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xfffffff1, '\x00', r3, r2, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001040)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x11, &(0x7f0000000e40)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000f00)='GPL\x00', 0x2555, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000f40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0x8, 0x4, 0xffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001080)=[r2, r8, r4, r4, r4, r1, r9, r4, r4], &(0x7f00000010c0)=[{0x4, 0x3, 0x10}, {0x2, 0x3, 0x8, 0xc}, {0x2, 0x2, 0x5, 0xa}, {0x5, 0x5, 0x0, 0x9}, {0x2, 0x3, 0xe, 0x7}, {0x5, 0x1, 0x0, 0xb}, {0x0, 0x4, 0xc, 0x3}, {0x1, 0x4, 0xf, 0xc}, {0x5, 0x5, 0x6}], 0x10, 0x101, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00'}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) write$char_usb(r10, &(0x7f0000001280)="a3218ecb40fca8b0fc5b22aec3b3a4f5fdf0801bae9e436fefc6831e995270d414bc7a31e2ab19a35382aa3e6bacd79f51e984dd01ada986133770149f20b72c12f044659c185790dd6dbfa175bb66", 0x4f) write$UHID_CREATE2(r9, &(0x7f0000001300)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x77, 0x4, 0x6, 0xffffff00, 0x4, 0x3, "1d9026582d63d614224ec1e18a19805a9967f9823c130d1d8cf74aa1210cb76ab4892453feeaee12c3ee1a1afc6e9e2d12fb7b92d2ef02e255be39c58cd11b67578bc7d82864256a1af01e5cc848b991b21859055908e18ba0a7f1ce07606f7d9698730b7165207d898fb1bbd928adfc0dacd56c1f6fe0"}}, 0x18f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000017c0)={&(0x7f00000014c0)="e3a69051cfdbeead3132e212dd4eef87070c1a663950f3e3008c21420d0e130359b6449c8d615eb7f4759902f19f1f4db56a8b6a4e58cffbe6be8a351e235feb5d90508c29a1c55b4676a0324ed5a3398e68fa901f324524243015cd84c838e736747d1565b2ecbb0898b4f7dadfa9e93a7183e7f7091681bed6d208a84db3ce327b42a7003e22f631ce1cd7db539939cd7354e2cfeb23628e1b089998fc4f93b005e03f2eb89e04e2c246c75288234a7c0f1def081b6afbbc1b1e0874ed98369f010656f91d4c2cec533c8270cbd0c4ce1b194a9a9c82edb26aed", &(0x7f00000015c0)=""/151, &(0x7f0000001680)="7dcdc21da6c9f0b77ca8a4fa70b0b499e0c228fe6c2528676ca1d47cadb3", &(0x7f00000016c0)="6d1bc5c99bc0608619d12cd3d1ba54749a949f672c919f61466630fffcd85a218f1efcea8c9238fbe5bf55a9d838e32afe0ce09699680c5ecccb1bf6cb76a3d9b3d135cc2325bfc100e4a4cfbf87349f7f772ce36b02bb809920f29fc4783349b79db1aefe8521cce11128a777fc9bdb697a06e5cd9a594b07a4bd5efe423baa4597a3723af92cd879258a538c1f7b091a9490851b23a4da552f0e4c68385a859f67d21450bf7be6abe607579ec44f170000e730968ce5c4590463d355e4d8b3bb0da432977035bdbad9aff30642335d96213025893ef11368d4046c66423becac3fa2c7005902", 0x8001, r2, 0x4}, 0x38) 0s ago: executing program 5 (id=9636): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="3b07b4a79b9d6bcd939a66b66b378bbc3dbb2d90d056877398ab54bfb873cc5b663f46c6449cb88232b75bb7254e4a42eb356fb229ea32", @ANYRES8=r2, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES32=r1], 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000080)=ANY=[], 0x1, 0x38b, &(0x7f0000000500)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffb}, 0xffffffffffffff0c) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2e86dd6082d2f300080000fe8800000000000000000000000000010b03000000000000000000000031b1a7860defa10000013300000000000000"], 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) getuid() ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000280)={0xffffffd, 0x1, 0x0, 0xffffffff, 0x17, "0062ba7d8124024a00006df31a69b8d71e6300"}) r8 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000001c0)=0xb) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESDEC], 0x38}}, 0x6000804) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket(0x2, 0x1, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r11, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r2, @ANYRES16=r7, @ANYRES32=r10, @ANYBLOB="40d257fa44f9570b2bdd7bfba317b8ced7222cc753060000000000000080d4cc513b744b673899000b01e5aacaedec"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): a:aa:aa:3e) already exists on: batadv_slave_0 [ 473.277441][ T5716] vfs_write+0x281/0x920 [ 473.277473][ T5716] ? putname+0xcf/0xf0 [ 473.277492][ T5716] ? __fget_files+0x17c/0x1c0 [ 473.287925][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.292056][ T5716] ksys_write+0xe8/0x1b0 [ 473.301873][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.306512][ T5716] __x64_sys_write+0x42/0x50 [ 473.310697][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.315701][ T5716] x64_sys_call+0x287e/0x2dc0 [ 473.320292][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.325118][ T5716] do_syscall_64+0xc9/0x1c0 [ 473.330573][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.340959][ T5716] ? clear_bhb_loop+0x55/0xb0 [ 473.345219][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.349256][ T5716] ? clear_bhb_loop+0x55/0xb0 [ 473.353915][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.363705][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.370935][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.378324][ T5716] RIP: 0033:0x7f78b3205d29 [ 473.378350][ T5716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.384420][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.392715][ T5716] RSP: 002b:00007f78b1877038 EFLAGS: 00000246 [ 473.397414][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.407767][ T5716] ORIG_RAX: 0000000000000001 [ 473.407778][ T5716] RAX: ffffffffffffffda RBX: 00007f78b33f5fa0 RCX: 00007f78b3205d29 [ 473.407803][ T5716] RDX: 000000000000002d RSI: 0000000020001e40 RDI: 0000000000000006 [ 473.407825][ T5716] RBP: 00007f78b1877090 R08: 0000000000000000 R09: 0000000000000000 [ 473.407840][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.407855][ T5716] R13: 0000000000000000 R14: 00007f78b33f5fa0 R15: 00007ffcce5cff08 [ 473.407879][ T5716] [ 473.565157][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.575755][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.585675][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.587486][ T5729] x_tables: duplicate underflow at hook 1 [ 473.596100][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.596120][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.596140][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.596161][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.642647][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.652632][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.663162][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.673002][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.683471][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.693389][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.703825][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.713634][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.724253][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.736162][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.793293][ T5729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 473.905242][ T5740] FAULT_INJECTION: forcing a failure. [ 473.905242][ T5740] name failslab, interval 1, probability 0, space 0, times 0 [ 473.918002][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: syz.4.9130 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 473.928713][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 473.938806][ T5740] Call Trace: [ 473.942129][ T5740] [ 473.945072][ T5740] dump_stack_lvl+0xf2/0x150 [ 473.949721][ T5740] dump_stack+0x15/0x1a [ 473.953926][ T5740] should_fail_ex+0x223/0x230 [ 473.958623][ T5740] should_failslab+0x8f/0xb0 [ 473.963298][ T5740] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 473.969683][ T5740] ? key_alloc+0x2dd/0xa40 [ 473.974147][ T5740] kmemdup_noprof+0x2a/0x60 [ 473.978698][ T5740] key_alloc+0x2dd/0xa40 [ 473.982955][ T5740] request_key_and_link+0x424/0xcf0 [ 473.988243][ T5740] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 473.993697][ T5740] ? __pfx_keyring_search_iterator+0x10/0x10 [ 473.999717][ T5740] __se_sys_request_key+0x1d7/0x290 [ 474.004983][ T5740] ? fput+0x1c4/0x200 [ 474.008979][ T5740] __x64_sys_request_key+0x55/0x70 [ 474.014147][ T5740] x64_sys_call+0x296e/0x2dc0 [ 474.018835][ T5740] do_syscall_64+0xc9/0x1c0 [ 474.023396][ T5740] ? clear_bhb_loop+0x55/0xb0 [ 474.028079][ T5740] ? clear_bhb_loop+0x55/0xb0 [ 474.032781][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.038742][ T5740] RIP: 0033:0x7f08dcb15d29 [ 474.043238][ T5740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.062942][ T5740] RSP: 002b:00007f08db181038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 474.071436][ T5740] RAX: ffffffffffffffda RBX: 00007f08dcd05fa0 RCX: 00007f08dcb15d29 [ 474.079462][ T5740] RDX: 0000000020001080 RSI: 0000000020001040 RDI: 0000000020001000 [ 474.087440][ T5740] RBP: 00007f08db181090 R08: 0000000000000000 R09: 0000000000000000 [ 474.095456][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.103429][ T5740] R13: 0000000000000000 R14: 00007f08dcd05fa0 R15: 00007fff0bcea608 [ 474.111478][ T5740] [ 474.171651][ T5753] __nla_validate_parse: 2 callbacks suppressed [ 474.171667][ T5753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9180'. [ 474.214143][ T5753] loop0: detected capacity change from 0 to 2048 [ 474.221045][ T5753] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.235222][ T5753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.250205][ T5753] Process accounting resumed [ 474.255632][ T5753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9180: bg 0: block 234: padding at end of block bitmap is not set [ 474.273679][ T5753] EXT4-fs (loop0): Remounting filesystem read-only [ 474.293217][ T5753] syz.0.9180 (5753) used greatest stack depth: 9368 bytes left [ 474.313353][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.338585][ T5772] FAULT_INJECTION: forcing a failure. [ 474.338585][ T5772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.351818][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.0.9186 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 474.362564][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 474.372637][ T5772] Call Trace: [ 474.375934][ T5772] [ 474.378881][ T5772] dump_stack_lvl+0xf2/0x150 [ 474.383603][ T5772] dump_stack+0x15/0x1a [ 474.387835][ T5772] should_fail_ex+0x223/0x230 [ 474.392608][ T5772] should_fail+0xb/0x10 [ 474.396862][ T5772] should_fail_usercopy+0x1a/0x20 [ 474.401962][ T5772] _copy_from_user+0x1e/0xb0 [ 474.406591][ T5772] move_addr_to_kernel+0x82/0x120 [ 474.411732][ T5772] copy_msghdr_from_user+0x271/0x2a0 [ 474.417062][ T5772] __sys_sendmmsg+0x1e8/0x4b0 [ 474.421851][ T5772] __x64_sys_sendmmsg+0x57/0x70 [ 474.426757][ T5772] x64_sys_call+0x29aa/0x2dc0 [ 474.431452][ T5772] do_syscall_64+0xc9/0x1c0 [ 474.435996][ T5772] ? clear_bhb_loop+0x55/0xb0 [ 474.440683][ T5772] ? clear_bhb_loop+0x55/0xb0 [ 474.445484][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.451421][ T5772] RIP: 0033:0x7f1f1b1e5d29 [ 474.455844][ T5772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.475537][ T5772] RSP: 002b:00007f1f19857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.483978][ T5772] RAX: ffffffffffffffda RBX: 00007f1f1b3d5fa0 RCX: 00007f1f1b1e5d29 [ 474.491964][ T5772] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 474.499967][ T5772] RBP: 00007f1f19857090 R08: 0000000000000000 R09: 0000000000000000 [ 474.507944][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.515946][ T5772] R13: 0000000000000000 R14: 00007f1f1b3d5fa0 R15: 00007fff43289ed8 [ 474.524128][ T5772] [ 474.580860][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.591926][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.610605][ T5783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 474.767280][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.776579][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.081513][ T5802] netlink: 'syz.4.9195': attribute type 3 has an invalid length. [ 475.091443][ T5802] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 475.120897][ T5804] bond0: entered promiscuous mode [ 475.126140][ T5804] bond_slave_0: entered promiscuous mode [ 475.131983][ T5804] bond_slave_1: entered promiscuous mode [ 475.132186][ T5806] FAULT_INJECTION: forcing a failure. [ 475.132186][ T5806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.150856][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: syz.2.9197 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 475.161534][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 475.171592][ T5806] Call Trace: [ 475.174910][ T5806] [ 475.177837][ T5806] dump_stack_lvl+0xf2/0x150 [ 475.182462][ T5806] dump_stack+0x15/0x1a [ 475.186676][ T5806] should_fail_ex+0x223/0x230 [ 475.191358][ T5806] should_fail+0xb/0x10 [ 475.195519][ T5806] should_fail_usercopy+0x1a/0x20 [ 475.200577][ T5806] strncpy_from_user+0x25/0x210 [ 475.205494][ T5806] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 475.211268][ T5806] ? getname_flags+0x81/0x3b0 [ 475.215967][ T5806] getname_flags+0xb0/0x3b0 [ 475.220547][ T5806] user_path_at+0x26/0x120 [ 475.225041][ T5806] __se_sys_mount+0x248/0x2d0 [ 475.229772][ T5806] __x64_sys_mount+0x67/0x80 [ 475.234448][ T5806] x64_sys_call+0x2c84/0x2dc0 [ 475.239175][ T5806] do_syscall_64+0xc9/0x1c0 [ 475.243678][ T5806] ? clear_bhb_loop+0x55/0xb0 [ 475.248356][ T5806] ? clear_bhb_loop+0x55/0xb0 [ 475.253297][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.259327][ T5806] RIP: 0033:0x7f4a5f8e5d29 [ 475.263763][ T5806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.283423][ T5806] RSP: 002b:00007f4a5df57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 475.291905][ T5806] RAX: ffffffffffffffda RBX: 00007f4a5fad5fa0 RCX: 00007f4a5f8e5d29 [ 475.299917][ T5806] RDX: 0000000020000200 RSI: 0000000020000180 RDI: 0000000000000000 [ 475.307886][ T5806] RBP: 00007f4a5df57090 R08: 0000000020000640 R09: 0000000000000000 [ 475.315947][ T5806] R10: 0000000000000404 R11: 0000000000000246 R12: 0000000000000001 [ 475.323918][ T5806] R13: 0000000000000000 R14: 00007f4a5fad5fa0 R15: 00007fff732a8328 [ 475.331900][ T5806] [ 475.511720][ T5820] lo speed is unknown, defaulting to 1000 [ 475.620255][ T5823] lo speed is unknown, defaulting to 1000 [ 476.296514][ T5835] pimreg: entered allmulticast mode [ 476.316092][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9206'. [ 476.339964][ T5835] pimreg: left allmulticast mode [ 476.371172][ T5831] lo speed is unknown, defaulting to 1000 [ 476.380098][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9206'. [ 476.400553][ T5844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9208'. [ 476.824275][ T5886] lo speed is unknown, defaulting to 1000 [ 476.975710][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 476.975728][ T29] audit: type=1400 audit(476.963:40810): avc: denied { ioctl } for pid=5890 comm="syz.3.9219" path="socket:[102196]" dev="sockfs" ino=102196 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.109680][ T5891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60673 sclass=netlink_route_socket pid=5891 comm=syz.3.9219 [ 477.319473][ T29] audit: type=1326 audit(477.303:40811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.365301][ T29] audit: type=1326 audit(477.333:40812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.388410][ T29] audit: type=1326 audit(477.333:40813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.411499][ T29] audit: type=1326 audit(477.333:40814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.434548][ T29] audit: type=1326 audit(477.333:40815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.457600][ T29] audit: type=1326 audit(477.333:40816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.480748][ T29] audit: type=1326 audit(477.333:40817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.503722][ T29] audit: type=1326 audit(477.333:40818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.526780][ T29] audit: type=1326 audit(477.333:40819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5904 comm="syz.6.9225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 477.706646][ T5913] netlink: 'syz.6.9229': attribute type 4 has an invalid length. [ 477.731697][ T5907] syz.4.9226[5907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.731761][ T5907] syz.4.9226[5907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.758379][ T5907] syz.4.9226[5907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.769940][ T5919] netlink: 'syz.6.9232': attribute type 4 has an invalid length. [ 477.818462][ T5922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9231'. [ 477.827594][ T5922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9231'. [ 477.830155][ T5920] lo speed is unknown, defaulting to 1000 [ 477.911935][ T5925] bond0: entered promiscuous mode [ 477.917063][ T5925] bond_slave_0: entered promiscuous mode [ 477.923044][ T5925] bond_slave_1: entered promiscuous mode [ 477.956811][ T5929] loop0: detected capacity change from 0 to 1024 [ 478.013060][ T5929] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 478.067576][ T5929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.154145][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.255798][ T5947] atomic_op ffff88813288b128 conn xmit_atomic 0000000000000000 [ 478.276827][ T5947] loop0: detected capacity change from 0 to 512 [ 478.305683][ T5947] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.9239: corrupted in-inode xattr: invalid ea_ino [ 478.340675][ T5947] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.9239: couldn't read orphan inode 15 (err -117) [ 478.389246][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.489538][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.533537][ T36] bridge_slave_1: left allmulticast mode [ 478.539241][ T36] bridge_slave_1: left promiscuous mode [ 478.545001][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.557831][ T36] bridge_slave_0: left allmulticast mode [ 478.563639][ T36] bridge_slave_0: left promiscuous mode [ 478.569387][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.685386][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.694282][ T36] bond_slave_0: left promiscuous mode [ 478.706953][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.719028][ T36] bond_slave_1: left promiscuous mode [ 478.730595][ T36] bond0 (unregistering): Released all slaves [ 478.743831][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9245'. [ 478.781051][ T5965] vlan2: entered allmulticast mode [ 478.855770][ T36] hsr_slave_0: left promiscuous mode [ 478.862048][ T36] hsr_slave_1: left promiscuous mode [ 478.872315][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.879834][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.898538][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.906062][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.925110][ T36] veth1_macvtap: left promiscuous mode [ 478.930617][ T36] veth0_macvtap: left promiscuous mode [ 479.035673][ T5990] atomic_op ffff88812e9a5128 conn xmit_atomic 0000000000000000 [ 479.102663][ T5995] loop0: detected capacity change from 0 to 1024 [ 479.104947][ T36] team0 (unregistering): Port device team_slave_1 removed [ 479.123964][ T5995] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 479.138677][ T36] team0 (unregistering): Port device team_slave_0 removed [ 479.147857][ T5995] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 479.159141][ T5995] EXT4-fs (loop0): orphan cleanup on readonly fs [ 479.171649][ T5995] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 479.186508][ T5998] netlink: 'syz.6.9255': attribute type 10 has an invalid length. [ 479.226957][ T5995] EXT4-fs (loop0): Remounting filesystem read-only [ 479.235765][ T5995] EXT4-fs (loop0): 1 orphan inode deleted [ 479.255632][ T5995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 479.265597][ T5998] team0: Device hsr_slave_0 failed to register rx_handler [ 479.276103][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.283186][ T5995] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 479.292132][ T5995] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.300488][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.346690][ T5991] lo speed is unknown, defaulting to 1000 [ 479.367526][ T5953] lo speed is unknown, defaulting to 1000 [ 479.636185][ T6016] FAULT_INJECTION: forcing a failure. [ 479.636185][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 479.649306][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.9260 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 479.657015][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 479.660180][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.660195][ T6016] Call Trace: [ 479.660201][ T6016] [ 479.660208][ T6016] dump_stack_lvl+0xf2/0x150 [ 479.660290][ T6016] dump_stack+0x15/0x1a [ 479.692105][ T6016] should_fail_ex+0x223/0x230 [ 479.697327][ T6016] should_failslab+0x8f/0xb0 [ 479.701992][ T6016] kmem_cache_alloc_node_noprof+0x59/0x320 [ 479.707936][ T6016] ? __alloc_skb+0x10b/0x310 [ 479.712531][ T6016] __alloc_skb+0x10b/0x310 [ 479.716951][ T6016] ? audit_log_start+0x34c/0x6b0 [ 479.721908][ T6016] audit_log_start+0x368/0x6b0 [ 479.726735][ T6016] ? locked_inode_to_wb_and_lock_list+0x14e/0x1e0 [ 479.733425][ T6016] ? _raw_spin_unlock+0x26/0x50 [ 479.738349][ T6016] audit_seccomp+0x4b/0x130 [ 479.742883][ T6016] __seccomp_filter+0x6fa/0x1180 [ 479.747841][ T6016] ? up_write+0x30/0xf0 [ 479.752092][ T6016] ? chown_common+0x39c/0x3f0 [ 479.756867][ T6016] __secure_computing+0x9f/0x1c0 [ 479.761820][ T6016] syscall_trace_enter+0xd1/0x1f0 [ 479.766899][ T6016] ? fpregs_assert_state_consistent+0x83/0xa0 [ 479.772980][ T6016] do_syscall_64+0xaa/0x1c0 [ 479.777541][ T6016] ? clear_bhb_loop+0x55/0xb0 [ 479.782226][ T6016] ? clear_bhb_loop+0x55/0xb0 [ 479.786910][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.792839][ T6016] RIP: 0033:0x7f1f1b1e473c [ 479.797256][ T6016] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 479.816935][ T6016] RSP: 002b:00007f1f19857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.825395][ T6016] RAX: ffffffffffffffda RBX: 00007f1f1b3d5fa0 RCX: 00007f1f1b1e473c [ 479.833403][ T6016] RDX: 000000000000000f RSI: 00007f1f198570a0 RDI: 0000000000000005 [ 479.841443][ T6016] RBP: 00007f1f19857090 R08: 0000000000000000 R09: 0000000000000000 [ 479.849511][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.857593][ T6016] R13: 0000000000000000 R14: 00007f1f1b3d5fa0 R15: 00007fff43289ed8 [ 479.865599][ T6016] [ 479.916703][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.923877][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.933429][ T6021] FAULT_INJECTION: forcing a failure. [ 479.933429][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 479.946430][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.0.9261 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 479.950599][ T5953] bridge_slave_0: entered allmulticast mode [ 479.957113][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 479.957131][ T6021] Call Trace: [ 479.957139][ T6021] [ 479.957149][ T6021] dump_stack_lvl+0xf2/0x150 [ 479.957257][ T6021] dump_stack+0x15/0x1a [ 479.957291][ T6021] should_fail_ex+0x223/0x230 [ 479.957346][ T6021] should_failslab+0x8f/0xb0 [ 479.965430][ T5953] bridge_slave_0: entered promiscuous mode [ 479.973263][ T6021] kmem_cache_alloc_node_noprof+0x59/0x320 [ 480.009334][ T6021] ? __alloc_skb+0x10b/0x310 [ 480.009362][ T6021] __alloc_skb+0x10b/0x310 [ 480.009382][ T6021] ? audit_log_start+0x34c/0x6b0 [ 480.009490][ T6021] audit_log_start+0x368/0x6b0 [ 480.009516][ T6021] ? kmem_cache_free+0xdc/0x2d0 [ 480.009545][ T6021] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 480.009637][ T6021] audit_seccomp+0x4b/0x130 [ 480.009661][ T6021] __seccomp_filter+0x6fa/0x1180 [ 480.009726][ T6021] __secure_computing+0x9f/0x1c0 [ 480.009765][ T6021] syscall_trace_enter+0xd1/0x1f0 [ 480.009851][ T6021] ? fpregs_assert_state_consistent+0x83/0xa0 [ 480.009946][ T6021] do_syscall_64+0xaa/0x1c0 [ 480.010003][ T6021] ? clear_bhb_loop+0x55/0xb0 [ 480.010025][ T6021] ? clear_bhb_loop+0x55/0xb0 [ 480.010101][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.010145][ T6021] RIP: 0033:0x7f1f1b1e473c [ 480.010160][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.010163][ T6021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 480.010242][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.010254][ T6021] RSP: 002b:00007f1f19857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.010278][ T6021] RAX: ffffffffffffffda RBX: 00007f1f1b3d5fa0 RCX: 00007f1f1b1e473c [ 480.010295][ T6021] RDX: 000000000000000f RSI: 00007f1f198570a0 RDI: 0000000000000004 [ 480.010310][ T6021] RBP: 00007f1f19857090 R08: 0000000000000000 R09: 0000000000000000 [ 480.010325][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.010338][ T5953] bridge_slave_1: entered allmulticast mode [ 480.010340][ T6021] R13: 0000000000000000 R14: 00007f1f1b3d5fa0 R15: 00007fff43289ed8 [ 480.010363][ T6021] [ 480.024783][ T5953] bridge_slave_1: entered promiscuous mode [ 480.085211][ T6028] netlink: 'syz.6.9262': attribute type 2 has an invalid length. [ 480.105680][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.139118][ T6026] syz.3.9263: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 480.241877][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.3.9263 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 480.241904][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 480.241917][ T6026] Call Trace: [ 480.241923][ T6026] [ 480.241931][ T6026] dump_stack_lvl+0xf2/0x150 [ 480.242051][ T6026] dump_stack+0x15/0x1a [ 480.242137][ T6026] warn_alloc+0x145/0x1b0 [ 480.242171][ T6026] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 480.242220][ T6026] ? common_lsm_audit+0x920/0x1010 [ 480.242245][ T6026] __vmalloc_node_range_noprof+0xaa/0xe80 [ 480.242357][ T6026] ? avc_denied+0xf1/0x110 [ 480.242387][ T6026] ? slow_avc_audit+0xf9/0x140 [ 480.242490][ T6026] ? should_fail_ex+0x31/0x230 [ 480.242514][ T6026] ? xskq_create+0x36/0xd0 [ 480.242533][ T6026] ? should_failslab+0x8f/0xb0 [ 480.242565][ T6026] vmalloc_user_noprof+0x59/0x70 [ 480.242669][ T6026] ? xskq_create+0x79/0xd0 [ 480.242688][ T6026] xskq_create+0x79/0xd0 [ 480.242713][ T6026] xsk_init_queue+0x82/0xd0 [ 480.242774][ T6026] xsk_setsockopt+0x388/0x520 [ 480.242848][ T6026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 480.242891][ T6026] __sys_setsockopt+0x187/0x200 [ 480.242920][ T6026] __x64_sys_setsockopt+0x66/0x80 [ 480.242944][ T6026] x64_sys_call+0x282e/0x2dc0 [ 480.243033][ T6026] do_syscall_64+0xc9/0x1c0 [ 480.243053][ T6026] ? clear_bhb_loop+0x55/0xb0 [ 480.243077][ T6026] ? clear_bhb_loop+0x55/0xb0 [ 480.243102][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.243133][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.243209][ T6026] RIP: 0033:0x7f6ed3fe5d29 [ 480.243305][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.243324][ T6026] RSP: 002b:00007f6ed2657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 480.243344][ T6026] RAX: ffffffffffffffda RBX: 00007f6ed41d5fa0 RCX: 00007f6ed3fe5d29 [ 480.243358][ T6026] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 480.243384][ T6026] RBP: 00007f6ed4061aa8 R08: 0000000000000004 R09: 0000000000000000 [ 480.243399][ T6026] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.243413][ T6026] R13: 0000000000000000 R14: 00007f6ed41d5fa0 R15: 00007fff774e1a28 [ 480.243434][ T6026] [ 480.243443][ T6026] Mem-Info: [ 480.243451][ T6026] active_anon:7989 inactive_anon:202 isolated_anon:0 [ 480.243451][ T6026] active_file:13995 inactive_file:13615 isolated_file:0 [ 480.243451][ T6026] unevictable:0 dirty:302 writeback:0 [ 480.243451][ T6026] slab_reclaimable:2723 slab_unreclaimable:41076 [ 480.243451][ T6026] mapped:34792 shmem:312 pagetables:1284 [ 480.243451][ T6026] sec_pagetables:0 bounce:0 [ 480.243451][ T6026] kernel_misc_reclaimable:0 [ 480.243451][ T6026] free:1829420 free_pcp:2002 free_cma:0 [ 480.243572][ T6026] Node 0 active_anon:31956kB inactive_anon:808kB active_file:55980kB inactive_file:54460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139168kB dirty:1208kB writeback:0kB shmem:1248kB writeback_tmp:0kB kernel_stack:7296kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no [ 480.243667][ T6026] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.243734][ T6026] lowmem_reserve[]: 0 2866 7844 0 [ 480.243812][ T6026] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 480.243908][ T6026] lowmem_reserve[]: 0 0 4978 0 [ 480.243937][ T6026] Node 0 Normal free:4351936kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:31956kB inactive_anon:808kB active_file:55980kB inactive_file:54460kB unevictable:0kB writepending:1208kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:4468kB local_pcp:2300kB free_cma:0kB [ 480.244036][ T6026] lowmem_reserve[]: 0 0 0 0 [ 480.244068][ T6026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.244269][ T6026] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 480.244506][ T6026] Node 0 Normal: 1756*4kB (UME) 1148*8kB (ME) 823*16kB (UME) 326*32kB (UME) 285*64kB (UME) 126*128kB (UME) 120*256kB (UME) 121*512kB (UME) 75*1024kB (UME) 38*2048kB (UME) 984*4096kB (UM) = 4351936kB [ 480.244672][ T6026] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 480.244689][ T6026] 28123 total pagecache pages [ 480.244696][ T6026] 202 pages in swap cache [ 480.244703][ T6026] Free swap = 123824kB [ 480.244710][ T6026] Total swap = 124996kB [ 480.244719][ T6026] 2097051 pages RAM [ 480.244727][ T6026] 0 pages HighMem/MovableOnly [ 480.244735][ T6026] 80180 pages reserved [ 480.391037][ T5953] team0: Port device team_slave_0 added [ 480.584190][ T6045] loop0: detected capacity change from 0 to 1024 [ 480.708258][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9269'. [ 480.784206][ T6045] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 480.787334][ T6048] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9269'. [ 480.800630][ T6045] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 480.818880][ T6048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9269'. [ 480.831639][ T6045] EXT4-fs (loop0): orphan cleanup on readonly fs [ 480.861022][ T6045] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 480.868751][ T6044] lo speed is unknown, defaulting to 1000 [ 480.875591][ T6045] EXT4-fs (loop0): Remounting filesystem read-only [ 480.877323][ T5953] team0: Port device team_slave_1 added [ 480.883061][ T6045] EXT4-fs (loop0): 1 orphan inode deleted [ 480.898868][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 480.912682][ T6045] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 480.919544][ T6045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.947672][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.954814][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.980884][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.997151][ T6057] netlink: 'syz.6.9272': attribute type 10 has an invalid length. [ 481.013212][ T6057] team0: Device hsr_slave_0 failed to register rx_handler [ 481.046293][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.053450][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.079936][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.109462][ T6047] vlan2: entered promiscuous mode [ 481.117103][ T6063] 9pnet_fd: Insufficient options for proto=fd [ 481.119193][ T6047] bond0: entered promiscuous mode [ 481.128268][ T6047] bond_slave_0: entered promiscuous mode [ 481.134068][ T6047] bond_slave_1: entered promiscuous mode [ 481.151089][ T6047] bond0: left promiscuous mode [ 481.155944][ T6047] bond_slave_0: left promiscuous mode [ 481.161692][ T6047] bond_slave_1: left promiscuous mode [ 481.190748][ T5953] hsr_slave_0: entered promiscuous mode [ 481.197038][ T5953] hsr_slave_1: entered promiscuous mode [ 481.205076][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.213056][ T5953] Cannot create hsr debugfs directory [ 481.220810][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9275'. [ 481.236576][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.244129][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.256178][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.263713][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.346800][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.371476][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.391220][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.398317][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.416549][ T5953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.426966][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.444162][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.451260][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.500209][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.513953][T12556] bridge_slave_1: left allmulticast mode [ 481.519650][T12556] bridge_slave_1: left promiscuous mode [ 481.525482][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.541848][T12556] bridge_slave_0: left allmulticast mode [ 481.547534][T12556] bridge_slave_0: left promiscuous mode [ 481.553392][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.652522][T12556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.662969][T12556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.672790][T12556] bond0 (unregistering): Released all slaves [ 481.849262][T12556] hsr_slave_0: left promiscuous mode [ 481.856832][T12556] hsr_slave_1: left promiscuous mode [ 481.863100][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.870743][T12556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.879163][T12556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.886760][T12556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.897221][T12556] veth1_macvtap: left promiscuous mode [ 481.902766][T12556] veth0_macvtap: left promiscuous mode [ 481.908381][T12556] veth1_vlan: left promiscuous mode [ 481.913708][T12556] veth0_vlan: left promiscuous mode [ 481.982477][T12556] team0 (unregistering): Port device team_slave_1 removed [ 481.992898][T12556] team0 (unregistering): Port device team_slave_0 removed [ 482.037180][ T5953] veth0_vlan: entered promiscuous mode [ 482.054225][ T6081] lo speed is unknown, defaulting to 1000 [ 482.056169][ T5953] veth1_vlan: entered promiscuous mode [ 482.090550][ T5953] veth0_macvtap: entered promiscuous mode [ 482.113701][ T5953] veth1_macvtap: entered promiscuous mode [ 482.126350][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.136900][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.146837][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.157313][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.167192][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.177715][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.187573][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.198089][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.207983][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.218471][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.228412][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.238902][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.248734][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.259205][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.269035][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.279875][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.308300][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.342211][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.352724][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.362641][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.373132][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.382990][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.393661][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.403526][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.414066][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.424024][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.434568][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.444605][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.455066][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.465165][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.475620][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.487250][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.506528][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 482.506552][ T29] audit: type=1400 audit(482.495:41483): avc: denied { create } for pid=6121 comm="syz.0.9289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 482.532031][ T29] audit: type=1400 audit(482.495:41484): avc: denied { connect } for pid=6121 comm="syz.0.9289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 482.559160][ T6123] bond0: entered promiscuous mode [ 482.561930][ T29] audit: type=1400 audit(482.545:41485): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/root/syzkaller.9wa2hc/syz-tmp" dev="sda1" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 482.564270][ T6123] bond_slave_0: entered promiscuous mode [ 482.588043][ T29] audit: type=1400 audit(482.545:41486): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 482.593879][ T6123] bond_slave_1: entered promiscuous mode [ 482.615311][ T29] audit: type=1400 audit(482.545:41487): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 482.642485][ T29] audit: type=1400 audit(482.555:41488): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/root/syzkaller.9wa2hc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 482.668838][ T29] audit: type=1400 audit(482.555:41489): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/root/syzkaller.9wa2hc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=102818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 482.696173][ T29] audit: type=1400 audit(482.555:41490): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 482.717053][ T29] audit: type=1400 audit(482.705:41491): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 482.739608][ T29] audit: type=1400 audit(482.705:41492): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="gadgetfs" ino=3837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.848073][ T6136] netlink: 'syz.4.9290': attribute type 10 has an invalid length. [ 482.873433][ T6136] team0: Device hsr_slave_0 failed to register rx_handler [ 482.893789][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 482.914638][ T6141] atomic_op ffff8881236eed28 conn xmit_atomic 0000000000000000 [ 482.936085][ T6137] lo speed is unknown, defaulting to 1000 [ 482.947081][ T6143] loop0: detected capacity change from 0 to 1024 [ 482.966625][ T6143] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 482.985389][ T6147] bond0: entered promiscuous mode [ 482.990514][ T6147] bond_slave_0: entered promiscuous mode [ 482.990578][ T6143] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 482.996667][ T6147] bond_slave_1: entered promiscuous mode [ 483.032893][ T6143] EXT4-fs (loop0): orphan cleanup on readonly fs [ 483.055913][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.062687][ T6143] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 483.063114][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.076468][ T6143] EXT4-fs (loop0): Remounting filesystem read-only [ 483.086270][ T6143] EXT4-fs (loop0): 1 orphan inode deleted [ 483.092426][ T6081] bridge_slave_0: entered allmulticast mode [ 483.098835][ T6143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 483.101098][ T6081] bridge_slave_0: entered promiscuous mode [ 483.115549][ T6143] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 483.123990][ T6143] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.128598][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.140148][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.149693][ T6081] bridge_slave_1: entered allmulticast mode [ 483.158138][ T6081] bridge_slave_1: entered promiscuous mode [ 483.242063][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.274465][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.339776][ T6081] team0: Port device team_slave_0 added [ 483.356900][ T6081] team0: Port device team_slave_1 added [ 483.414665][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.421663][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.447612][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.489348][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.496324][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.522252][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.568684][ T6081] hsr_slave_0: entered promiscuous mode [ 483.579829][ T6081] hsr_slave_1: entered promiscuous mode [ 483.588961][ T6081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.596994][ T6081] Cannot create hsr debugfs directory [ 483.747427][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9304'. [ 483.767274][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9305'. [ 483.791397][ T6177] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 483.843509][ T6183] FAULT_INJECTION: forcing a failure. [ 483.843509][ T6183] name failslab, interval 1, probability 0, space 0, times 0 [ 483.856239][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.4.9307 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 483.866933][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 483.877053][ T6183] Call Trace: [ 483.880345][ T6183] [ 483.883356][ T6183] dump_stack_lvl+0xf2/0x150 [ 483.887977][ T6183] dump_stack+0x15/0x1a [ 483.892172][ T6183] should_fail_ex+0x223/0x230 [ 483.896928][ T6183] should_failslab+0x8f/0xb0 [ 483.901552][ T6183] kmem_cache_alloc_node_noprof+0x59/0x320 [ 483.907462][ T6183] ? __alloc_skb+0x10b/0x310 [ 483.912073][ T6183] __alloc_skb+0x10b/0x310 [ 483.916569][ T6183] netlink_alloc_large_skb+0xad/0xe0 [ 483.919818][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.921874][ T6183] netlink_sendmsg+0x3b4/0x6e0 [ 483.933285][ T6183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.938715][ T6183] __sock_sendmsg+0x140/0x180 [ 483.943473][ T6183] ____sys_sendmsg+0x312/0x410 [ 483.948307][ T6183] __sys_sendmsg+0x19d/0x230 [ 483.952935][ T6183] __x64_sys_sendmsg+0x46/0x50 [ 483.955762][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.957708][ T6183] x64_sys_call+0x2734/0x2dc0 [ 483.969054][ T6183] do_syscall_64+0xc9/0x1c0 [ 483.973579][ T6183] ? clear_bhb_loop+0x55/0xb0 [ 483.978283][ T6183] ? clear_bhb_loop+0x55/0xb0 [ 483.983001][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.984356][T24732] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.988966][ T6183] RIP: 0033:0x7f08dcb15d29 [ 483.988988][ T6183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.996030][T24732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.000398][ T6183] RSP: 002b:00007f08db181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.000442][ T6183] RAX: ffffffffffffffda RBX: 00007f08dcd05fa0 RCX: 00007f08dcb15d29 [ 484.043667][ T6183] RDX: 0000000020050800 RSI: 00000000200000c0 RDI: 0000000000000006 [ 484.051677][ T6183] RBP: 00007f08db181090 R08: 0000000000000000 R09: 0000000000000000 [ 484.059671][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.067601][ T6081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.067636][ T6183] R13: 0000000000000000 R14: 00007f08dcd05fa0 R15: 00007fff0bcea608 [ 484.078084][ T6081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.085926][ T6183] [ 484.111873][T24732] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.119021][T24732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.148785][ T6177] netlink: 'syz.0.9304': attribute type 298 has an invalid length. [ 484.235200][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.441133][ T6211] loop0: detected capacity change from 0 to 512 [ 484.469260][ T6081] veth0_vlan: entered promiscuous mode [ 484.476219][ T6211] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.9312: corrupted in-inode xattr: bad e_name length [ 484.500757][ T6081] veth1_vlan: entered promiscuous mode [ 484.502794][ T6211] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.9312: couldn't read orphan inode 15 (err -117) [ 484.515525][ T6081] veth0_macvtap: entered promiscuous mode [ 484.530227][ T6081] veth1_macvtap: entered promiscuous mode [ 484.540692][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.551239][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.561103][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.571576][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.581425][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.591874][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.601812][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.612335][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.622173][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.632639][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.642476][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.653005][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.659795][ T6211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.662827][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.685697][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.695601][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.706159][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.715981][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.726448][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.737047][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.737094][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.745517][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.763771][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.773592][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.784113][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.793122][ T6225] tmpfs: Unknown parameter 'nr_XÐÌYæÒ' [ 484.793940][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.809983][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.819830][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.830283][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.840554][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.851347][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.861198][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.871643][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.881477][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.892015][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.902056][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.912529][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.923231][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.934322][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9315'. [ 484.943388][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9315'. [ 484.987787][ T6227] loop0: detected capacity change from 0 to 512 [ 485.037354][ T6236] FAULT_INJECTION: forcing a failure. [ 485.037354][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 485.050170][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.8.9280 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 485.060936][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 485.071016][ T6236] Call Trace: [ 485.074309][ T6236] [ 485.077252][ T6236] dump_stack_lvl+0xf2/0x150 [ 485.081897][ T6236] dump_stack+0x15/0x1a [ 485.086122][ T6236] should_fail_ex+0x223/0x230 [ 485.090894][ T6236] should_failslab+0x8f/0xb0 [ 485.095606][ T6236] kmem_cache_alloc_noprof+0x52/0x320 [ 485.101008][ T6236] ? audit_log_start+0x34c/0x6b0 [ 485.106022][ T6236] audit_log_start+0x34c/0x6b0 [ 485.110854][ T6236] audit_seccomp+0x4b/0x130 [ 485.115383][ T6236] __seccomp_filter+0x6fa/0x1180 [ 485.120447][ T6236] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 485.126108][ T6236] ? vfs_write+0x596/0x920 [ 485.130605][ T6236] ? __schedule+0x6fa/0x930 [ 485.135143][ T6236] __secure_computing+0x9f/0x1c0 [ 485.140195][ T6236] syscall_trace_enter+0xd1/0x1f0 [ 485.145277][ T6236] do_syscall_64+0xaa/0x1c0 [ 485.149807][ T6236] ? clear_bhb_loop+0x55/0xb0 [ 485.154547][ T6236] ? clear_bhb_loop+0x55/0xb0 [ 485.159324][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.165261][ T6236] RIP: 0033:0x7f0621a35d29 [ 485.169713][ T6236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.178236][ T3373] IPVS: starting estimator thread 0... [ 485.189325][ T6236] RSP: 002b:00007f06200a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 485.189353][ T6236] RAX: ffffffffffffffda RBX: 00007f0621c25fa0 RCX: 00007f0621a35d29 [ 485.189370][ T6236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 485.219201][ T6236] RBP: 00007f06200a1090 R08: 0000000000000000 R09: 0000000000000000 [ 485.227178][ T6236] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 485.235153][ T6236] R13: 0000000000000000 R14: 00007f0621c25fa0 R15: 00007ffc93642678 [ 485.243194][ T6236] [ 485.318391][ T6242] IPVS: using max 2256 ests per chain, 112800 per kthread [ 485.365657][ T6250] lo speed is unknown, defaulting to 1000 [ 485.387604][ T6252] FAULT_INJECTION: forcing a failure. [ 485.387604][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 485.400406][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.6.9324 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 485.411150][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 485.421221][ T6252] Call Trace: [ 485.424513][ T6252] [ 485.427505][ T6252] dump_stack_lvl+0xf2/0x150 [ 485.432215][ T6252] dump_stack+0x15/0x1a [ 485.436448][ T6252] should_fail_ex+0x223/0x230 [ 485.441148][ T6252] should_failslab+0x8f/0xb0 [ 485.445840][ T6252] kmem_cache_alloc_node_noprof+0x59/0x320 [ 485.451689][ T6252] ? __alloc_skb+0x10b/0x310 [ 485.456292][ T6252] __alloc_skb+0x10b/0x310 [ 485.460756][ T6252] netlink_alloc_large_skb+0xad/0xe0 [ 485.466094][ T6252] netlink_sendmsg+0x3b4/0x6e0 [ 485.470931][ T6252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.476328][ T6252] __sock_sendmsg+0x140/0x180 [ 485.481105][ T6252] ____sys_sendmsg+0x312/0x410 [ 485.485896][ T6252] __sys_sendmsg+0x19d/0x230 [ 485.490603][ T6252] __x64_sys_sendmsg+0x46/0x50 [ 485.495389][ T6252] x64_sys_call+0x2734/0x2dc0 [ 485.500094][ T6252] do_syscall_64+0xc9/0x1c0 [ 485.504609][ T6252] ? clear_bhb_loop+0x55/0xb0 [ 485.509315][ T6252] ? clear_bhb_loop+0x55/0xb0 [ 485.514017][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.519999][ T6252] RIP: 0033:0x7f78b3205d29 [ 485.524434][ T6252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.544149][ T6252] RSP: 002b:00007f78b1877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.552649][ T6252] RAX: ffffffffffffffda RBX: 00007f78b33f5fa0 RCX: 00007f78b3205d29 [ 485.560634][ T6252] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000006 [ 485.568621][ T6252] RBP: 00007f78b1877090 R08: 0000000000000000 R09: 0000000000000000 [ 485.576615][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.584671][ T6252] R13: 0000000000000000 R14: 00007f78b33f5fa0 R15: 00007ffcce5cff08 [ 485.592667][ T6252] [ 485.732718][ T6257] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9326'. [ 485.836653][ T6266] tmpfs: Bad value for 'mpol' [ 485.912689][ T6270] FAULT_INJECTION: forcing a failure. [ 485.912689][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.925826][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz.6.9331 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 485.936621][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 485.946767][ T6270] Call Trace: [ 485.950064][ T6270] [ 485.953010][ T6270] dump_stack_lvl+0xf2/0x150 [ 485.957722][ T6270] dump_stack+0x15/0x1a [ 485.961978][ T6270] should_fail_ex+0x223/0x230 [ 485.966729][ T6270] should_fail+0xb/0x10 [ 485.970915][ T6270] should_fail_usercopy+0x1a/0x20 [ 485.975977][ T6270] _copy_from_user+0x1e/0xb0 [ 485.980656][ T6270] kstrtouint_from_user+0x76/0xe0 [ 485.985695][ T6270] ? 0xffffffff81000000 [ 485.990008][ T6270] ? selinux_file_permission+0x22a/0x360 [ 485.995671][ T6270] proc_fail_nth_write+0x4f/0x150 [ 486.000792][ T6270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.006492][ T6270] vfs_write+0x281/0x920 [ 486.010785][ T6270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.016355][ T6270] ? __fget_files+0x17c/0x1c0 [ 486.021079][ T6270] ksys_write+0xe8/0x1b0 [ 486.025439][ T6270] __x64_sys_write+0x42/0x50 [ 486.030040][ T6270] x64_sys_call+0x287e/0x2dc0 [ 486.034724][ T6270] do_syscall_64+0xc9/0x1c0 [ 486.039282][ T6270] ? clear_bhb_loop+0x55/0xb0 [ 486.043964][ T6270] ? clear_bhb_loop+0x55/0xb0 [ 486.048645][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.054710][ T6270] RIP: 0033:0x7f78b32047df [ 486.059128][ T6270] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 486.078824][ T6270] RSP: 002b:00007f78b1877030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 486.087243][ T6270] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78b32047df [ 486.095262][ T6270] RDX: 0000000000000001 RSI: 00007f78b18770a0 RDI: 0000000000000006 [ 486.103237][ T6270] RBP: 00007f78b1877090 R08: 0000000000000000 R09: 0000000000000000 [ 486.111317][ T6270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 486.119294][ T6270] R13: 0000000000000000 R14: 00007f78b33f5fa0 R15: 00007ffcce5cff08 [ 486.127385][ T6270] [ 486.146332][ T6278] FAULT_INJECTION: forcing a failure. [ 486.146332][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 486.159042][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.7.9335 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 486.165610][ T6277] tmpfs: Bad value for 'mpol' [ 486.169857][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 486.169875][ T6278] Call Trace: [ 486.169883][ T6278] [ 486.169894][ T6278] dump_stack_lvl+0xf2/0x150 [ 486.195465][ T6278] dump_stack+0x15/0x1a [ 486.199658][ T6278] should_fail_ex+0x223/0x230 [ 486.204347][ T6278] ? __se_sys_fsopen+0xfe/0x1c0 [ 486.209272][ T6278] should_failslab+0x8f/0xb0 [ 486.213874][ T6278] __kmalloc_cache_noprof+0x4e/0x320 [ 486.219213][ T6278] __se_sys_fsopen+0xfe/0x1c0 [ 486.223931][ T6278] __x64_sys_fsopen+0x31/0x40 [ 486.228625][ T6278] x64_sys_call+0x358/0x2dc0 [ 486.233278][ T6278] do_syscall_64+0xc9/0x1c0 [ 486.237862][ T6278] ? clear_bhb_loop+0x55/0xb0 [ 486.242600][ T6278] ? clear_bhb_loop+0x55/0xb0 [ 486.247271][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.253170][ T6278] RIP: 0033:0x7f9e47575d29 [ 486.257589][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.277220][ T6278] RSP: 002b:00007f9e45be7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 486.285649][ T6278] RAX: ffffffffffffffda RBX: 00007f9e47765fa0 RCX: 00007f9e47575d29 [ 486.293704][ T6278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 486.301774][ T6278] RBP: 00007f9e45be7090 R08: 0000000000000000 R09: 0000000000000000 [ 486.309787][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.317774][ T6278] R13: 0000000000000000 R14: 00007f9e47765fa0 R15: 00007ffc23110d28 [ 486.325852][ T6278] [ 486.366091][ T6281] FAULT_INJECTION: forcing a failure. [ 486.366091][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.379245][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.6.9336 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 486.389961][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 486.400071][ T6281] Call Trace: [ 486.403415][ T6281] [ 486.406427][ T6281] dump_stack_lvl+0xf2/0x150 [ 486.411193][ T6281] dump_stack+0x15/0x1a [ 486.415371][ T6281] should_fail_ex+0x223/0x230 [ 486.420173][ T6281] should_fail+0xb/0x10 [ 486.424381][ T6281] should_fail_usercopy+0x1a/0x20 [ 486.429505][ T6281] _copy_from_iter+0xd5/0xd00 [ 486.434229][ T6281] ? kmalloc_reserve+0x16e/0x190 [ 486.439197][ T6281] ? __build_skb_around+0x196/0x1f0 [ 486.444427][ T6281] ? __alloc_skb+0x21f/0x310 [ 486.449099][ T6281] ? __virt_addr_valid+0x1ed/0x250 [ 486.454239][ T6281] ? __check_object_size+0x364/0x520 [ 486.459654][ T6281] netlink_sendmsg+0x460/0x6e0 [ 486.464459][ T6281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.469935][ T6281] __sock_sendmsg+0x140/0x180 [ 486.474637][ T6281] ____sys_sendmsg+0x312/0x410 [ 486.479524][ T6281] __sys_sendmsg+0x19d/0x230 [ 486.484163][ T6281] __x64_sys_sendmsg+0x46/0x50 [ 486.489006][ T6281] x64_sys_call+0x2734/0x2dc0 [ 486.493706][ T6281] do_syscall_64+0xc9/0x1c0 [ 486.498244][ T6281] ? clear_bhb_loop+0x55/0xb0 [ 486.502986][ T6281] ? clear_bhb_loop+0x55/0xb0 [ 486.507685][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.513634][ T6281] RIP: 0033:0x7f78b3205d29 [ 486.518062][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.537725][ T6281] RSP: 002b:00007f78b1877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.546161][ T6281] RAX: ffffffffffffffda RBX: 00007f78b33f5fa0 RCX: 00007f78b3205d29 [ 486.554241][ T6281] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 486.562243][ T6281] RBP: 00007f78b1877090 R08: 0000000000000000 R09: 0000000000000000 [ 486.570229][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.578214][ T6281] R13: 0000000000000000 R14: 00007f78b33f5fa0 R15: 00007ffcce5cff08 [ 486.586261][ T6281] [ 486.652565][ T6284] tmpfs: Bad value for 'nr_inodes' [ 486.968193][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9340'. [ 487.248327][ T6310] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 487.347740][ T6314] netlink: 268 bytes leftover after parsing attributes in process `syz.4.9349'. [ 487.445707][ T6319] FAULT_INJECTION: forcing a failure. [ 487.445707][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 487.458457][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: syz.4.9350 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 487.469181][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 487.479359][ T6319] Call Trace: [ 487.482654][ T6319] [ 487.485651][ T6319] dump_stack_lvl+0xf2/0x150 [ 487.490332][ T6319] dump_stack+0x15/0x1a [ 487.494608][ T6319] should_fail_ex+0x223/0x230 [ 487.499470][ T6319] ? tun_set_ebpf+0xdd/0x190 [ 487.504120][ T6319] should_failslab+0x8f/0xb0 [ 487.508759][ T6319] __kmalloc_cache_noprof+0x4e/0x320 [ 487.514124][ T6319] tun_set_ebpf+0xdd/0x190 [ 487.518570][ T6319] __tun_chr_ioctl+0xe5f/0x1860 [ 487.523464][ T6319] tun_chr_ioctl+0x27/0x30 [ 487.527952][ T6319] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 487.533089][ T6319] __se_sys_ioctl+0xc9/0x140 [ 487.537744][ T6319] __x64_sys_ioctl+0x43/0x50 [ 487.542388][ T6319] x64_sys_call+0x1690/0x2dc0 [ 487.547116][ T6319] do_syscall_64+0xc9/0x1c0 [ 487.551636][ T6319] ? clear_bhb_loop+0x55/0xb0 [ 487.556327][ T6319] ? clear_bhb_loop+0x55/0xb0 [ 487.561068][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.567039][ T6319] RIP: 0033:0x7f08dcb15d29 [ 487.571469][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.591101][ T6319] RSP: 002b:00007f08db181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.599634][ T6319] RAX: ffffffffffffffda RBX: 00007f08dcd05fa0 RCX: 00007f08dcb15d29 [ 487.607612][ T6319] RDX: 0000000020000200 RSI: 00000000800454e1 RDI: 0000000000000004 [ 487.615594][ T6319] RBP: 00007f08db181090 R08: 0000000000000000 R09: 0000000000000000 [ 487.623601][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.631585][ T6319] R13: 0000000000000000 R14: 00007f08dcd05fa0 R15: 00007fff0bcea608 [ 487.639591][ T6319] [ 487.672685][ T6321] netlink: 'syz.8.9352': attribute type 10 has an invalid length. [ 487.685656][ T6321] team0: Device hsr_slave_0 failed to register rx_handler [ 487.717424][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 487.717442][ T29] audit: type=1326 audit(487.708:41556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.0.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1b1e5d29 code=0x7ffc0000 [ 487.746498][ T29] audit: type=1326 audit(487.708:41557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.0.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1b1e5d29 code=0x7ffc0000 [ 487.769583][ T29] audit: type=1326 audit(487.708:41558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.0.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f1b1e5d29 code=0x7ffc0000 [ 487.792488][ T29] audit: type=1326 audit(487.708:41559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.0.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1b1e5d29 code=0x7ffc0000 [ 487.815522][ T29] audit: type=1326 audit(487.718:41560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.0.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1b1e5d29 code=0x7ffc0000 [ 487.914834][ T29] audit: type=1400 audit(487.908:41561): avc: denied { write } for pid=6341 comm="syz.0.9360" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 487.945758][ T29] audit: type=1404 audit(487.938:41562): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 487.960634][ T29] audit: type=1400 audit(487.938:41563): avc: denied { read write } for pid=5213 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 487.970107][ T6344] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9359'. [ 487.984492][ T29] audit: type=1400 audit(487.938:41564): avc: denied { bpf } for pid=6342 comm="syz.6.9359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 487.993449][ T6344] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9359'. [ 488.018790][ T6346] ip6gre1: entered promiscuous mode [ 488.022599][ T29] audit: type=1400 audit(487.938:41565): avc: denied { prog_run } for pid=6342 comm="syz.6.9359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.027779][ T6346] ip6gre1: entered allmulticast mode [ 488.115735][ T6355] netlink: 'syz.6.9363': attribute type 4 has an invalid length. [ 488.126715][ T6355] netlink: 'syz.6.9363': attribute type 4 has an invalid length. [ 488.193775][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9371'. [ 488.258747][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9370'. [ 488.267923][ T6373] netlink: 108 bytes leftover after parsing attributes in process `syz.8.9370'. [ 488.284478][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9370'. [ 488.299882][ T6380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9373'. [ 488.318998][ T6380] loop0: detected capacity change from 0 to 1024 [ 488.330036][ T6380] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 488.360072][ T6380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.387199][ T6389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.429668][ T6391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.461312][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.470834][ T6399] netlink: 'syz.4.9381': attribute type 10 has an invalid length. [ 488.479200][ T6399] team0: Device hsr_slave_0 failed to register rx_handler [ 488.592222][ T6411] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 488.661371][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.694099][ T6418] netlink: 'syz.4.9387': attribute type 5 has an invalid length. [ 488.773613][ T6428] FAULT_INJECTION: forcing a failure. [ 488.773613][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 488.786409][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.8.9393 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 488.797106][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 488.807182][ T6428] Call Trace: [ 488.810468][ T6428] [ 488.813402][ T6428] dump_stack_lvl+0xf2/0x150 [ 488.818100][ T6428] dump_stack+0x15/0x1a [ 488.822277][ T6428] should_fail_ex+0x223/0x230 [ 488.826968][ T6428] should_failslab+0x8f/0xb0 [ 488.831576][ T6428] kmem_cache_alloc_noprof+0x52/0x320 [ 488.836950][ T6428] ? audit_log_start+0x34c/0x6b0 [ 488.841951][ T6428] audit_log_start+0x34c/0x6b0 [ 488.846859][ T6428] audit_seccomp+0x4b/0x130 [ 488.851368][ T6428] __seccomp_filter+0x6fa/0x1180 [ 488.856337][ T6428] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 488.862003][ T6428] ? vfs_write+0x596/0x920 [ 488.866508][ T6428] ? __schedule+0x6fa/0x930 [ 488.871066][ T6428] __secure_computing+0x9f/0x1c0 [ 488.876019][ T6428] syscall_trace_enter+0xd1/0x1f0 [ 488.881078][ T6428] do_syscall_64+0xaa/0x1c0 [ 488.885659][ T6428] ? clear_bhb_loop+0x55/0xb0 [ 488.890514][ T6428] ? clear_bhb_loop+0x55/0xb0 [ 488.895225][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.901143][ T6428] RIP: 0033:0x7f0621a35d29 [ 488.905677][ T6428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.925345][ T6428] RSP: 002b:00007f06200a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 488.933829][ T6428] RAX: ffffffffffffffda RBX: 00007f0621c25fa0 RCX: 00007f0621a35d29 [ 488.941803][ T6428] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 00000000201ad000 [ 488.949869][ T6428] RBP: 00007f06200a1090 R08: 0000000000000000 R09: 0000000000000000 [ 488.957839][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.965825][ T6428] R13: 0000000000000000 R14: 00007f0621c25fa0 R15: 00007ffc93642678 [ 488.974012][ T6428] [ 489.049174][ T6432] 9pnet_fd: Insufficient options for proto=fd [ 489.207650][ T6448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.285980][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.293821][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.323148][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.331269][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.422566][ T6475] netlink: 'syz.0.9412': attribute type 10 has an invalid length. [ 489.431405][ T6475] team0: Device hsr_slave_0 failed to register rx_handler [ 489.517640][ T6486] FAULT_INJECTION: forcing a failure. [ 489.517640][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.530851][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.7.9418 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 489.541556][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 489.551635][ T6486] Call Trace: [ 489.554931][ T6486] [ 489.557890][ T6486] dump_stack_lvl+0xf2/0x150 [ 489.562514][ T6486] dump_stack+0x15/0x1a [ 489.566750][ T6486] should_fail_ex+0x223/0x230 [ 489.571456][ T6486] should_fail+0xb/0x10 [ 489.575662][ T6486] should_fail_usercopy+0x1a/0x20 [ 489.580723][ T6486] _copy_from_iter+0xd5/0xd00 [ 489.585654][ T6486] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 489.591233][ T6486] copy_page_from_iter+0x14f/0x280 [ 489.596425][ T6486] tun_get_user+0x68b/0x25c0 [ 489.601177][ T6486] ? _parse_integer+0x27/0x30 [ 489.605881][ T6486] ? ref_tracker_alloc+0x1f5/0x2f0 [ 489.611043][ T6486] tun_chr_write_iter+0x188/0x240 [ 489.616134][ T6486] vfs_write+0x77f/0x920 [ 489.620457][ T6486] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 489.626053][ T6486] ksys_write+0xe8/0x1b0 [ 489.630387][ T6486] __x64_sys_write+0x42/0x50 [ 489.635112][ T6486] x64_sys_call+0x287e/0x2dc0 [ 489.639833][ T6486] do_syscall_64+0xc9/0x1c0 [ 489.644377][ T6486] ? clear_bhb_loop+0x55/0xb0 [ 489.649097][ T6486] ? clear_bhb_loop+0x55/0xb0 [ 489.653802][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.659777][ T6486] RIP: 0033:0x7f9e475747df [ 489.664225][ T6486] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 489.683887][ T6486] RSP: 002b:00007f9e45be7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 489.692381][ T6486] RAX: ffffffffffffffda RBX: 00007f9e47765fa0 RCX: 00007f9e475747df [ 489.700438][ T6486] RDX: 0000000000000012 RSI: 0000000020000140 RDI: 00000000000000c8 [ 489.708432][ T6486] RBP: 00007f9e45be7090 R08: 0000000000000000 R09: 0000000000000000 [ 489.716512][ T6486] R10: 0000000000000012 R11: 0000000000000293 R12: 0000000000000001 [ 489.724504][ T6486] R13: 0000000000000000 R14: 00007f9e47765fa0 R15: 00007ffc23110d28 [ 489.732546][ T6486] [ 489.865131][ T6497] loop0: detected capacity change from 0 to 512 [ 489.938100][ T6497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.970260][ T6499] 9pnet_fd: Insufficient options for proto=fd [ 490.029115][ T6504] smc: net device wg0 applied user defined pnetid SYZ0 [ 490.036829][ T6504] netlink: 'syz.7.9421': attribute type 39 has an invalid length. [ 490.047722][ T6504] smc: removing net device wg0 with user defined pnetid SYZ0 [ 490.430944][ T6510] IPVS: Unknown mcast interface: batadv0 [ 490.587451][ T5213] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.709370][ T6522] FAULT_INJECTION: forcing a failure. [ 490.709370][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 490.722229][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.0.9430 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 490.733005][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 490.743097][ T6522] Call Trace: [ 490.746400][ T6522] [ 490.749351][ T6522] dump_stack_lvl+0xf2/0x150 [ 490.754046][ T6522] dump_stack+0x15/0x1a [ 490.758285][ T6522] should_fail_ex+0x223/0x230 [ 490.763022][ T6522] should_failslab+0x8f/0xb0 [ 490.767663][ T6522] kmem_cache_alloc_node_noprof+0x59/0x320 [ 490.773508][ T6522] ? __alloc_skb+0x10b/0x310 [ 490.778135][ T6522] __alloc_skb+0x10b/0x310 [ 490.782604][ T6522] ? audit_log_start+0x34c/0x6b0 [ 490.787645][ T6522] audit_log_start+0x368/0x6b0 [ 490.792474][ T6522] audit_seccomp+0x4b/0x130 [ 490.797007][ T6522] __seccomp_filter+0x6fa/0x1180 [ 490.802049][ T6522] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 490.807788][ T6522] ? vfs_write+0x596/0x920 [ 490.812245][ T6522] __secure_computing+0x9f/0x1c0 [ 490.817251][ T6522] syscall_trace_enter+0xd1/0x1f0 [ 490.822353][ T6522] ? fpregs_assert_state_consistent+0x83/0xa0 [ 490.828467][ T6522] do_syscall_64+0xaa/0x1c0 [ 490.833070][ T6522] ? clear_bhb_loop+0x55/0xb0 [ 490.837789][ T6522] ? clear_bhb_loop+0x55/0xb0 [ 490.842494][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.848549][ T6522] RIP: 0033:0x7f1f1b1e5d29 [ 490.852987][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.872646][ T6522] RSP: 002b:00007f1f19857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 490.881191][ T6522] RAX: ffffffffffffffda RBX: 00007f1f1b3d5fa0 RCX: 00007f1f1b1e5d29 [ 490.889197][ T6522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.897168][ T6522] RBP: 00007f1f19857090 R08: 0000000000000000 R09: 0000000000000000 [ 490.905139][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.913107][ T6522] R13: 0000000000000000 R14: 00007f1f1b3d5fa0 R15: 00007fff43289ed8 [ 490.921122][ T6522] [ 490.969961][ T6541] FAULT_INJECTION: forcing a failure. [ 490.969961][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.983200][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.4.9439 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 490.993975][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 491.004072][ T6541] Call Trace: [ 491.007372][ T6541] [ 491.010392][ T6541] dump_stack_lvl+0xf2/0x150 [ 491.015032][ T6541] dump_stack+0x15/0x1a [ 491.019220][ T6541] should_fail_ex+0x223/0x230 [ 491.023983][ T6541] should_fail+0xb/0x10 [ 491.028253][ T6541] should_fail_usercopy+0x1a/0x20 [ 491.033549][ T6541] _copy_from_user+0x1e/0xb0 [ 491.038160][ T6541] memdup_user_nul+0x65/0xd0 [ 491.042861][ T6541] sel_commit_bools_write+0xcd/0x260 [ 491.048283][ T6541] vfs_writev+0x3fb/0x880 [ 491.052643][ T6541] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 491.058679][ T6541] ? mutex_lock+0xd/0x40 [ 491.062995][ T6541] do_writev+0xf4/0x220 [ 491.067181][ T6541] __x64_sys_writev+0x45/0x50 [ 491.071891][ T6541] x64_sys_call+0x1fab/0x2dc0 [ 491.076578][ T6541] do_syscall_64+0xc9/0x1c0 [ 491.081106][ T6541] ? clear_bhb_loop+0x55/0xb0 [ 491.085812][ T6541] ? clear_bhb_loop+0x55/0xb0 [ 491.090666][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.096608][ T6541] RIP: 0033:0x7f08dcb15d29 [ 491.101098][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.120722][ T6541] RSP: 002b:00007f08db181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 491.129153][ T6541] RAX: ffffffffffffffda RBX: 00007f08dcd05fa0 RCX: 00007f08dcb15d29 [ 491.137157][ T6541] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 491.145134][ T6541] RBP: 00007f08db181090 R08: 0000000000000000 R09: 0000000000000000 [ 491.153148][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.161130][ T6541] R13: 0000000000000000 R14: 00007f08dcd05fa0 R15: 00007fff0bcea608 [ 491.169117][ T6541] [ 491.233441][ T6551] IPVS: Unknown mcast interface: batadv0 [ 491.280876][ T6553] 9pnet_fd: Insufficient options for proto=fd [ 491.330855][ T6563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.460713][ T6572] syz.8.9451[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.460848][ T6572] syz.8.9451[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.480241][ T6575] FAULT_INJECTION: forcing a failure. [ 491.480241][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.498136][ T6572] syz.8.9451[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.504736][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.0.9453 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 491.526725][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 491.536798][ T6575] Call Trace: [ 491.540082][ T6575] [ 491.543017][ T6575] dump_stack_lvl+0xf2/0x150 [ 491.547647][ T6575] dump_stack+0x15/0x1a [ 491.551866][ T6575] should_fail_ex+0x223/0x230 [ 491.556557][ T6575] should_fail+0xb/0x10 [ 491.560729][ T6575] should_fail_usercopy+0x1a/0x20 [ 491.565851][ T6575] strncpy_from_user+0x25/0x210 [ 491.570805][ T6575] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 491.576531][ T6575] ? getname_flags+0x81/0x3b0 [ 491.581282][ T6575] getname_flags+0xb0/0x3b0 [ 491.585822][ T6575] __getname_maybe_null+0x64/0x190 [ 491.590952][ T6575] __se_sys_statx+0x7d/0x270 [ 491.595632][ T6575] ? putname+0xcf/0xf0 [ 491.599775][ T6575] ? __fget_files+0x17c/0x1c0 [ 491.604507][ T6575] ? fput+0x1c4/0x200 [ 491.608494][ T6575] ? ksys_write+0x176/0x1b0 [ 491.613074][ T6575] __x64_sys_statx+0x67/0x80 [ 491.617671][ T6575] x64_sys_call+0x1031/0x2dc0 [ 491.622389][ T6575] do_syscall_64+0xc9/0x1c0 [ 491.626920][ T6575] ? clear_bhb_loop+0x55/0xb0 [ 491.631599][ T6575] ? clear_bhb_loop+0x55/0xb0 [ 491.636281][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.642267][ T6575] RIP: 0033:0x7f1f1b1e5d29 [ 491.646751][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.666362][ T6575] RSP: 002b:00007f1f19857038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 491.674814][ T6575] RAX: ffffffffffffffda RBX: 00007f1f1b3d5fa0 RCX: 00007f1f1b1e5d29 [ 491.682793][ T6575] RDX: 0000000000007100 RSI: 0000000020000000 RDI: ffffffffffffffff [ 491.690774][ T6575] RBP: 00007f1f19857090 R08: 0000000000000000 R09: 0000000000000000 [ 491.698747][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.706726][ T6575] R13: 0000000000000001 R14: 00007f1f1b3d5fa0 R15: 00007fff43289ed8 [ 491.714781][ T6575] [ 491.788076][ T6586] FAULT_INJECTION: forcing a failure. [ 491.788076][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 491.801068][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.7.9459 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 491.811819][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 491.821955][ T6586] Call Trace: [ 491.825255][ T6586] [ 491.828198][ T6586] dump_stack_lvl+0xf2/0x150 [ 491.832836][ T6586] dump_stack+0x15/0x1a [ 491.837029][ T6586] should_fail_ex+0x223/0x230 [ 491.841764][ T6586] should_failslab+0x8f/0xb0 [ 491.842310][ T6592] syz.4.9458[6592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.846404][ T6586] kmem_cache_alloc_node_noprof+0x59/0x320 [ 491.846437][ T6586] ? __alloc_skb+0x10b/0x310 [ 491.846461][ T6586] __alloc_skb+0x10b/0x310 [ 491.846505][ T6586] netlink_alloc_large_skb+0xad/0xe0 [ 491.864817][ T6592] syz.4.9458[6592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.868154][ T6586] netlink_sendmsg+0x3b4/0x6e0 [ 491.872777][ T6592] syz.4.9458[6592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.877883][ T6586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.877917][ T6586] __sock_sendmsg+0x140/0x180 [ 491.877958][ T6586] ____sys_sendmsg+0x312/0x410 [ 491.877986][ T6586] __sys_sendmsg+0x19d/0x230 [ 491.878058][ T6586] __x64_sys_sendmsg+0x46/0x50 [ 491.896728][ T6591] __nla_validate_parse: 19 callbacks suppressed [ 491.896806][ T6591] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9458'. [ 491.905493][ T6586] x64_sys_call+0x2734/0x2dc0 [ 491.914569][ T6593] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9458'. [ 491.915495][ T6586] do_syscall_64+0xc9/0x1c0 [ 491.915524][ T6586] ? clear_bhb_loop+0x55/0xb0 [ 491.915552][ T6586] ? clear_bhb_loop+0x55/0xb0 [ 491.972833][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.978797][ T6586] RIP: 0033:0x7f9e47575d29 [ 491.983287][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.002914][ T6586] RSP: 002b:00007f9e45be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.011403][ T6586] RAX: ffffffffffffffda RBX: 00007f9e47765fa0 RCX: 00007f9e47575d29 [ 492.019375][ T6586] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003 [ 492.027360][ T6586] RBP: 00007f9e45be7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.035359][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.043407][ T6586] R13: 0000000000000000 R14: 00007f9e47765fa0 R15: 00007ffc23110d28 [ 492.051479][ T6586] [ 492.059556][ T6590] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9461'. [ 492.067428][ T6588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.068624][ T6590] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9461'. [ 492.406692][ T6620] FAULT_INJECTION: forcing a failure. [ 492.406692][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.419927][ T6620] CPU: 1 UID: 0 PID: 6620 Comm: syz.7.9473 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 492.430654][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 492.440796][ T6620] Call Trace: [ 492.444092][ T6620] [ 492.447075][ T6620] dump_stack_lvl+0xf2/0x150 [ 492.451793][ T6620] dump_stack+0x15/0x1a [ 492.455997][ T6620] should_fail_ex+0x223/0x230 [ 492.460694][ T6620] should_fail+0xb/0x10 [ 492.464866][ T6620] should_fail_usercopy+0x1a/0x20 [ 492.469905][ T6620] _copy_to_user+0x20/0xa0 [ 492.474442][ T6620] vt_do_diacrit+0x44b/0x690 [ 492.479053][ T6620] ? security_capable+0x81/0x90 [ 492.483929][ T6620] vt_ioctl+0xe16/0x1810 [ 492.488251][ T6620] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 492.493390][ T6620] tty_ioctl+0x815/0xbe0 [ 492.497661][ T6620] ? __pfx_tty_ioctl+0x10/0x10 [ 492.502573][ T6620] __se_sys_ioctl+0xc9/0x140 [ 492.507321][ T6620] __x64_sys_ioctl+0x43/0x50 [ 492.511951][ T6620] x64_sys_call+0x1690/0x2dc0 [ 492.516704][ T6620] do_syscall_64+0xc9/0x1c0 [ 492.521314][ T6620] ? clear_bhb_loop+0x55/0xb0 [ 492.526004][ T6620] ? clear_bhb_loop+0x55/0xb0 [ 492.530763][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.536767][ T6620] RIP: 0033:0x7f9e47575d29 [ 492.541205][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.560882][ T6620] RSP: 002b:00007f9e45be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.569392][ T6620] RAX: ffffffffffffffda RBX: 00007f9e47765fa0 RCX: 00007f9e47575d29 [ 492.577368][ T6620] RDX: 0000000020000000 RSI: 0000000000004bfa RDI: 0000000000000003 [ 492.585347][ T6620] RBP: 00007f9e45be7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.593320][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.601311][ T6620] R13: 0000000000000000 R14: 00007f9e47765fa0 R15: 00007ffc23110d28 [ 492.609294][ T6620] [ 492.650602][ T6623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.740421][ T6617] lo speed is unknown, defaulting to 1000 [ 492.778182][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 492.778226][ T29] audit: type=1400 audit(492.770:42083): avc: denied { mount } for pid=6631 comm="syz.7.9476" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 492.831147][ T29] audit: type=1400 audit(492.811:42084): avc: denied { create } for pid=6631 comm="syz.7.9476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.851229][ T29] audit: type=1400 audit(492.811:42085): avc: denied { write } for pid=6631 comm="syz.7.9476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.871170][ T29] audit: type=1400 audit(492.821:42086): avc: denied { read } for pid=6631 comm="syz.7.9476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.929022][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9477'. [ 492.938209][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9477'. [ 492.989947][ T6617] chnl_net:caif_netlink_parms(): no params data found [ 493.002530][ T29] audit: type=1400 audit(492.991:42087): avc: denied { create } for pid=6641 comm="syz.7.9478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.032689][ T29] audit: type=1400 audit(493.021:42088): avc: denied { setopt } for pid=6641 comm="syz.7.9478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 493.100413][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.101506][ T6651] Falling back ldisc for ttyS3. [ 493.107512][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.114374][ T6617] bridge_slave_0: entered allmulticast mode [ 493.127111][ T6617] bridge_slave_0: entered promiscuous mode [ 493.145404][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.152510][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.160891][ T6617] bridge_slave_1: entered allmulticast mode [ 493.161566][ T6617] bridge_slave_1: entered promiscuous mode [ 493.204523][ T29] audit: type=1326 audit(493.181:42089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.9482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dcb15d29 code=0x7ffc0000 [ 493.204563][ T29] audit: type=1326 audit(493.191:42090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.9482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08dcb15d29 code=0x7ffc0000 [ 493.204596][ T29] audit: type=1326 audit(493.191:42091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.9482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dcb15d29 code=0x7ffc0000 [ 493.206411][ T29] audit: type=1326 audit(493.191:42092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.4.9482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dcb15d29 code=0x7ffc0000 [ 493.206495][ T6661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.238159][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.240569][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.285361][ T6617] team0: Port device team_slave_0 added [ 493.286847][ T6617] team0: Port device team_slave_1 added [ 493.343345][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.343362][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.343394][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.345303][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.345317][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.345357][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.397751][ T6617] hsr_slave_0: entered promiscuous mode [ 493.504278][ T6617] hsr_slave_1: entered promiscuous mode [ 493.519722][ T6617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.528980][ T6617] Cannot create hsr debugfs directory [ 493.640792][ T6684] IPVS: Unknown mcast interface: batadv0 [ 493.651246][ T6685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6685 comm=syz.8.9491 [ 493.704232][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.711314][ T6617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.718610][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.725690][ T6617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.836297][ T6678] vlan2: entered allmulticast mode [ 493.869502][ T6697] wireguard0: entered promiscuous mode [ 493.875317][ T6697] wireguard0: entered allmulticast mode [ 493.889555][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9491'. [ 493.898608][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9491'. [ 493.912598][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.926915][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.947201][ T6686] lo speed is unknown, defaulting to 1000 [ 493.992868][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.013593][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.028575][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.035762][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.080453][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.087573][T12507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.119094][ T6714] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 494.239072][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.252172][ T6701] lo speed is unknown, defaulting to 1000 [ 494.388462][ T6729] lo speed is unknown, defaulting to 1000 [ 494.788242][ T6617] veth0_vlan: entered promiscuous mode [ 494.831995][ T6617] veth1_vlan: entered promiscuous mode [ 494.872697][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 494.984877][ T6617] veth0_macvtap: entered promiscuous mode [ 494.993972][ T6617] veth1_macvtap: entered promiscuous mode [ 495.007049][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.017570][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.027459][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.037897][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.047727][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.058159][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.067998][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.079435][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.089689][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.100159][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.110033][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.120516][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.130417][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.140917][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.150811][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.161355][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.171246][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.181762][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.204446][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.252404][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.263084][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.272896][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.283488][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.293447][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.303898][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.313798][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.324339][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.334198][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.344662][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.354649][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.365113][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.374948][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.385432][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.395359][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.405860][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.418385][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.493864][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.501001][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.523400][ T6701] bridge_slave_0: entered allmulticast mode [ 495.536711][ T6701] bridge_slave_0: entered promiscuous mode [ 495.552163][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9472'. [ 495.554406][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.561183][ T6764] netlink: 108 bytes leftover after parsing attributes in process `syz.5.9472'. [ 495.568273][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.611106][ T6701] bridge_slave_1: entered allmulticast mode [ 495.618145][ T6701] bridge_slave_1: entered promiscuous mode [ 495.709847][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.744876][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.844392][ T6774] lo speed is unknown, defaulting to 1000 [ 495.851403][ T6701] team0: Port device team_slave_0 added [ 495.858846][ T6701] team0: Port device team_slave_1 added [ 495.886888][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.894022][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.920103][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.937334][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.944513][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.970817][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.052171][ T6701] hsr_slave_0: entered promiscuous mode [ 496.062238][ T6701] hsr_slave_1: entered promiscuous mode [ 496.069056][ T6701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.069884][ T6785] netlink: 'syz.8.9521': attribute type 10 has an invalid length. [ 496.083066][ T6701] Cannot create hsr debugfs directory [ 496.093027][ T6785] team0: Device hsr_slave_0 failed to register rx_handler [ 496.279999][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.293537][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.320958][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.328134][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.337836][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.345007][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.504854][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.621510][ T6816] sg_write: process 194 (syz.6.9528) changed security contexts after opening file descriptor, this is not allowed. [ 496.685748][ T6816] program syz.6.9528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.715839][ T6701] veth0_vlan: entered promiscuous mode [ 496.737359][ T6701] veth1_vlan: entered promiscuous mode [ 496.759761][ T6701] veth0_macvtap: entered promiscuous mode [ 496.770227][ T6701] veth1_macvtap: entered promiscuous mode [ 496.781927][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.792427][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.802274][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.812890][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.822792][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.833312][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.843216][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.853839][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.863741][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.874253][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.884127][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.894671][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.904517][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.915374][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.925300][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.935768][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.945636][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.956106][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.965946][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.976473][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.987545][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.005551][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.016118][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.026083][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.036784][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.046947][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.057564][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.067417][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.078020][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.087957][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.098452][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.108318][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.118778][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.128695][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.139157][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.149149][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.159703][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.169543][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.180026][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.199995][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.229179][ T6836] lo speed is unknown, defaulting to 1000 [ 497.242176][ T6843] __nla_validate_parse: 8 callbacks suppressed [ 497.242196][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9536'. [ 497.376309][ T6850] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.9539'. [ 497.499970][ T6859] smc: net device wg0 applied user defined pnetid SYZ0 [ 497.663811][T24732] bridge_slave_1: left allmulticast mode [ 497.669529][T24732] bridge_slave_1: left promiscuous mode [ 497.675382][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.698177][T24732] bridge_slave_0: left allmulticast mode [ 497.703907][T24732] bridge_slave_0: left promiscuous mode [ 497.709723][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.861077][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 497.861091][ T29] audit: type=1400 audit(497.853:42294): avc: denied { sqpoll } for pid=6875 comm="syz.6.9547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 497.895179][ T29] audit: type=1400 audit(497.893:42295): avc: denied { create } for pid=6875 comm="syz.6.9547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 497.900513][T24732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.914779][ T29] audit: type=1400 audit(497.893:42296): avc: denied { bind } for pid=6875 comm="syz.6.9547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 497.946136][T24732] bond_slave_0: left promiscuous mode [ 498.003177][T24732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.015172][T24732] bond_slave_1: left promiscuous mode [ 498.018851][ T29] audit: type=1326 audit(498.013:42297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.6.9548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 498.043684][ T29] audit: type=1326 audit(498.013:42298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.6.9548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b3205d29 code=0x7ffc0000 [ 498.067846][T24732] bond0 (unregistering): Released all slaves [ 498.068987][ T29] audit: type=1326 audit(498.043:42299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.7.9541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e47575d29 code=0x7ffc0000 [ 498.096855][ T29] audit: type=1326 audit(498.043:42300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.7.9541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e47575d29 code=0x7ffc0000 [ 498.148157][ T6882] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9549'. [ 498.266507][ T6891] smc: net device wg0 applied user defined pnetid SYZ0 [ 498.300965][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9554'. [ 498.325866][T24732] hsr_slave_0: left promiscuous mode [ 498.338511][T24732] hsr_slave_1: left promiscuous mode [ 498.353059][T24732] veth1_macvtap: left promiscuous mode [ 498.358715][T24732] veth0_macvtap: left promiscuous mode [ 498.364398][T24732] veth1_vlan: left promiscuous mode [ 498.369670][T24732] veth0_vlan: left promiscuous mode [ 498.396718][ T6902] netlink: 'syz.5.9554': attribute type 4 has an invalid length. [ 498.455780][ T6905] netlink: 'syz.5.9554': attribute type 4 has an invalid length. [ 498.516564][T24732] team0 (unregistering): Port device team_slave_1 removed [ 498.528800][T24732] team0 (unregistering): Port device team_slave_0 removed [ 498.604016][ T6890] lo speed is unknown, defaulting to 1000 [ 498.644170][ T29] audit: type=1400 audit(498.643:42301): avc: denied { create } for pid=6909 comm="syz.6.9558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 498.687038][ T6910] lo speed is unknown, defaulting to 1000 [ 498.769166][ T29] audit: type=1400 audit(498.763:42302): avc: denied { write } for pid=6916 comm="syz.9.9561" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 498.821699][ T6917] hub 4-0:1.0: USB hub found [ 498.833454][ T6917] hub 4-0:1.0: 8 ports detected [ 498.948315][ T29] audit: type=1326 audit(498.944:42303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.8.9562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621a35d29 code=0x7ffc0000 [ 499.400542][ T6938] syz.9.9570[6938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.400611][ T6938] syz.9.9570[6938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.420058][ T6938] syz.9.9570[6938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.444632][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9570'. [ 499.500772][ T6938] batadv_slave_0: entered promiscuous mode [ 499.512017][ T6938] batadv_slave_1: entered promiscuous mode [ 499.626689][ T6949] lo speed is unknown, defaulting to 1000 [ 499.689645][ T6953] pim6reg: entered allmulticast mode [ 499.711413][ T6953] pim6reg: left allmulticast mode [ 500.223177][ T6937] batadv_slave_1: left promiscuous mode [ 500.229005][ T6937] batadv_slave_0: left promiscuous mode [ 500.568687][ T6985] netlink: 'syz.9.9587': attribute type 10 has an invalid length. [ 500.599316][ T6985] team0: Device hsr_slave_0 failed to register rx_handler [ 500.695286][ T6991] lo speed is unknown, defaulting to 1000 [ 500.832470][ T7009] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9595'. [ 500.841588][ T7009] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9595'. [ 500.867620][ T6992] lo speed is unknown, defaulting to 1000 [ 500.915736][ T7016] 9pnet_fd: Insufficient options for proto=fd [ 501.029098][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9599'. [ 501.038192][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9599'. [ 501.048656][ T7023] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9599'. [ 501.079512][ T7024] netlink: 'syz.5.9601': attribute type 10 has an invalid length. [ 501.116826][ T7024] team0: Device hsr_slave_0 failed to register rx_handler [ 501.162421][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 501.417340][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.424531][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.516971][ T6992] bridge_slave_0: entered allmulticast mode [ 501.623067][ T6992] bridge_slave_0: entered promiscuous mode [ 501.695956][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.703059][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.861746][ T6992] bridge_slave_1: entered allmulticast mode [ 501.868272][ T7060] syz.9.9610[7060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.868518][ T6992] bridge_slave_1: entered promiscuous mode [ 501.869171][ T7060] syz.9.9610[7060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.907129][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.928048][ T7060] syz.9.9610[7060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.938678][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.980365][ T7060] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 501.992713][ T6992] team0: Port device team_slave_0 added [ 501.999558][ T6992] team0: Port device team_slave_1 added [ 502.101168][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.108159][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.134376][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.152182][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.159177][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.185237][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.196364][ T7067] FAULT_INJECTION: forcing a failure. [ 502.196364][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 502.209166][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.7.9614 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 502.219866][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 502.229935][ T7067] Call Trace: [ 502.233263][ T7067] [ 502.236197][ T7067] dump_stack_lvl+0xf2/0x150 [ 502.240886][ T7067] dump_stack+0x15/0x1a [ 502.245067][ T7067] should_fail_ex+0x223/0x230 [ 502.249761][ T7067] ? audit_log_d_path+0x96/0x250 [ 502.254849][ T7067] should_failslab+0x8f/0xb0 [ 502.259462][ T7067] __kmalloc_cache_noprof+0x4e/0x320 [ 502.264762][ T7067] audit_log_d_path+0x96/0x250 [ 502.269641][ T7067] ? __rcu_read_unlock+0x4e/0x70 [ 502.274616][ T7067] audit_log_d_path_exe+0x42/0x70 [ 502.279670][ T7067] audit_log_task+0x192/0x1c0 [ 502.284624][ T7067] audit_seccomp+0x68/0x130 [ 502.289163][ T7067] __seccomp_filter+0x6fa/0x1180 [ 502.294204][ T7067] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 502.299903][ T7067] ? vfs_write+0x596/0x920 [ 502.304433][ T7067] __secure_computing+0x9f/0x1c0 [ 502.309397][ T7067] syscall_trace_enter+0xd1/0x1f0 [ 502.314531][ T7067] ? fpregs_assert_state_consistent+0x83/0xa0 [ 502.320721][ T7067] do_syscall_64+0xaa/0x1c0 [ 502.325312][ T7067] ? clear_bhb_loop+0x55/0xb0 [ 502.330025][ T7067] ? clear_bhb_loop+0x55/0xb0 [ 502.334736][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.340714][ T7067] RIP: 0033:0x7f9e47575d29 [ 502.345212][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.365017][ T7067] RSP: 002b:00007f9e45be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 502.373438][ T7067] RAX: ffffffffffffffda RBX: 00007f9e47765fa0 RCX: 00007f9e47575d29 [ 502.381501][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000090 [ 502.389497][ T7067] RBP: 00007f9e45be7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.397476][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.405451][ T7067] R13: 0000000000000000 R14: 00007f9e47765fa0 R15: 00007ffc23110d28 [ 502.413433][ T7067] [ 502.455156][ T6992] hsr_slave_0: entered promiscuous mode [ 502.462028][ T6992] hsr_slave_1: entered promiscuous mode [ 502.477986][ T6992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.496557][ T6992] Cannot create hsr debugfs directory [ 502.541556][ T7083] bridge0: port 3(vlan2) entered blocking state [ 502.547892][ T7083] bridge0: port 3(vlan2) entered disabled state [ 502.558639][ T7088] __nla_validate_parse: 14 callbacks suppressed [ 502.558658][ T7088] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9620'. [ 502.572713][ T7083] vlan2: entered allmulticast mode [ 502.573964][ T7088] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9620'. [ 502.589151][ T7083] vlan2: left allmulticast mode [ 502.689448][ T7093] netlink: 'syz.5.9622': attribute type 10 has an invalid length. [ 502.726587][ T7093] team0: Device hsr_slave_0 failed to register rx_handler [ 502.773024][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.784714][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.804292][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.814790][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.842968][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.850066][T12556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.858772][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.865873][T12556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.892710][ T7101] netlink: 'syz.5.9625': attribute type 10 has an invalid length. [ 502.901404][ T7101] team0: Device hsr_slave_0 failed to register rx_handler [ 503.082955][T24732] bridge_slave_1: left allmulticast mode [ 503.088767][T24732] bridge_slave_1: left promiscuous mode [ 503.094469][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.147369][T24732] bridge_slave_0: left allmulticast mode [ 503.153257][T24732] bridge_slave_0: left promiscuous mode [ 503.158988][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.520961][T24732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.556565][T24732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.664335][T24732] bond0 (unregistering): Released all slaves [ 503.730216][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.740713][T24732] IPVS: stopping backup sync thread 6411 ... [ 503.802947][ T7124] netlink: 'syz.5.9632': attribute type 39 has an invalid length. [ 503.826292][ T7135] netlink: 'syz.6.9634': attribute type 10 has an invalid length. [ 503.837178][ T7124] veth1_macvtap: left promiscuous mode [ 503.861269][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9632'. [ 503.870016][ T7135] team0: Device hsr_slave_0 failed to register rx_handler [ 503.926409][T24732] hsr_slave_0: left promiscuous mode [ 503.935808][T24732] hsr_slave_1: left promiscuous mode [ 503.947299][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.955010][T24732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.985970][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.993747][T24732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.021941][T24732] veth1_macvtap: left promiscuous mode [ 504.021967][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 504.021986][ T29] audit: type=1400 audit(504.026:42497): avc: denied { connect } for pid=7142 comm="syz.6.9635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.022038][T24732] ================================================================== [ 504.022072][T24732] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 504.022117][T24732] [ 504.022127][T24732] write to 0xffffffff88bc6530 of 8 bytes by task 29 on cpu 1: [ 504.022146][T24732] data_alloc+0x216/0x2c0 [ 504.022159][ T29] audit: type=1400 audit(504.026:42498): avc: denied { setopt } for pid=7142 comm="syz.6.9635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.022173][T24732] prb_reserve+0x85e/0xb60 [ 504.022202][T24732] vprintk_store+0x558/0x870 [ 504.022233][T24732] vprintk_emit+0x15e/0x680 [ 504.022271][T24732] _printk_deferred+0x83/0xb0 [ 504.022317][T24732] ___ratelimit+0x294/0x2b0 [ 504.022357][T24732] __printk_ratelimit+0x1c/0x30 [ 504.022393][T24732] kauditd_hold_skb+0x61/0x1b0 [ 504.022422][T24732] kauditd_send_queue+0x288/0x2e0 [ 504.022453][T24732] kauditd_thread+0x42a/0x650 [ 504.022499][T24732] kthread+0x1d1/0x210 [ 504.022521][T24732] ret_from_fork+0x4b/0x60 [ 504.022546][T24732] ret_from_fork_asm+0x1a/0x30 [ 504.022574][T24732] [ 504.022582][T24732] read to 0xffffffff88bc6530 of 8 bytes by task 24732 on cpu 0: [ 504.022624][T24732] data_push_tail+0x102/0x430 [ 504.022655][T24732] data_alloc+0xbe/0x2c0 [ 504.022683][T24732] prb_reserve+0x85e/0xb60 [ 504.022710][T24732] vprintk_store+0x558/0x870 [ 504.022740][T24732] vprintk_emit+0x15e/0x680 [ 504.022767][T24732] vprintk_default+0x26/0x30 [ 504.022797][T24732] vprintk+0x75/0x80 [ 504.022818][T24732] _printk+0x7a/0xa0 [ 504.022842][T24732] __netdev_printk+0x2d1/0x3e0 [ 504.022868][T24732] netdev_info+0x99/0xc0 [ 504.022898][T24732] __dev_set_promiscuity+0x165/0x340 [ 504.022929][T24732] __dev_set_rx_mode+0x128/0x180 [ 504.022967][T24732] dev_uc_del+0x82/0xa0 [ 504.023001][T24732] macsec_dev_stop+0x342/0x390 [ 504.023026][T24732] __dev_close_many+0x127/0x1e0 [ 504.023061][T24732] dev_close_many+0x103/0x240 [ 504.023075][ T29] audit: type=1400 audit(504.026:42499): avc: denied { write } for pid=7142 comm="syz.6.9635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.023103][T24732] unregister_netdevice_many_notify+0x263/0x11b0 [ 504.023133][T24732] default_device_exit_batch+0x5f0/0x650 [ 504.023166][T24732] cleanup_net+0x4cf/0x860 [ 504.023204][T24732] process_scheduled_works+0x483/0x9a0 [ 504.023234][T24732] worker_thread+0x51d/0x6f0 [ 504.023271][T24732] kthread+0x1d1/0x210 [ 504.023295][T24732] ret_from_fork+0x4b/0x60 [ 504.023315][T24732] ret_from_fork_asm+0x1a/0x30 [ 504.023340][T24732] [ 504.023347][T24732] value changed: 0x0000000100001d3d -> 0x0000000100002adb [ 504.023365][T24732] [ 504.023372][T24732] Reported by Kernel Concurrency Sanitizer on: [ 504.023384][T24732] CPU: 0 UID: 0 PID: 24732 Comm: kworker/u8:52 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 504.023416][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 504.023432][T24732] Workqueue: netns cleanup_net [ 504.023472][T24732] ================================================================== [ 504.025710][ T29] audit: type=1400 audit(504.026:42500): avc: denied { ioctl } for pid=7142 comm="syz.6.9635" path="socket:[107127]" dev="sockfs" ino=107127 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.029134][T24732] veth0_macvtap: left promiscuous mode [ 504.029181][T24732] veth1_vlan: left promiscuous mode [ 504.053681][ T29] audit: type=1400 audit(504.036:42501): avc: denied { read } for pid=7143 comm="syz.5.9636" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 504.055160][T24732] veth0_vlan: left promiscuous mode [ 504.095107][ T29] audit: type=1400 audit(504.066:42502): avc: denied { open } for pid=7143 comm="syz.5.9636" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 504.358266][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.378604][ T29] audit: type=1400 audit(504.356:42503): avc: denied { ioctl } for pid=7143 comm="syz.5.9636" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.475712][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.682208][ T29] audit: type=1400 audit(504.686:42504): avc: denied { create } for pid=7143 comm="syz.5.9636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.740998][ T29] audit: type=1400 audit(504.706:42505): avc: denied { module_request } for pid=7143 comm="syz.5.9636" kmod="net-pf-2-proto-4-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 504.763687][T24732] team0 (unregistering): Port device team_slave_1 removed [ 504.779261][ T29] audit: type=1400 audit(504.766:42506): avc: denied { create } for pid=7143 comm="syz.5.9636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.812312][T24732] team0 (unregistering): Port device team_slave_0 removed [ 504.985643][ T6992] veth0_vlan: entered promiscuous mode [ 505.009982][ T6992] veth1_vlan: entered promiscuous mode [ 505.042725][ T6992] veth0_macvtap: entered promiscuous mode [ 505.052715][ T6992] veth1_macvtap: entered promiscuous mode [ 505.065790][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.076432][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.086378][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.096867][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.106715][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.117315][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.127209][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.137720][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.147577][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.158132][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.168017][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.178531][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.188510][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.198971][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.208839][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.219307][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.229161][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.239667][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.249525][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.259978][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.270973][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.301457][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.312874][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.323176][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.333654][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.343531][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.354067][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.363910][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.374448][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.384316][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.394949][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.404817][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.415428][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.425309][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.435774][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.445639][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.456113][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.465972][ T6992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.476481][ T6992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.488804][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1