last executing test programs: 18m10.447536176s ago: executing program 32 (id=5364): socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100003c}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") 18m5.174998381s ago: executing program 33 (id=5430): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000340)='./file3\x00', 0x64842, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r0}}, 0x40) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/mnt\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 17m17.052341199s ago: executing program 34 (id=6268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x205, &(0x7f0000002500)=0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0}]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000b80)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}, {&(0x7f0000002700)="d6f4de1bc9418695", 0x8}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8) 17m1.144765795s ago: executing program 35 (id=6518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 16m58.743751839s ago: executing program 36 (id=6548): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m32.287595457s ago: executing program 37 (id=7031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) 16m28.851097073s ago: executing program 38 (id=7069): signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r0], 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000060014"], 0x28}}, 0x800) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 12m14.321325967s ago: executing program 39 (id=10733): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) 12m8.501343246s ago: executing program 40 (id=10817): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='{/}\\') r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe467}, 0x94) sendmsg$nl_route_sched(r3, 0x0, 0x0) unshare(0x26020480) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x9, 0x913, 0xfffffef8, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x804) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="338c677bb7a857977e6fc13b4a5849371ddc4d9c", 0x14}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x0) syz_emit_ethernet(0x386, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x387, &(0x7f0000001440)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) 12m6.956271497s ago: executing program 41 (id=10829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) 12m1.331647018s ago: executing program 42 (id=10857): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 11m54.312552135s ago: executing program 43 (id=10974): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x3000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11m49.55162639s ago: executing program 44 (id=10988): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740be0000000c001080"], 0x70}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x0, 0x2}, 0x8) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703db0008000000b704000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="160000000200000004000000014dad09758536cfa3ef97c38ad46816a192a9c9a30f6a4cd502394af7d8b3171f1141b3b0b13ef507e3e79b0133c829467ab64087a21e2817eb3dfabe1ffb7b7df4bbba3a1712568592b9"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x1d6}, 0x18) setrlimit(0x9, &(0x7f0000000000)) 11m48.617764542s ago: executing program 45 (id=10940): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x62040200) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) sendto$inet6(r1, &(0x7f0000000240)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d3234565360264af6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a10000", 0xc5, 0x24000040, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x6, 0xfffff00c}, {0x6}]}, 0x10) 11m47.038815046s ago: executing program 46 (id=10950): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@abort}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@orlov}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x490, &(0x7f0000000f00)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYBLOB="31705b9afd9fa8b023b60530abbc7fef2d333ac9f9fe884f399fc142733d8b3cc6856d585d7790c20421f857f7efc1c15281b94e6cf8262bb5c92fadedc447908a349b88df2f36b5768a64433fa0e8fd7eb4dc2dbb41e80ac4c516a4000000f44d0000000000000000", @ANYRES8=r3, @ANYRES32=r3, @ANYRESDEC], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, 0x94) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000003,msize=0x0000000000000007,timeout=0x0000000000000007,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c72713d3078303030303030303030303030306530622c6673757569643d37616665656163622d953333652d643730312d643265642d30003534313039562c66756e633d43524544535f434845434b2c7569643e", @ANYRESDEC=0xee01, @ANYBLOB="2c10"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) 11m40.800098707s ago: executing program 47 (id=11044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x1}, 0x8) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1e2}], 0x1) 11m29.811883582s ago: executing program 48 (id=11019): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x5, 0x7fff, {{0x1f, 0x4, 0x0, 0x5, 0x7c, 0x66, 0x0, 0x48, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0xa3, 0x3, 0xf, [{@empty, 0x4}, {@empty}, {@empty, 0x6}, {@local, 0x1}, {@broadcast, 0x2}, {@multicast2, 0x80}, {@private=0xa010102, 0xb}]}, @end, @rr={0x7, 0x2b, 0x5d, [@local, @rand_addr=0x64010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010102, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000009500"/33], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', r0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000000)={r2}) 11m28.454299585s ago: executing program 49 (id=11028): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28010000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000ab0007"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000240)={[{@errors_remount}, {@nomblk_io_submit}]}, 0xfd, 0x4c3, &(0x7f0000000d80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x104) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000180)={0x0, 0x3, [0x8, 0xfffffffffffffe01, 0xeee, 0x2, 0x8, 0x2]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1018488, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone3(&(0x7f0000000740)={0x42180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 11m27.118057335s ago: executing program 50 (id=11039): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28010000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000ab0007"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000240)={[{@errors_remount}, {@nomblk_io_submit}]}, 0xfd, 0x4c3, &(0x7f0000000d80)="$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") 11m8.57418545s ago: executing program 51 (id=11115): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 11m7.056713409s ago: executing program 52 (id=11124): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x8) 11m7.027218451s ago: executing program 53 (id=11126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r3) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000640), 0x4) 11m5.582666013s ago: executing program 54 (id=11139): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = socket$unix(0x1, 0x1, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8, 0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x5}, 0x8000, 0x0, 0x409, 0x5, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 10m58.076267347s ago: executing program 55 (id=11166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x60000, 0x8) getdents64(r9, &(0x7f0000000280)=""/186, 0xba) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0x0) writev(r8, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 10m40.36458448s ago: executing program 56 (id=11224): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) r2 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = getegid() setresgid(0xee00, r5, r6) r7 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0}, &(0x7f0000001b00)=0xc) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x4, 0x4e22, 0x6, 0x2, 0xa0, 0x0, 0x2b, r12, r13}, {0x7, 0x100000000, 0x9, 0x3e, 0x8000, 0x9, 0x8, 0xd70}, {0x2327, 0x81, 0x972, 0xfffffffffffffff9}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3502, 0x2, 0x2, 0x5, 0x3, 0x4, 0xe1}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000000500)={[{@gid={'gid', 0x3d, r15}}, {@gid}]}) sendmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="02667b972b5b0731faf39bd8db9e52deaabc04f58b6f57b967aca73ca6870d19a030fb6b40c6694f88bf391fdcfd540185da4f2346f8421df65fcb6e544535a86a200f2af9aab555d9", 0x49}, {&(0x7f00000001c0)="23573c2b0fd891e4ee1babcf701ef0cb87532e3ba97871d238c1b49b049a5e982ba9668ec2a6ecc4cf2fef47ace6fea80d7e6b33a5fd52d17d02126b058d919910fe27d442658dd62d87360cd476e8f87504a660d4a93bccca00e68bfa137bac5a66fa394ea19b2d0ba43b2e86706b819b1f046a45c0335d187f71f55b10f1a74df887bd8e5e05a1c1b37a922d275e1d851324aa9955037afd2256368fcfeb873298ced60ce76bb32e1f5c44f08ed8c3e79fcebaab17f2c545ff24f17ae22d63bed34578a3a6b3d78326ece49a2fcaae742155c994251ff1c1572be2a32819d577d9e85cfefc105fca4aa886964b", 0xee}, {&(0x7f00000002c0)="16d99dd97b31d1d89eb813e94ed9201878e0ad1f3250", 0x16}, {&(0x7f0000000300)="95e8fe8640cf69f877223e7c1a14ef45b80498b7f2d4b5084045fe58c8bb07cc35e6ff171244f945f059edfa195bb89f02ea4b410cca886dbc070dc4877585fce6fdb3d767016ff3b285c268451b9cb2e06344c58580269544a84b0d69c4d032c96bc1669b2cc7cdb5478201748b", 0x6e}, {&(0x7f0000000380)="d9d7d446f855f85daacb32b3d5769e9cfbb39a6bf41de6ccce", 0x19}], 0x5, 0x0, 0x0, 0x20000084}}, {{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000004c0)="4faa548de1696f6597e16841f136227607154ebf9307c529c4d924e8b08f310220fa425d7f8904de2287b9e5fd25106785d6372f90881e9929439ad7532a2ba47e4e4ccf3a8c22ff5e151a667e", 0x4d}, {&(0x7f0000000540)="9ddf0a5267cf8fa5209c19ae84db2fe1bc25c2e3149aca7b9e47a08fdb9a5e1c6ebcd621df4372a58447fe20b03ff3995cc322e075f9c30881701bbea63837ef424d4776343d1e5f54fabcf84a16af6010be1626271def81203b51bfe541c58b58ab1ec25d544d33374882508235900cd455d0ed21bcdfa28584cecd0520fec6d52d5b77ed6ec543bac662c6bfd57d5477c12c03a71e0331d8880aa28945337cf344ba0f340d630438a35e61fb573d761ec79d4c12f1ee9f35b1f640de438f35b349e3a22e7c977a0ad30fefb25db8be960b80937fc664dda836cf", 0xdb}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20000001}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3fb15d3d4c2458b7a640511eba590af456fe5b7b6b99b66a5994d5a4458d9491b23feeb4029e658ac7714da28a2c3abfa648d23ec3856b47fe3533fdaf29a248ca156b73441f20dd85598e532af7b209350f4e051beb21f1660ef7fd0d0da5472436c8d9f16c355978602fefb5234f4525102f84d0ce5d3f78683d79f04c1b0875094615149acf46e978e76ebb6bcee51765f70cc587497206ca7de2bcb1ad07cba005c134c9", 0xa6}, {&(0x7f0000000780)="93882dbe86bd7af147a36fa5c97d787a2900b71907a32681d8640b6270e8597cb6bed1ff1cb8a7796f5603689066a4", 0x2f}], 0x2, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}], 0x20, 0x20000000}}, {{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="696b58a6b3fdc0c383357088ce27d00080587255cc93a06f3e3bfcaa0ac483bee9fbbd0fb4608e3f919a318dfc780035994fe77d89b281ff4b8eb40d3cf7011711e54b657c47c75720b9bf12b6205d11f32b4ac23d9288c94763e9ca3600a3197747325670270d36db4b75a7c39cf29f86930f3eb06b3582bf804b26ceafe16ca94c3b5c03a77c7098a90e4bf63a714ed7e660b15354e1945da034e59d306b2356d52b56e00e0cd34251667622a2d7358d5d3806783aeb4bcd7a3fea0bf0ddaf99700f52bd06bca1cf61217c3be80a9ae50034a119b8e070c2ade4f84d4647c791ddac20f05937725c5f957b7bf1e9790d24", 0xf2}, {&(0x7f0000001a40)="1c", 0x1}], 0x3, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x880}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c40)="37e31fd76ea5c0f5be78fcc959a6aceb11366c1c36be2da20198ec4e15ec7887aed5ca04f1753df02f4cf7bf9b0265682098b408bc2bf24533dd080d9384509be44b50e9fd4585615e278ffda769168e6598e290f758a510f6815671bfc161b3303c8f2bbfed9bb8c47d03432c9015c974aefbc393c180b71fc25f60c10bed738967d42b16c9b2be5b679605098f38b70f28590a9b49001bff9e140a", 0x9c}, {&(0x7f0000001d00)="47ce82907bd81bdcd3b442ec5feb806c0e8741d26adc4ce49fbf13a4f07c07a05bc2ef11ffd4ccb9486dcecd1121d0786d5e9d661045e4a4c67c0cc2372596c786bc57b1c5968520fa0fa9cc7b282faebb30983f1b6a29b957733f864109556cc7bd1b8ea4e3b377119267", 0x6b}, {&(0x7f0000001d80)="613cdbcee450344d752b8b1a44835a3079301b5935bb3987cb6176f0ec1608ce19a148327c7a3124e3dea848d5fff47f5e859ad8a966dbd8bdab4bb789aa9bae02c28b978f56156dbc2f801e6edbef8be6fab0c0f2945b902cf2f5f7740b09f2be0cf0673d78872cd6ff800429f94a0b83b1cf8887651c21a5b4ab02e200f2e88b52515c539ed4", 0x87}], 0x3, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r10, r13, r15}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x20004064}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001ec0)="ac24bc39f2f54fb88807edd9eec7d5e84716579b35b681f81788c9c598777e65a6d57041756803e1b725ca738bb79d547a87a1d6fae7811700814b82dd52a90b6310c5242ece5088d254cadb2baac66cf6c428114a356f57f710edde8b98cfaf62277b7dddd63cc94df3326efe1e88b836b8b247d1c207428fa0fe81390543fac2fba3bcf14a6c512a263bb1f3546442afb3fb3db971db8c960caceb1bb67c0f0929fd3ad350dad39a05ffc995d284ad0c8cf65105243f57a00cd7d7af32396b3432278268b24ee9ce898415eca4e3a20d7f42521b693977d5057687", 0xdc}, {&(0x7f0000001fc0)="fdc3ca290083c3b42e112b381feb25f17d", 0x11}, {&(0x7f0000002000)="b873a8d66e5d6b5da96266c2944da4067a903f5f1326b9e9d9dc61274673c8d29d359e070f0470074ac328302ba73c85b68bd810d7c9aa98bc784f52a8b2e0c66782158d092f08746af4b76e00b322a8db56d6747a30a4884b71609c546a6caea5c7a3930633a80605edad184aabaf40f615a1a80247cb760f70ea3de0686bd1a741185d4444db77d838bb47731a3afe103a75554ca158d9d269970d6c1348f18bb8502a990cbe62761aa28f2cb449fdf09a99add227b9296b4a31f6eedfddf9d3958e5d618567797969d109e1d55a9b55a715343602c46d0091219631de46de96bfebd7ef2da028506149", 0xeb}, {&(0x7f0000002100)="2f61b5ce5e316a951bfcb95110f6e83ffe853a0a706f42c3069b3a99e11f584810f357f4558c83a29554c823eb788e6bed13c5058f339b446c9b1af0a136405be8bab0ca9a94dc340339d856da5875e301322d4f5762d0b92f9bfaa5aff0be3b376f4e38c42b6761af4a3f538e24531ce928cde5aaba0451f2c6a065a33c487827a5a19b165c1c0d2182f5ccc2955f61024b75ad979abf8a10910f86ee50e4b5d8ad470f44f915690e4f0390d50fc1fbbc10f8f7bb8d55ceeddbb62513a3717cd86c205908d9fceed69a8d20e10f86f1dd5a47", 0xd3}, {&(0x7f0000002200)="a5e21498b5031ae059155a5bd7a9d158ab55b8d67897f28a409a87a16c18ae58c4d70046a706d41b582d8102d0e12c3c021568521ba4c68c0feace6d1a26a9ebc8764206186fce1fff123d38598be5440948c3cf300c1d8f2be53e62f87b33ac2c90796c03fa5c56acc093707b7854780124c88287bfd44443bf9d3bd51a031169e1ab8a08a267d71b3f0c01b6f0038674fcf24e861f962ca2d826efe2f70f3389d3be59ada5162271f72264b80d45bee0bd3acca2028de9b0104bc4db40a226608d156b451dfded3d9ce6b8d64ebd6e646923cd0a5ed89702c57c40305c9d4e281ddd7844baffd6c3e4a39867cf6c36be", 0xf1}], 0x5, 0x0, 0x0, 0x1}}], 0x6, 0x4000000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 10m40.228551234s ago: executing program 57 (id=11230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) 10m39.900905066s ago: executing program 58 (id=11234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x900) dup3(r3, r2, 0x80000) 10m38.553919577s ago: executing program 59 (id=11246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100042}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x59b2}, @NFULA_CFG_MODE={0xa, 0x2, {0x800, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004805}, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa0000, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xf1c38fa000000000}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x98}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ab4423f9c7ac01066f519546cfc6b0a32d87aa9469ff7347ce538d04dad07b23c0fa777172d6b8fef5b4d74577958b8630cc178fe60039b42428eadd4272e8a207ad0f95f50a85a95d8acdcaacc5aeaf77df28d6005da6514caae41ff505dd9477a259a6bfdda4235efe5846a2ad214b9aaf877ea66f628dca6bea21240d7ed0adc67f7e094677d4a34a76384c9e5a00a28369614984701943b123a48d245be6cf88caa16e8f50c7a29ca1676c28"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000d005000003209900950000000000000009cad2b97efb75a8cf26dedce5db4a262e850cfea3cd7e6922746448b3d45133d24b496fa852b9dac396733ece1cff534f4c83c40fd9085389f6f33af398c566ab67dd2ae7d2069fd5fab724350dc71b2398b40d2e002668b8eeb70f739a7bb1923432d7766feaafca7c2833938daa491d5cf11e4927424d33963b906898c27d3ce1811ce4fd8741f9accfcf46b884e26e14bf49a4f2a51cec037911cb4aee4462589b2cf79800000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) syslog(0x9, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r10, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 10m14.522221939s ago: executing program 60 (id=11415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x4, 0x1, 0x1, 0x5], 0x1, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 10m13.006682107s ago: executing program 61 (id=11446): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m8.971513262s ago: executing program 62 (id=11472): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c64028022430ec54bcac24b40920da92af56d3"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac141414}, 0x5}, 0x1c, 0x0}}], 0x1, 0x80) open(&(0x7f00000001c0)='./file0\x00', 0x40c0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x14, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b116300000000008510000002000000ae4040bcb200000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 10m8.019985375s ago: executing program 63 (id=11483): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0x40, 0x4, {0x0, 0x2}, 0xc, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r4, &(0x7f0000000540)="1896d7236edfb216dee397ee16d6fe256f02c72fe4598171b27b52260a4d7263166f74a87f71d1b15991208eedddd582ba68bbdbe5a1f55593a464aaea925a06c25a01e409956f07364a36c8fbc687f62b27275382311c63df0ac18ba97838ef4e61cf7e2c3bca73014a5f92eb6d59f1f11a2b3cacbdcf51f78337363a5213108ec9f2fef7ad237b0829efb5fd4f1cf67464948dee43ed91b4ccae37469230bbc7af8e31361181cfa6e632df2d4cf6a77ada450b4f32823919bde831934c96e2ccba578bacc51b16fc711ab8e7be6d9bd48eff98316c", 0xd6, 0x880, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) recvfrom$inet_nvme(r0, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r2, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m58.680448939s ago: executing program 2 (id=11551): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x80, 0x2, 0x5, 0xd79a}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x28020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) rt_sigqueueinfo(0x0, 0x38, 0x0) gettid() alarm(0x8000000000000001) 9m51.82727915s ago: executing program 8 (id=11568): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 9m51.699008042s ago: executing program 8 (id=11569): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(r0, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m51.627884479s ago: executing program 8 (id=11570): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4018021}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 9m50.587687461s ago: executing program 65 (id=11502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) 9m46.493761481s ago: executing program 66 (id=11529): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(r0, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r2, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xf, 0x59032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x3, 0x4, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x64, 0x0, 0xd, 0x29, 0x0, @broadcast, @broadcast, {[@end, @rr={0x7, 0x1f, 0xaa, [@rand_addr=0x64010100, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x14, 0xfffffffffffffffc, [{0x6, 0x9, "cdc38cd909c488"}, {0x1, 0x5, "73ca71"}]}, @end, @timestamp_addr={0x44, 0x34, 0x3e, 0x1, 0x2, [{@private=0xa010102, 0x9}, {@rand_addr=0x64010102, 0x9}, {@remote, 0xd}, {@rand_addr=0x64010100, 0xffffffff}, {@private=0xa010101, 0x1}, {@broadcast, 0x7}]}, @rr={0x7, 0xf, 0xc6, [@local, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x1b, 0xf5, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @multicast1, @private=0xa010100]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10001, 0x1, {{0x21, 0x4, 0x1, 0xc, 0x84, 0x67, 0x0, 0xb, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x34, 0x8f, 0x1, 0x9, [{@loopback, 0x8}, {@multicast2, 0x8000}, {@multicast1, 0x7390}, {@loopback, 0x401}, {@multicast1, 0xb}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0x6, [{@rand_addr=0x64010101, 0xffffff30}, {@loopback, 0x7}, {@rand_addr=0x64010102, 0x2}]}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x3, [0x4, 0xaa5, 0x7fff, 0x800, 0xd]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x7c, 0x2, {{0x0, 0x0, 0x80}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0x2bacdb8d, 0xd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x3a5020ab618765fe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x80000001, 0x1, 0x9, 0x3c10, 0x1, 0x7}}]}}}]}, 0xac}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0xa2, 0x40, 0x3a7, 0x8, @mcast1, @empty, 0x20, 0x10, 0x5b, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xe0, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xe0}}, 0x68000) syz_io_uring_submit(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x101}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 9m44.447406372s ago: executing program 67 (id=11540): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0/file0', [{0x20, '\x17:*'}, {0x20, '.'}, {0x20, 'GPL\x00'}], 0xa, "c08f8683ef3cc8bf0d3d5e90fb73a14f06108c2a70018ae73c39a34a89c874010af75405788c9e37044e39ae330634c457d1b9b395a05eb3eb90663a161845a00baaa9209b5eec1708426c9ca7a1bdcc53475346d3764ca58ea74d6548ee2d40e4438635ee66d48c7f2eb844c49022bc1529e1b66f9ba80e3783587b0a9ded4e865897c8885131d30a772b2fd3a51f784bd0881c8c40db705d0b7d7d73db14cc709ad98d62bdd14f03da01e0c578f78b494101d8672501cc516191900e8a1a5efe70f5b560e34f8732d54372c4acff4dcbfc2108ac91222ce518a6f144295c14f0a0515d542d38d05fc6eb518d8355ee48bd79be8666ea"}, 0x113) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x7f, 0x46, 0x0, 0x6}]}) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9m43.486572006s ago: executing program 68 (id=11551): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x80, 0x2, 0x5, 0xd79a}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x28020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) rt_sigqueueinfo(0x0, 0x38, 0x0) gettid() alarm(0x8000000000000001) 9m36.468736712s ago: executing program 69 (id=11570): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4018021}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x62040200) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 9m17.200716578s ago: executing program 70 (id=11690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff09) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x200000000000003a, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x3, 0x1, 0x3, 0x7}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000030000000200000020000000000000000000000a030000000000"], 0x0, 0x3e}, 0x28) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000020000103fcffffff000000000220003b9e0000030f000000000001000a010101eb393476bfb250db97b4663f892390810793cc30bccf60f6b187f6bb6e6a4ff736d21123ff47031b29d9637c267c790546032e997b853d69ed1dfb38801c10d67fff64d9e3c4bc9502be1ef8a04309db6f6a8327b98ddf98668bcb59f7f6c65e3f45c55e28ab72d8585879872d58df"], 0x24}}, 0x42094) unshare(0x64000600) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), 0xffffffffffffffff) (rerun: 32) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x401, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x4040884) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="98010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08001e00fc05000008001de1e70800004a001f00e1e63f5f115e21465a433e0f2d99de307198d94532d6997600b6eff67b9b3c7247beb0362996dd6749ecb5aa934eb3008581c86faca624cb00ebb2bb32bcbe2a7f08224112fe59014ddefd4afc5d9551d89b6dce3c0e157ff07315f736f7ef034961fa234db0fb8655000008001e000000005808001e00018000000800f57816fdc02d11dd6d5591caf44454d37c18392d9778389addd7be89c169"], 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) 9m16.926227525s ago: executing program 71 (id=11702): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000004c0)=0x4) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 9m15.856652959s ago: executing program 72 (id=11715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9m11.039349961s ago: executing program 73 (id=11756): r0 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r2, &(0x7f0000001180)=""/4096, 0x1000) pread64(r2, &(0x7f0000000080)=""/220, 0xdc, 0x4009) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x4000010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000300)=0x800, 0x0, 0x4) io_uring_enter(r0, 0x0, 0xe876, 0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x2000000000}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 9m9.265947914s ago: executing program 5 (id=11792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x7fff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) msgctl$IPC_RMID(0x0, 0x0) 9m9.059933734s ago: executing program 5 (id=11793): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x51}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x5, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="e22748e31ffc", 'vlan1\x00'}}, 0x1e) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendfile(r5, r4, 0x0, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x30000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) syslog(0x3, 0x0, 0x0) r9 = io_uring_setup(0x21c2, &(0x7f0000000180)={0x0, 0xf7be, 0x4000, 0x3, 0x2b5}) getpid() io_uring_register$IORING_REGISTER_FILES2(r9, 0xd, &(0x7f0000001740)={0x6, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/195, 0xc3}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/66, 0x42}, {&(0x7f0000000440)=""/54, 0x36}], &(0x7f0000000480)=[0x5, 0x6]}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400ffffffb702000008000000182300"/92, @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000500950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00', 0x0}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1f00000009000000010000000100000020000000", @ANYRES32=r7, @ANYBLOB="001500"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="02000000040000000300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) 9m8.974839472s ago: executing program 5 (id=11795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 9m8.943898976s ago: executing program 5 (id=11797): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="3502000081280000180012800e0001007769726567756172640000000400028008000a00fd"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 9m8.736137316s ago: executing program 5 (id=11801): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r1, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m8.716724628s ago: executing program 5 (id=11803): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r4, &(0x7f0000000540)="1896d7236edfb216dee397ee16d6fe256f02c72fe4598171b27b52260a4d7263166f74a87f71d1b15991208eedddd582ba68bbdbe5a1f55593a464aaea925a06c25a01e409956f07364a36c8fbc687f62b27275382311c63df0ac18ba97838ef4e61cf7e2c3bca73014a5f92eb6d59f1f11a2b3cacbdcf51f78337363a5213108ec9f2fef7ad237b0829efb5fd4f1cf67464948dee43ed91b4ccae37469230bbc7af8e31361181cfa6e632df2d4cf6a77ada450b4f32823919bde831934c96e2ccba578bacc51b16fc711ab8e7be6d9bd48eff98316c", 0xd6, 0x880, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r6, 0x10001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) lsm_get_self_attr(0x69, &(0x7f00000005c0)={0x0, 0x0, 0x7c, 0x5c, ""/92}, &(0x7f0000000680)=0x7c, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062) io_setup(0x1, &(0x7f00000016c0)) preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 9m8.444402134s ago: executing program 1 (id=11810): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x4c, 0x14, 0x905, 0x50bd25, 0x25dfdbfc, {0xa, 0x6, 0x0, 0x0, {0x4e26, 0x4e23, [0x224e, 0x7, 0x6, 0x5], [0xfffffffe, 0x1, 0x4], 0x0, [0x7fffffff, 0xfffffffc]}, 0x8, 0xfffffffd}}, 0x4c}}, 0x4814) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x206102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffffffffffff3c, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00'}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 9m8.345978804s ago: executing program 1 (id=11812): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r1, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m8.298492199s ago: executing program 1 (id=11813): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x509ac2, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x10000800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) unshare(0x20000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0x0) 9m7.411760046s ago: executing program 2 (id=11781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 9m7.325551174s ago: executing program 2 (id=11821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@arp={@loopback, @loopback, 0xffffff00, 0xffffff00, 0x5, 0x4, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x0, 0x200, 0xb, 0xb, 0x9, 'pim6reg\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x1b3}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb, 0x2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0xff000000, 0x7, 0xf, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x401, 0x15c, 0x3, 0x5, 0x6, 0x8, 'vlan0\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0xb}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x18000000, {0x10}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (fail_nth: 4) 9m6.984789507s ago: executing program 2 (id=11822): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r1, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m6.943746591s ago: executing program 2 (id=11825): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbd6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0xffffffffffffffff, &(0x7f00000003c0)="18607651149d7b10b4024fbfdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r8, 0x1, &(0x7f00000001c0)={0x0}) process_vm_writev(r8, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000500)=""/132, 0x84}], 0x3, &(0x7f0000000a00)=[{&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f00000005c0)=""/131, 0x83}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/8, 0x8}], 0x9, 0x0) ptrace$setsig(0x4203, r8, 0x5, &(0x7f0000000280)={0x3a, 0x3, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m4.951186886s ago: executing program 0 (id=11836): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 9m4.923312539s ago: executing program 0 (id=11837): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket(0x2a, 0x4, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r9, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='thermal_temperature\x00', r2, 0x0, 0x402}, 0x18) 9m4.691594361s ago: executing program 0 (id=11838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = syz_io_uring_setup(0x3544, &(0x7f0000000680)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) stat(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x8000, 0x80, 0x7fff, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x7f, 0x2f, 0x0, @empty, @remote}}}}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) setreuid(0xee01, 0x0) setreuid(0xee00, 0x0) sendto$inet6(r0, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='b *'], 0x9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$packet(r9, &(0x7f0000000140)={0x11, 0xf8, r7, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r11, 0x0, 0x80}, 0x18) 9m3.79017395s ago: executing program 0 (id=11839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ed074403000000000000000002000000637396347c572270fb31019c531d44f5d4af0449eb5033be4a95842c65317e619da40f6985208794280c5d3b04b8c21ece5a2f46eefde206852b", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 9m3.701084599s ago: executing program 0 (id=11840): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9m3.679838131s ago: executing program 0 (id=11841): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xd192}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) 9m1.436029371s ago: executing program 74 (id=11779): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) 8m55.061138654s ago: executing program 8 (id=11842): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0xa85, 0xf) 8m54.991921521s ago: executing program 8 (id=11843): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m54.976558152s ago: executing program 8 (id=11844): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r1, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m53.416401635s ago: executing program 75 (id=11803): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r4, &(0x7f0000000540)="1896d7236edfb216dee397ee16d6fe256f02c72fe4598171b27b52260a4d7263166f74a87f71d1b15991208eedddd582ba68bbdbe5a1f55593a464aaea925a06c25a01e409956f07364a36c8fbc687f62b27275382311c63df0ac18ba97838ef4e61cf7e2c3bca73014a5f92eb6d59f1f11a2b3cacbdcf51f78337363a5213108ec9f2fef7ad237b0829efb5fd4f1cf67464948dee43ed91b4ccae37469230bbc7af8e31361181cfa6e632df2d4cf6a77ada450b4f32823919bde831934c96e2ccba578bacc51b16fc711ab8e7be6d9bd48eff98316c", 0xd6, 0x880, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$can_bcm(r0, 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000007c0)=""/245, 0xf5, 0x2060, &(0x7f00000008c0)=@ll={0x11, 0x6, r1, 0x1, 0x80, 0x6, @remote}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3.819936046s ago: executing program 6 (id=24309): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 3.014764075s ago: executing program 6 (id=24327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 2.812518165s ago: executing program 6 (id=24328): pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000000)) fdatasync(r2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000904c0000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28042, 0x90) creat(&(0x7f0000000200)='./file1\x00', 0x12e) fallocate(r5, 0x1, 0x0, 0x8000c62) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munlockall() 2.479861617s ago: executing program 4 (id=24335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.393854876s ago: executing program 4 (id=24336): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000010000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') pread64(r6, 0x0, 0x0, 0x4009) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=@base={0x1e, 0x5dc8dcd3, 0x1, 0x6, 0x20000, r6, 0x80000000, '\x00', 0x0, r4, 0x2, 0x1, 0x3}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x401}, 0x11) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000ddffff94000044679a206f982c905eb12adc0fcbfac06d40e5d23ebc6476c4a68979dd5566"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@ipv6_getaddr={0x20, 0x16, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x40, 0xa, 0xfd}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x20}}, 0xc800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.059774708s ago: executing program 6 (id=24340): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) readv(r7, &(0x7f0000001900)=[{&(0x7f0000000400)=""/152, 0x98}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 1.63258146s ago: executing program 9 (id=24342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0xfff7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1347, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xffffffff, 0x0, 0x10001, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x100, 0x0, 0x8a, 0x2f000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x3, 0x20, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x8000009, 0x934a, {0x10, 0x0, 0x5, 0x7, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 1.619370982s ago: executing program 9 (id=24343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) flistxattr(r2, &(0x7f0000000240)=""/218, 0xda) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) 1.517693611s ago: executing program 4 (id=24344): add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) 1.505737662s ago: executing program 4 (id=24345): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x1}, 0x1c) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0800154ccb4500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4089, &(0x7f0000001000)=0xff9) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) bind$inet(r4, &(0x7f0000001040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x25, 0x1, 0x2, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (rerun: 64) 1.443552249s ago: executing program 4 (id=24347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x3db}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.114125021s ago: executing program 9 (id=24350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x3db}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 1.070380235s ago: executing program 7 (id=24351): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a04000000000061111400000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 981.864374ms ago: executing program 7 (id=24352): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a04000000000061111400000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x4, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x8008, 0x9, 0x10}, &(0x7f00000006c0)=0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 959.300496ms ago: executing program 6 (id=24353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 879.161644ms ago: executing program 3 (id=24354): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 866.888075ms ago: executing program 7 (id=24355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9423000040100100080020"], 0x60}, 0x1, 0xba01}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 852.597006ms ago: executing program 3 (id=24356): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x400, 0x6, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x51, 0x4, 0x0, @remote, @remote, {[@generic={0x7, 0x2}]}}}}}) (fail_nth: 1) 851.960897ms ago: executing program 7 (id=24357): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0xfff7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1347, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xffffffff, 0x0, 0x10001, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x100, 0x0, 0x8a, 0x2f000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x3, 0x20, 0x0, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x8000009, 0x934a, {0x10, 0x0, 0x5, 0x7, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 826.208579ms ago: executing program 3 (id=24358): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r3 = syz_io_uring_setup(0x66e, 0x0, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x8080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fsmount(r1, 0x0, 0xa) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00'}) bind$packet(r7, 0x0, 0x0) r9 = dup2(r7, r7) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) 824.451899ms ago: executing program 7 (id=24359): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0xd4d, &(0x7f0000001500)={0x0, 0xdb60, 0x40, 0x3, 0x211}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480), 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 469.869174ms ago: executing program 9 (id=24360): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='defcontext']) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x3, "1072d3a58857f1a13845faf777925ea0200107c6986e781fc236365c26f2d951", "91d23d5aece01545012fb375506a4be3ef0d5290214df8a9eb3893e88d393d0a", "1cab04b6c7a8d53adbf74b9fdf802c6ca7e821182829accc5d630661163eff13", "482b214760f688f8ac675f7f50e47734eb8b563bdad46161bec4328f28fe9a02", "d5bd983749e9adaad4e27a1f99827424c3e90353fd93cc264dcc45dcb9399307", "626cfbe370cdc6869de8dc44", 0xe, 0xbd, 0x2, 0x2, 0x10}}) 468.654914ms ago: executing program 7 (id=24361): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0ec404000000a6d7570e99102d08f25b15ba4dc9e367eb7c80d4bf61d02d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r5, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 466.535744ms ago: executing program 9 (id=24362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in=@multicast1, {0x0, 0x0, 0x4, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 464.871674ms ago: executing program 4 (id=24363): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x7) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) r2 = syz_clone3(&(0x7f0000000680)={0xc2810400, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000005c0), {0x1e}, &(0x7f0000002c80)=""/4107, 0x100b, &(0x7f0000002b80)=""/247, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000700)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1000000004000000080000000200", @ANYRES32=0x1, @ANYBLOB="00000000000000000000001b00000000000000004e274be1ed9f27e28c0e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r6, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d9", 0x1b1}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000ca8d65020a130809d922ee4d0cbd750000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 310.945449ms ago: executing program 9 (id=24364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006cd7c383b90d00000000000000000000e7f58502007df3e50000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r8, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}]}, 0x34}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 281.629732ms ago: executing program 3 (id=24365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12141, 0x0) (fail_nth: 2) 90.645571ms ago: executing program 3 (id=24366): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setresuid(0xee00, 0xee00, 0x0) 89.893491ms ago: executing program 6 (id=24367): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a04000000000061111400000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x40200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(r0, 0x4, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x8008, 0x9, 0x10}, &(0x7f00000006c0)=0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 0s ago: executing program 3 (id=24368): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) kernel console output (not intermixed with test programs): 8389][T10830] dump_stack+0x15/0x1b [ 1470.108403][T10830] should_fail_ex+0x265/0x280 [ 1470.108521][T10830] should_fail+0xb/0x20 [ 1470.108536][T10830] should_fail_usercopy+0x1a/0x20 [ 1470.108630][T10830] _copy_from_iter+0xd2/0xe80 [ 1470.108653][T10830] ? __build_skb_around+0x1ab/0x200 [ 1470.108678][T10830] ? __alloc_skb+0x223/0x320 [ 1470.108751][T10830] netlink_sendmsg+0x471/0x6b0 [ 1470.108768][T10830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.108783][T10830] __sock_sendmsg+0x145/0x180 [ 1470.108805][T10830] ____sys_sendmsg+0x31e/0x4e0 [ 1470.108915][T10830] ___sys_sendmsg+0x17b/0x1d0 [ 1470.108953][T10830] __x64_sys_sendmsg+0xd4/0x160 [ 1470.108983][T10830] x64_sys_call+0x191e/0x3000 [ 1470.109079][T10830] do_syscall_64+0xd2/0x200 [ 1470.109096][T10830] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1470.109122][T10830] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1470.109149][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.109179][T10830] RIP: 0033:0x7fb32d69efc9 [ 1470.109218][T10830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.109235][T10830] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.109254][T10830] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1470.109265][T10830] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1470.109275][T10830] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.109341][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.109352][T10830] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1470.109371][T10830] [ 1470.460973][T10850] lo speed is unknown, defaulting to 1000 [ 1470.511071][T10856] loop9: detected capacity change from 0 to 1024 [ 1470.559434][T10856] EXT4-fs: Ignoring removed orlov option [ 1470.625919][T10856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.778946][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.839899][T10868] veth29: entered promiscuous mode [ 1470.855020][T10872] netlink: '+}[@': attribute type 13 has an invalid length. [ 1470.884131][T10874] bridge: RTM_NEWNEIGH with invalid ether address [ 1470.899126][T10876] lo speed is unknown, defaulting to 1000 [ 1470.908126][T10878] FAULT_INJECTION: forcing a failure. [ 1470.908126][T10878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.922216][T10878] CPU: 1 UID: 0 PID: 10878 Comm: syz.4.23334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1470.922249][T10878] Tainted: [W]=WARN [ 1470.922333][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1470.922344][T10878] Call Trace: [ 1470.922350][T10878] [ 1470.922357][T10878] __dump_stack+0x1d/0x30 [ 1470.922397][T10878] dump_stack_lvl+0xe8/0x140 [ 1470.922415][T10878] dump_stack+0x15/0x1b [ 1470.922432][T10878] should_fail_ex+0x265/0x280 [ 1470.922459][T10878] should_fail+0xb/0x20 [ 1470.922474][T10878] should_fail_usercopy+0x1a/0x20 [ 1470.922566][T10878] strncpy_from_user+0x25/0x230 [ 1470.922591][T10878] strncpy_from_user_nofault+0x68/0xf0 [ 1470.922612][T10878] bpf_probe_read_user_str+0x2a/0x70 [ 1470.922712][T10878] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 1470.922728][T10878] bpf_trace_run2+0x107/0x1c0 [ 1470.922753][T10878] ? _destroy_id+0x914/0xa30 [ 1470.922772][T10878] ? _destroy_id+0x914/0xa30 [ 1470.922859][T10878] kfree+0x351/0x400 [ 1470.922882][T10878] _destroy_id+0x914/0xa30 [ 1470.922899][T10878] ? _raw_spin_unlock_irq+0x26/0x50 [ 1470.922921][T10878] destroy_id_handler_unlock+0x64/0x130 [ 1470.922992][T10878] rdma_destroy_id+0x21/0x30 [ 1470.923049][T10878] ucma_destroy_private_ctx+0xcc/0x640 [ 1470.923103][T10878] ucma_create_id+0x214/0x250 [ 1470.923169][T10878] ucma_write+0x1b3/0x250 [ 1470.923185][T10878] ? __pfx_ucma_write+0x10/0x10 [ 1470.923203][T10878] vfs_write+0x269/0x960 [ 1470.923252][T10878] ? __rcu_read_unlock+0x4f/0x70 [ 1470.923283][T10878] ? __fget_files+0x184/0x1c0 [ 1470.923372][T10878] ksys_write+0xda/0x1a0 [ 1470.923397][T10878] __x64_sys_write+0x40/0x50 [ 1470.923418][T10878] x64_sys_call+0x2802/0x3000 [ 1470.923439][T10878] do_syscall_64+0xd2/0x200 [ 1470.923508][T10878] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1470.923563][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.923583][T10878] RIP: 0033:0x7fe63e04efc9 [ 1470.923633][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.923651][T10878] RSP: 002b:00007fe63caaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1470.923670][T10878] RAX: ffffffffffffffda RBX: 00007fe63e2a5fa0 RCX: 00007fe63e04efc9 [ 1470.923682][T10878] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1470.923693][T10878] RBP: 00007fe63caaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.923761][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.923774][T10878] R13: 00007fe63e2a6038 R14: 00007fe63e2a5fa0 R15: 00007ffd9502c148 [ 1470.923791][T10878] [ 1470.947856][T10883] loop7: detected capacity change from 0 to 512 [ 1471.204081][T10883] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1471.216035][T10883] EXT4-fs (loop7): 1 truncate cleaned up [ 1471.222640][T10883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1471.245295][T10883] net_ratelimit: 218 callbacks suppressed [ 1471.245356][T10883] netlink: zone id is out of range [ 1471.256550][T10883] netlink: zone id is out of range [ 1471.261912][T10883] netlink: zone id is out of range [ 1471.268090][T10883] netlink: zone id is out of range [ 1471.277332][T10883] netlink: zone id is out of range [ 1471.282698][T10883] netlink: zone id is out of range [ 1471.288079][T10883] netlink: zone id is out of range [ 1471.293593][T10883] netlink: zone id is out of range [ 1471.298943][T10883] netlink: zone id is out of range [ 1471.304250][T10883] netlink: zone id is out of range [ 1471.336207][T10901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10901 comm=syz.4.23342 [ 1471.380173][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.380375][T10901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.414198][T10901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.427807][T10899] loop9: detected capacity change from 0 to 8192 [ 1471.710762][T10909] macvtap0: entered promiscuous mode [ 1471.716877][T10909] macvtap0: left promiscuous mode [ 1471.743437][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 1471.743450][ T29] audit: type=1400 audit(1761311445.935:105173): avc: denied { mount } for pid=10910 comm="syz.9.23347" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1471.792005][ T29] audit: type=1400 audit(1761311445.985:105174): avc: denied { watch } for pid=10914 comm="syz.3.23349" path="/215" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1471.841737][T10919] loop9: detected capacity change from 0 to 1024 [ 1471.849156][T10919] EXT4-fs: Ignoring removed orlov option [ 1471.869732][T10919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.886526][ T29] audit: type=1326 audit(1761311446.085:105175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1471.911025][ T29] audit: type=1326 audit(1761311446.085:105176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1471.935881][ T29] audit: type=1326 audit(1761311446.085:105177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1471.960087][ T29] audit: type=1326 audit(1761311446.085:105178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1471.998584][ T29] audit: type=1326 audit(1761311446.195:105179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1472.023961][ T29] audit: type=1326 audit(1761311446.195:105180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1472.050013][ T29] audit: type=1326 audit(1761311446.195:105181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa69a390ee7 code=0x7ffc0000 [ 1472.074467][ T29] audit: type=1326 audit(1761311446.195:105182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10918 comm="syz.9.23351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa69a390e5c code=0x7ffc0000 [ 1472.200243][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.288972][T10945] tmpfs: Bad value for 'mpol' [ 1472.352857][T10934] siw: device registration error -23 [ 1472.693475][T10958] siw: device registration error -23 [ 1472.930671][T11003] __nla_validate_parse: 5 callbacks suppressed [ 1472.930686][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23375'. [ 1473.033153][T10992] siw: device registration error -23 [ 1473.069549][T11018] futex_wake_op: syz.7.23378 tries to shift op by 144; fix this program [ 1473.252894][T11031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23384'. [ 1473.346174][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23388'. [ 1473.351587][T11045] netlink: '+}[@': attribute type 13 has an invalid length. [ 1473.386955][T11047] bridge: RTM_NEWNEIGH with invalid ether address [ 1473.465973][T11055] FAULT_INJECTION: forcing a failure. [ 1473.465973][T11055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.479861][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.3.23394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1473.479891][T11055] Tainted: [W]=WARN [ 1473.479919][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1473.479930][T11055] Call Trace: [ 1473.479936][T11055] [ 1473.479943][T11055] __dump_stack+0x1d/0x30 [ 1473.479963][T11055] dump_stack_lvl+0xe8/0x140 [ 1473.480029][T11055] dump_stack+0x15/0x1b [ 1473.480124][T11055] should_fail_ex+0x265/0x280 [ 1473.480150][T11055] should_fail+0xb/0x20 [ 1473.480163][T11055] should_fail_usercopy+0x1a/0x20 [ 1473.480211][T11055] strncpy_from_user+0x25/0x230 [ 1473.480235][T11055] ? kmem_cache_alloc_noprof+0x242/0x480 [ 1473.480261][T11055] ? getname_flags+0x80/0x3b0 [ 1473.480289][T11055] getname_flags+0xae/0x3b0 [ 1473.480379][T11055] do_sys_openat2+0x60/0x110 [ 1473.480396][T11055] __x64_sys_openat+0xf2/0x120 [ 1473.480457][T11055] x64_sys_call+0x2eab/0x3000 [ 1473.480478][T11055] do_syscall_64+0xd2/0x200 [ 1473.480496][T11055] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1473.480520][T11055] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1473.480544][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.480625][T11055] RIP: 0033:0x7fb32d69efc9 [ 1473.480639][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.480686][T11055] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1473.480705][T11055] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1473.480777][T11055] RDX: 0000000000000042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1473.480788][T11055] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.480798][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.480808][T11055] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1473.480826][T11055] [ 1473.510301][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.6.23397'. [ 1473.687107][T11070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11070 comm=syz.4.23400 [ 1473.749398][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23403'. [ 1473.759861][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23402'. [ 1473.777962][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.796626][T11077] veth23: entered promiscuous mode [ 1473.802353][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.950367][T11090] tmpfs: Bad value for 'mpol' [ 1474.052889][T11102] syzkaller0: entered promiscuous mode [ 1474.058830][T11102] syzkaller0: entered allmulticast mode [ 1474.102255][T11091] siw: device registration error -23 [ 1474.166697][T11110] netlink: 32 bytes leftover after parsing attributes in process `syz.7.23413'. [ 1474.192623][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23416'. [ 1474.202074][T11115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.210788][T11115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.223887][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23415'. [ 1474.233719][T11120] FAULT_INJECTION: forcing a failure. [ 1474.233719][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.247268][T11120] CPU: 1 UID: 0 PID: 11120 Comm: syz.7.23417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1474.247299][T11120] Tainted: [W]=WARN [ 1474.247305][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1474.247316][T11120] Call Trace: [ 1474.247323][T11120] [ 1474.247332][T11120] __dump_stack+0x1d/0x30 [ 1474.247410][T11120] dump_stack_lvl+0xe8/0x140 [ 1474.247429][T11120] dump_stack+0x15/0x1b [ 1474.247446][T11120] should_fail_ex+0x265/0x280 [ 1474.247534][T11120] should_failslab+0x8c/0xb0 [ 1474.247557][T11120] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1474.247633][T11120] ? __alloc_skb+0x101/0x320 [ 1474.247675][T11120] __alloc_skb+0x101/0x320 [ 1474.247779][T11120] pfkey_sendmsg+0xd7/0x900 [ 1474.247805][T11120] ? avc_has_perm+0xf7/0x180 [ 1474.247853][T11120] ? selinux_socket_sendmsg+0x175/0x1b0 [ 1474.247953][T11120] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1474.247975][T11120] __sock_sendmsg+0x145/0x180 [ 1474.247996][T11120] ____sys_sendmsg+0x31e/0x4e0 [ 1474.248036][T11120] ___sys_sendmsg+0x17b/0x1d0 [ 1474.248115][T11120] __x64_sys_sendmsg+0xd4/0x160 [ 1474.248146][T11120] x64_sys_call+0x191e/0x3000 [ 1474.248166][T11120] do_syscall_64+0xd2/0x200 [ 1474.248282][T11120] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1474.248310][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.248331][T11120] RIP: 0033:0x7f0e7b91efc9 [ 1474.248346][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.248363][T11120] RSP: 002b:00007f0e7a37f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.248381][T11120] RAX: ffffffffffffffda RBX: 00007f0e7bb75fa0 RCX: 00007f0e7b91efc9 [ 1474.248472][T11120] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1474.248484][T11120] RBP: 00007f0e7a37f090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.248494][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.248505][T11120] R13: 00007f0e7bb76038 R14: 00007f0e7bb75fa0 R15: 00007ffea2b830a8 [ 1474.248519][T11120] [ 1474.475576][T11123] bridge: RTM_NEWNEIGH with invalid ether address [ 1474.488165][T11125] bridge: RTM_NEWNEIGH with invalid ether address [ 1474.498752][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23420'. [ 1474.517622][T11127] veth31: entered promiscuous mode [ 1474.585728][T11131] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1474.849975][T11148] siw: device registration error -23 [ 1475.027745][T11168] bridge: RTM_NEWNEIGH with invalid ether address [ 1475.047494][T11159] lo speed is unknown, defaulting to 1000 [ 1475.136185][T11177] syzkaller0: entered promiscuous mode [ 1475.141864][T11177] syzkaller0: entered allmulticast mode [ 1475.593682][T11193] veth21: entered promiscuous mode [ 1475.605387][T11195] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 1475.628523][T11196] macvtap0: entered promiscuous mode [ 1475.674939][T11196] macvtap0: left promiscuous mode [ 1475.687008][T11197] loop9: detected capacity change from 0 to 512 [ 1475.688374][T11195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1475.705904][T11195] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1475.771168][T11197] EXT4-fs error (device loop9): __ext4_fill_super:5512: inode #2: comm syz.9.23441: inode has both inline data and extents flags [ 1475.795375][T11197] EXT4-fs (loop9): get root inode failed [ 1475.801871][T11197] EXT4-fs (loop9): mount failed [ 1475.819974][T11207] bridge: RTM_NEWNEIGH with invalid ether address [ 1476.146504][T11209] loop7: detected capacity change from 0 to 32768 [ 1476.175692][T11225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.185779][T11225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.224214][T11209] loop7: p1 p2 p3 < p5 p6 > [ 1476.242903][T11209] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1476.265182][T11209] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1476.312680][T11240] lo speed is unknown, defaulting to 1000 [ 1476.697058][T11243] siw: device registration error -23 [ 1476.757671][T11273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11273 comm=syz.4.23469 [ 1476.815949][T11276] bridge: RTM_NEWNEIGH with invalid ether address [ 1476.825377][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.846237][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.890360][T11278] veth15: entered promiscuous mode [ 1476.963718][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 1476.963732][ T29] audit: type=1326 audit(1761311451.155:105522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1476.999183][ T29] audit: type=1326 audit(1761311451.195:105523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1477.023008][ T29] audit: type=1326 audit(1761311451.195:105524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1477.047232][ T29] audit: type=1326 audit(1761311451.195:105525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1477.071769][ T29] audit: type=1326 audit(1761311451.255:105526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb32d6a0ee7 code=0x7ffc0000 [ 1477.096473][ T29] audit: type=1326 audit(1761311451.255:105527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb32d6a0e5c code=0x7ffc0000 [ 1477.120519][ T29] audit: type=1326 audit(1761311451.255:105528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb32d6a0d94 code=0x7ffc0000 [ 1477.144349][ T29] audit: type=1326 audit(1761311451.255:105529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb32d6a0d94 code=0x7ffc0000 [ 1477.168585][ T29] audit: type=1326 audit(1761311451.255:105530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb32d69dc2a code=0x7ffc0000 [ 1477.192664][ T29] audit: type=1326 audit(1761311451.255:105531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.3.23471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1477.346069][T11288] futex_wake_op: syz.9.23475 tries to shift op by 144; fix this program [ 1477.549205][T11309] macsec1: entered allmulticast mode [ 1477.555345][T11309] syz_tun: entered allmulticast mode [ 1477.562846][T11309] syz_tun: left allmulticast mode [ 1477.718891][T11318] bridge: RTM_NEWNEIGH with invalid ether address [ 1478.025109][T11346] bridge: RTM_NEWNEIGH with invalid ether address [ 1478.061696][T11350] __nla_validate_parse: 6 callbacks suppressed [ 1478.061742][T11350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23501'. [ 1478.136545][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23505'. [ 1478.146055][T11358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.155271][T11358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.271213][T11364] netlink: 'syz.9.23506': attribute type 10 has an invalid length. [ 1478.300786][T11364] team0: Port device dummy0 added [ 1478.306686][T11373] futex_wake_op: syz.6.23508 tries to shift op by 144; fix this program [ 1478.317939][T11364] netlink: 'syz.9.23506': attribute type 10 has an invalid length. [ 1478.326433][T11373] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.23508'. [ 1478.340567][T11364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1478.353647][T11364] team0: Failed to send options change via netlink (err -105) [ 1478.353714][T11364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1478.355396][T11364] team0: Port device dummy0 removed [ 1478.356640][T11364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1478.471128][T11354] siw: device registration error -23 [ 1478.519030][T11386] rdma_rxe: rxe_newlink: failed to add lo [ 1478.600021][T11390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23513'. [ 1478.657641][T11402] 9pnet: Unknown protocol version 9p2 [ 1478.698729][T11380] siw: device registration error -23 [ 1478.747074][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23517'. [ 1478.756947][T11409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.765004][T11409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.895149][T11414] netlink: '+}[@': attribute type 13 has an invalid length. [ 1478.934750][T11418] loop9: detected capacity change from 0 to 1024 [ 1478.941910][T11418] EXT4-fs: Ignoring removed orlov option [ 1478.959667][T11418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.083740][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.290456][T11436] netlink: 'syz.6.23528': attribute type 10 has an invalid length. [ 1479.299850][T11436] team0: Port device dummy0 added [ 1479.305764][T11436] netlink: 'syz.6.23528': attribute type 10 has an invalid length. [ 1479.314491][T11436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1479.324506][T11436] team0: Failed to send options change via netlink (err -105) [ 1479.332143][T11436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1479.341662][T11436] team0: Port device dummy0 removed [ 1479.349093][T11436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1479.423629][T11450] lo speed is unknown, defaulting to 1000 [ 1479.492661][T11437] siw: device registration error -23 [ 1479.617889][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.23531'. [ 1479.686784][T11464] loop7: detected capacity change from 0 to 1024 [ 1479.695435][T11463] loop9: detected capacity change from 0 to 1024 [ 1479.702647][T11463] EXT4-fs: Ignoring removed orlov option [ 1479.711027][T11464] EXT4-fs: Ignoring removed orlov option [ 1479.719632][T11463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.764168][T11464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.878547][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.893768][T11460] siw: device registration error -23 [ 1479.917886][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.929817][T11479] bridge: RTM_NEWNEIGH with invalid ether address [ 1479.958866][T11481] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1479.965510][T11481] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1479.973758][T11481] vhci_hcd vhci_hcd.0: Device attached [ 1479.984656][T11483] loop7: detected capacity change from 0 to 1024 [ 1479.994140][T11483] EXT4-fs: Ignoring removed orlov option [ 1480.013731][T11481] vhci_hcd vhci_hcd.0: port 0 already used [ 1480.028425][T11483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1480.042310][T11495] netlink: '+}[@': attribute type 13 has an invalid length. [ 1480.109003][T11484] vhci_hcd: connection closed [ 1480.109301][T22953] vhci_hcd: stop threads [ 1480.118731][T22953] vhci_hcd: release socket [ 1480.123858][T22953] vhci_hcd: disconnect device [ 1480.174815][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.392392][T11512] netlink: 32 bytes leftover after parsing attributes in process `syz.7.23548'. [ 1480.449447][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23550'. [ 1480.521654][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23552'. [ 1480.540576][T11522] veth17: entered promiscuous mode [ 1480.550508][T11522] 9pnet_fd: Insufficient options for proto=fd [ 1480.649572][T11525] lo speed is unknown, defaulting to 1000 [ 1480.742343][T11529] netlink: 'syz.6.23554': attribute type 10 has an invalid length. [ 1480.752314][T11529] bond0: (slave dummy0): Releasing backup interface [ 1480.761057][T11529] team0: Port device dummy0 added [ 1480.768050][T11529] netlink: 'syz.6.23554': attribute type 10 has an invalid length. [ 1480.784587][T11529] team0: Port device dummy0 removed [ 1480.797526][T11529] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1480.855681][T11534] bridge: RTM_NEWNEIGH with invalid ether address [ 1480.974137][T11542] futex_wake_op: syz.4.23559 tries to shift op by 144; fix this program [ 1480.974733][T11542] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.23559'. [ 1481.005386][T11538] siw: device registration error -23 [ 1481.106492][T11551] veth25: entered promiscuous mode [ 1481.120359][T11551] 9pnet_fd: Insufficient options for proto=fd [ 1481.131277][T11553] rdma_rxe: rxe_newlink: failed to add lo [ 1481.154250][T11555] futex_wake_op: syz.9.23564 tries to shift op by 144; fix this program [ 1481.231449][T11561] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1481.237996][T11561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1481.246541][T11561] vhci_hcd vhci_hcd.0: Device attached [ 1481.255456][T11561] vhci_hcd vhci_hcd.0: port 0 already used [ 1481.321533][T11563] vhci_hcd: connection closed [ 1481.321679][T22953] vhci_hcd: stop threads [ 1481.331065][T22953] vhci_hcd: release socket [ 1481.335722][T22953] vhci_hcd: disconnect device [ 1481.344965][T11574] bridge: RTM_NEWNEIGH with invalid ether address [ 1481.472025][T11581] veth19: entered promiscuous mode [ 1481.481704][T11581] macvtap0: entered promiscuous mode [ 1481.482711][T11583] loop7: detected capacity change from 0 to 1024 [ 1481.487852][T11581] macvtap0: left promiscuous mode [ 1481.494464][T11583] EXT4-fs: Ignoring removed orlov option [ 1481.516488][T11583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.635014][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.658702][T11597] loop7: detected capacity change from 0 to 1024 [ 1481.665579][T11597] EXT4-fs: Ignoring removed orlov option [ 1481.680017][T11597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.796291][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.098252][T11624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11624 comm=syz.6.23590 [ 1482.190707][T11620] siw: device registration error -23 [ 1482.220795][T11624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.230135][T11615] siw: device registration error -23 [ 1482.263614][T11624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.543230][T11662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.552212][T11662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.559672][T11646] siw: device registration error -23 [ 1482.570071][T11662] net_ratelimit: 69 callbacks suppressed [ 1482.570083][T11662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1482.592014][ T1369] lo speed is unknown, defaulting to 1000 [ 1482.598037][ T1369] sz1: Port: 1 Link ACTIVE [ 1482.604827][ T1369] lo speed is unknown, defaulting to 1000 [ 1482.643892][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 1482.643934][ T29] audit: type=1326 audit(1761311456.835:105993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.675245][ T29] audit: type=1326 audit(1761311456.835:105994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.700319][ T29] audit: type=1326 audit(1761311456.835:105995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.725489][ T29] audit: type=1326 audit(1761311456.835:105996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.750001][ T29] audit: type=1326 audit(1761311456.835:105997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.774705][ T29] audit: type=1326 audit(1761311456.835:105998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.781344][T11670] veth21: entered promiscuous mode [ 1482.799040][ T29] audit: type=1326 audit(1761311456.835:105999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.828700][ T29] audit: type=1326 audit(1761311456.835:106000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.853302][ T29] audit: type=1326 audit(1761311456.835:106001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1482.878076][ T29] audit: type=1326 audit(1761311456.835:106002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.9.23605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1483.007335][T11684] siw: device registration error -23 [ 1483.164068][T11707] netlink: 'syz.7.23613': attribute type 10 has an invalid length. [ 1483.175695][T11707] dummy0: entered promiscuous mode [ 1483.227381][T11707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1483.249923][T11718] siw: device registration error -23 [ 1483.429063][T11723] siw: device registration error -23 [ 1483.443955][T11734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1483.528334][T11740] __nla_validate_parse: 9 callbacks suppressed [ 1483.528356][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23622'. [ 1483.561822][T11713] loop9: detected capacity change from 0 to 32768 [ 1483.568826][T11740] veth23: entered promiscuous mode [ 1483.581466][T11740] macvtap0: entered promiscuous mode [ 1483.589079][T11740] macvtap0: left promiscuous mode [ 1483.594763][T11713] loop9: p1 p2 p3 < p5 p6 > [ 1483.600771][T11713] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1483.608715][T11713] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1483.791176][T11749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.806549][T11749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.824743][T11749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1483.842876][T11757] netlink: 'syz.4.23627': attribute type 10 has an invalid length. [ 1483.855129][T11757] team0: Port device dummy0 added [ 1483.873028][T11743] siw: device registration error -23 [ 1483.876028][T11751] netlink: 'syz.4.23627': attribute type 10 has an invalid length. [ 1483.888178][T11751] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1483.897460][T11762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1483.904115][T11762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1483.912749][T11762] vhci_hcd vhci_hcd.0: Device attached [ 1483.919763][T11751] team0: Failed to send options change via netlink (err -105) [ 1483.928010][T11751] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1483.937038][T11769] netlink: 'syz.6.23629': attribute type 10 has an invalid length. [ 1483.938211][T11751] team0: Port device dummy0 removed [ 1483.952706][T11751] dummy0: entered promiscuous mode [ 1483.955556][T11762] vhci_hcd vhci_hcd.0: port 0 already used [ 1483.960962][T11751] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1483.978512][T11769] bond0: (slave dummy0): Releasing backup interface [ 1483.993721][T11776] netlink: 'syz.6.23629': attribute type 10 has an invalid length. [ 1484.013618][T11769] team0: Port device dummy0 added [ 1484.041300][T11776] team0: Port device dummy0 removed [ 1484.046855][T11764] vhci_hcd: connection closed [ 1484.047078][T22967] vhci_hcd: stop threads [ 1484.056147][T22967] vhci_hcd: release socket [ 1484.060687][T22967] vhci_hcd: disconnect device [ 1484.069046][T11776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1484.131774][T11786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1484.216885][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23638'. [ 1484.296457][T11804] netlink: 'syz.7.23643': attribute type 10 has an invalid length. [ 1484.306566][T11804] bond0: (slave dummy0): Releasing backup interface [ 1484.314312][T11804] dummy0: left promiscuous mode [ 1484.321088][T11804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1484.330381][T11804] team0: Failed to send options change via netlink (err -105) [ 1484.338249][T11804] team0: Port device dummy0 added [ 1484.347310][T11804] netlink: 'syz.7.23643': attribute type 10 has an invalid length. [ 1484.356307][T11804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1484.367218][T11804] team0: Failed to send options change via netlink (err -105) [ 1484.375244][T11804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1484.384616][T11804] team0: Port device dummy0 removed [ 1484.391853][T11804] dummy0: entered promiscuous mode [ 1484.398250][T11804] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1484.407236][T11800] loop9: detected capacity change from 0 to 32768 [ 1484.444541][T11800] loop9: p1 p2 p3 < p5 p6 > [ 1484.452470][T11800] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1484.462774][T11800] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1484.629906][T11800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1484.671274][T11825] siw: device registration error -23 [ 1484.690153][T11829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1484.696715][T11829] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1484.705152][T11829] vhci_hcd vhci_hcd.0: Device attached [ 1484.754425][T11829] vhci_hcd vhci_hcd.0: port 0 already used [ 1484.844348][T11830] vhci_hcd: connection closed [ 1484.844513][T22945] vhci_hcd: stop threads [ 1484.854022][T22945] vhci_hcd: release socket [ 1484.858577][T22945] vhci_hcd: disconnect device [ 1484.876126][T11820] lo speed is unknown, defaulting to 1000 [ 1484.954476][T11850] futex_wake_op: syz.9.23655 tries to shift op by 144; fix this program [ 1484.963685][T11850] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.23655'. [ 1485.114533][T11856] sz1: rxe_newlink: already configured on lo [ 1485.154172][T11858] bridge: RTM_NEWNEIGH with invalid ether address [ 1485.527730][T11877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23667'. [ 1485.630191][T11885] 9pnet_fd: Insufficient options for proto=fd [ 1485.683769][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23672'. [ 1485.701365][T11889] veth23: entered promiscuous mode [ 1485.711686][T11889] macvtap0: entered promiscuous mode [ 1485.718624][T11889] macvtap0: left promiscuous mode [ 1486.015353][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23679'. [ 1486.112656][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23683'. [ 1486.194015][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23684'. [ 1486.206168][T11896] siw: device registration error -23 [ 1486.259626][T11928] veth25: entered promiscuous mode [ 1486.267371][T11934] macvtap0: entered promiscuous mode [ 1486.273318][T11934] macvtap0: left promiscuous mode [ 1486.319530][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23689'. [ 1486.332128][T11941] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1486.361576][T11939] veth27: entered promiscuous mode [ 1486.382500][T11947] futex_wake_op: syz.4.23693 tries to shift op by 144; fix this program [ 1486.620040][T11970] 9pnet_fd: Insufficient options for proto=fd [ 1486.911679][T11983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11983 comm=syz.9.23706 [ 1486.949679][T11983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.958483][T11983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.261078][T11995] netlink: 'syz.4.23710': attribute type 10 has an invalid length. [ 1487.273420][T11995] $Hÿ: (slave dummy0): Releasing backup interface [ 1487.280870][T11995] dummy0: left promiscuous mode [ 1487.291212][T11995] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.302338][T11995] team0: Failed to send options change via netlink (err -105) [ 1487.309980][T11995] team0: Port device dummy0 added [ 1487.320006][T12004] netlink: 'syz.4.23710': attribute type 10 has an invalid length. [ 1487.330481][T12004] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.343482][T12004] team0: Failed to send options change via netlink (err -105) [ 1487.352717][T12004] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.362608][T12004] team0: Port device dummy0 removed [ 1487.369512][T12004] dummy0: entered promiscuous mode [ 1487.375444][T12004] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1487.478026][T12009] siw: device registration error -23 [ 1487.541451][T12014] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 1487.550160][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.560395][T12014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1487.597006][T12021] futex_wake_op: syz.3.23720 tries to shift op by 144; fix this program [ 1487.615376][T12022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1487.678582][T12024] netlink: 'syz.4.23721': attribute type 10 has an invalid length. [ 1487.688401][T12024] $Hÿ: (slave dummy0): Releasing backup interface [ 1487.695846][T12024] dummy0: left promiscuous mode [ 1487.702721][T12024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.711934][T12024] team0: Failed to send options change via netlink (err -105) [ 1487.719898][T12024] team0: Port device dummy0 added [ 1487.728056][T12024] netlink: 'syz.4.23721': attribute type 10 has an invalid length. [ 1487.738149][T12024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.749236][T12024] team0: Failed to send options change via netlink (err -105) [ 1487.758568][T12024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.768512][T12024] team0: Port device dummy0 removed [ 1487.775841][T12024] dummy0: entered promiscuous mode [ 1487.781762][T12024] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1487.838315][T12044] netlink: 'syz.4.23728': attribute type 10 has an invalid length. [ 1487.847665][T12044] $Hÿ: (slave dummy0): Releasing backup interface [ 1487.854935][T12044] dummy0: left promiscuous mode [ 1487.861865][T12044] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.870760][T12044] team0: Failed to send options change via netlink (err -105) [ 1487.878342][T12044] team0: Port device dummy0 added [ 1487.887682][T12044] netlink: 'syz.4.23728': attribute type 10 has an invalid length. [ 1487.896135][T12044] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.908573][T12044] team0: Failed to send options change via netlink (err -105) [ 1487.916571][T12044] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1487.925751][T12044] team0: Port device dummy0 removed [ 1487.932897][T12044] dummy0: entered promiscuous mode [ 1487.938931][T12044] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1487.979230][T12050] veth25: entered promiscuous mode [ 1487.985927][T12052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12052 comm=syz.9.23731 [ 1488.025632][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.034455][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.056497][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 1488.056511][ T29] audit: type=1326 audit(1761311462.255:106328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1488.088634][ T29] audit: type=1326 audit(1761311462.295:106329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1488.112447][ T29] audit: type=1326 audit(1761311462.295:106330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1488.136902][ T29] audit: type=1326 audit(1761311462.295:106331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1488.161267][ T29] audit: type=1326 audit(1761311462.295:106332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe63e050ee7 code=0x7ffc0000 [ 1488.185036][ T29] audit: type=1326 audit(1761311462.295:106333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe63e050e5c code=0x7ffc0000 [ 1488.208893][ T29] audit: type=1326 audit(1761311462.295:106334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe63e050d94 code=0x7ffc0000 [ 1488.233147][ T29] audit: type=1326 audit(1761311462.295:106335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe63e050d94 code=0x7ffc0000 [ 1488.257316][ T29] audit: type=1326 audit(1761311462.295:106336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63e04dc2a code=0x7ffc0000 [ 1488.281093][ T29] audit: type=1326 audit(1761311462.295:106337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12049 comm="syz.4.23730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1488.570731][T12078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1488.647326][T12089] lo speed is unknown, defaulting to 1000 [ 1488.985743][T12092] lo speed is unknown, defaulting to 1000 [ 1489.190347][T12106] __nla_validate_parse: 7 callbacks suppressed [ 1489.190383][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23750'. [ 1489.229891][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23751'. [ 1489.335659][T12108] veth27: entered promiscuous mode [ 1489.407451][T12116] netlink: '+}[@': attribute type 13 has an invalid length. [ 1489.452388][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23754'. [ 1489.576963][T12139] netlink: '+}[@': attribute type 13 has an invalid length. [ 1489.584423][T12139] netlink: '+}[@': attribute type 27 has an invalid length. [ 1489.634781][T12143] loop9: detected capacity change from 0 to 1024 [ 1489.641717][T12143] EXT4-fs: Ignoring removed orlov option [ 1489.655745][T12143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.700919][T12148] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1489.700919][T12148] program syz.4.23765 not setting count and/or reply_len properly [ 1489.724009][T12132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.758264][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.867761][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23773'. [ 1489.972447][T12159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1490.026897][T12182] futex_wake_op: syz.9.23780 tries to shift op by 144; fix this program [ 1490.037908][T12182] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.23780'. [ 1490.052750][T12186] netlink: 'syz.4.23782': attribute type 10 has an invalid length. [ 1490.062451][T12186] $Hÿ: (slave dummy0): Releasing backup interface [ 1490.069999][T12186] dummy0: left promiscuous mode [ 1490.076760][T12186] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1490.085659][T12186] team0: Failed to send options change via netlink (err -105) [ 1490.093226][T12186] team0: Port device dummy0 added [ 1490.100358][T12186] netlink: 'syz.4.23782': attribute type 10 has an invalid length. [ 1490.108902][T12186] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1490.119616][T12186] team0: Failed to send options change via netlink (err -105) [ 1490.127452][T12186] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1490.136610][T12186] team0: Port device dummy0 removed [ 1490.143473][T12186] dummy0: entered promiscuous mode [ 1490.149742][T12186] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1490.172162][T12188] sz1: rxe_newlink: already configured on lo [ 1490.307354][T12191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1490.428836][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23786'. [ 1490.762995][T12215] FAULT_INJECTION: forcing a failure. [ 1490.762995][T12215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.776106][T12215] CPU: 1 UID: 0 PID: 12215 Comm: syz.3.23792 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1490.776203][T12215] Tainted: [W]=WARN [ 1490.776209][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1490.776219][T12215] Call Trace: [ 1490.776226][T12215] [ 1490.776233][T12215] __dump_stack+0x1d/0x30 [ 1490.776254][T12215] dump_stack_lvl+0xe8/0x140 [ 1490.776271][T12215] dump_stack+0x15/0x1b [ 1490.776328][T12215] should_fail_ex+0x265/0x280 [ 1490.776355][T12215] should_fail+0xb/0x20 [ 1490.776368][T12215] should_fail_usercopy+0x1a/0x20 [ 1490.776385][T12215] _copy_to_user+0x20/0xa0 [ 1490.776422][T12215] simple_read_from_buffer+0xb5/0x130 [ 1490.776443][T12215] proc_fail_nth_read+0x10e/0x150 [ 1490.776469][T12215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.776592][T12215] vfs_read+0x1a8/0x770 [ 1490.776615][T12215] ? __rcu_read_unlock+0x4f/0x70 [ 1490.776640][T12215] ? __fget_files+0x184/0x1c0 [ 1490.776727][T12215] ksys_read+0xda/0x1a0 [ 1490.776750][T12215] __x64_sys_read+0x40/0x50 [ 1490.776771][T12215] x64_sys_call+0x27c0/0x3000 [ 1490.776938][T12215] do_syscall_64+0xd2/0x200 [ 1490.776955][T12215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1490.776979][T12215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1490.777006][T12215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.777044][T12215] RIP: 0033:0x7fb32d69d9dc [ 1490.777058][T12215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1490.777074][T12215] RSP: 002b:00007fb32c0ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1490.777093][T12215] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69d9dc [ 1490.777105][T12215] RDX: 000000000000000f RSI: 00007fb32c0ff0a0 RDI: 0000000000000004 [ 1490.777190][T12215] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.777202][T12215] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1490.777213][T12215] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1490.777229][T12215] [ 1490.992433][T12219] netlink: '+}[@': attribute type 13 has an invalid length. [ 1491.038372][T12221] macvtap0: entered promiscuous mode [ 1491.047924][T12221] macvtap0: left promiscuous mode [ 1491.068096][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23798'. [ 1491.083846][T12233] bridge: RTM_NEWNEIGH with invalid ether address [ 1491.140722][T12246] futex_wake_op: syz.6.23807 tries to shift op by 144; fix this program [ 1491.151452][T12246] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.23807'. [ 1491.165895][T12248] bridge: RTM_NEWNEIGH with invalid ether address [ 1491.213077][T12254] futex_wake_op: syz.9.23810 tries to shift op by 144; fix this program [ 1491.275002][T12255] rdma_rxe: rxe_newlink: failed to add lo [ 1491.320573][T12265] No such timeout policy "syz1" [ 1491.359023][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23816'. [ 1491.541352][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23819'. [ 1491.568408][T12267] siw: device registration error -23 [ 1491.948893][T12297] siw: device registration error -23 [ 1492.102199][T12314] loop9: detected capacity change from 0 to 1024 [ 1492.127260][T12314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1492.214981][T12328] netlink: 'syz.4.23830': attribute type 10 has an invalid length. [ 1492.234421][T12328] $Hÿ: (slave dummy0): Releasing backup interface [ 1492.261642][T12328] dummy0: left promiscuous mode [ 1492.277889][T12334] netlink: 'syz.4.23830': attribute type 10 has an invalid length. [ 1492.304463][T12328] team0: Port device dummy0 added [ 1492.322019][T12334] team0: Port device dummy0 removed [ 1492.331549][T12334] dummy0: entered promiscuous mode [ 1492.338169][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.341322][T12334] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1492.453209][T12341] lo speed is unknown, defaulting to 1000 [ 1492.724792][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.955226][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.022102][T12343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.035717][T12358] siw: device registration error -23 [ 1493.226248][T12374] futex_wake_op: syz.4.23837 tries to shift op by 144; fix this program [ 1493.291389][T12355] siw: device registration error -23 [ 1493.407143][T12394] veth19: entered promiscuous mode [ 1493.470102][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 1493.470115][ T29] audit: type=1326 audit(1761311467.665:106641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b91efc9 code=0x7ffc0000 [ 1493.518623][ T29] audit: type=1326 audit(1761311467.695:106642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0e7b91efc9 code=0x7ffc0000 [ 1493.542644][ T29] audit: type=1326 audit(1761311467.695:106643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b91efc9 code=0x7ffc0000 [ 1493.566660][ T29] audit: type=1326 audit(1761311467.695:106644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b91efc9 code=0x7ffc0000 [ 1493.590495][ T29] audit: type=1326 audit(1761311467.695:106645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e7b920ee7 code=0x7ffc0000 [ 1493.614170][ T29] audit: type=1326 audit(1761311467.695:106646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e7b920e5c code=0x7ffc0000 [ 1493.637876][ T29] audit: type=1326 audit(1761311467.695:106647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e7b920d94 code=0x7ffc0000 [ 1493.661933][ T29] audit: type=1326 audit(1761311467.695:106648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e7b920d94 code=0x7ffc0000 [ 1493.686470][ T29] audit: type=1326 audit(1761311467.695:106649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0e7b91dc2a code=0x7ffc0000 [ 1493.686501][ T29] audit: type=1326 audit(1761311467.695:106650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12393 comm="syz.7.23845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b91efc9 code=0x7ffc0000 [ 1493.734345][T12392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.754806][T12399] x_tables: duplicate underflow at hook 1 [ 1493.838299][T12416] macvtap0: entered promiscuous mode [ 1493.844524][T12416] macvtap0: left promiscuous mode [ 1493.953986][T12420] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1493.960552][T12420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1493.968765][T12420] vhci_hcd vhci_hcd.0: Device attached [ 1493.977638][T12420] vhci_hcd vhci_hcd.0: port 0 already used [ 1494.074239][T12424] loop7: detected capacity change from 0 to 32768 [ 1494.095913][T12427] vhci_hcd: connection closed [ 1494.096196][T22953] vhci_hcd: stop threads [ 1494.104121][T12424] loop7: p1 p2 p3 < p5 p6 > [ 1494.105406][T22953] vhci_hcd: release socket [ 1494.114371][T22953] vhci_hcd: disconnect device [ 1494.119394][T12424] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1494.123599][T12441] veth29: entered promiscuous mode [ 1494.134997][T12424] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1494.153034][T12424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1494.363859][T12470] futex_wake_op: syz.6.23876 tries to shift op by 144; fix this program [ 1494.372727][T12470] __nla_validate_parse: 6 callbacks suppressed [ 1494.372816][T12470] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.23876'. [ 1494.505792][T12471] rdma_rxe: rxe_newlink: failed to add lo [ 1494.724010][T12473] siw: device registration error -23 [ 1494.762790][T12485] netlink: 64 bytes leftover after parsing attributes in process `syz.4.23879'. [ 1494.774844][T12485] macvtap0: entered promiscuous mode [ 1494.781103][T12485] macvtap0: left promiscuous mode [ 1494.790368][T12478] loop9: detected capacity change from 0 to 32768 [ 1494.834375][T12478] loop9: p1 p2 p3 < p5 p6 > [ 1494.839934][T12478] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1494.848561][T12478] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1494.864332][T12478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1494.895489][T12478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1494.934062][T12495] netlink: 'syz.3.23885': attribute type 10 has an invalid length. [ 1494.944644][T12495] team0: Port device dummy0 added [ 1494.952292][T12495] netlink: 'syz.3.23885': attribute type 10 has an invalid length. [ 1494.964372][T12495] team0: Port device dummy0 removed [ 1494.971786][T12495] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1494.993071][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23884'. [ 1495.044631][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23889'. [ 1495.085209][T12507] veth27: entered promiscuous mode [ 1495.292549][T12523] loop9: detected capacity change from 0 to 1024 [ 1495.318364][T12527] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1495.364218][T12523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.427760][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23903'. [ 1495.486204][T12542] veth29: entered promiscuous mode [ 1495.493060][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.646686][T12559] bridge: RTM_NEWNEIGH with invalid ether address [ 1495.743935][T12555] siw: device registration error -23 [ 1495.751364][T12550] siw: device registration error -23 [ 1495.776189][T12568] netlink: 'syz.9.23910': attribute type 10 has an invalid length. [ 1495.812507][T12571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.899523][T12579] netlink: 'syz.6.23914': attribute type 10 has an invalid length. [ 1495.907674][T12573] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1495.914231][T12573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1495.922517][T12571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.922528][T12573] vhci_hcd vhci_hcd.0: Device attached [ 1495.925088][T12573] vhci_hcd vhci_hcd.0: port 0 already used [ 1495.951217][T12579] bond0: (slave dummy0): Releasing backup interface [ 1495.958232][T12584] netlink: 'syz.6.23914': attribute type 10 has an invalid length. [ 1495.968560][T12579] team0: Port device dummy0 added [ 1495.987403][T12584] team0: Port device dummy0 removed [ 1495.995094][T12584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1496.058448][T12577] vhci_hcd: connection closed [ 1496.060083][T22967] vhci_hcd: stop threads [ 1496.069194][T22967] vhci_hcd: release socket [ 1496.071558][T12593] bridge: RTM_NEWNEIGH with invalid ether address [ 1496.073622][T22967] vhci_hcd: disconnect device [ 1496.124228][T12601] netlink: 'syz.6.23923': attribute type 10 has an invalid length. [ 1496.134614][T12601] bond0: (slave dummy0): Releasing backup interface [ 1496.164032][T12601] team0: Port device dummy0 added [ 1496.171356][T12601] netlink: 'syz.6.23923': attribute type 10 has an invalid length. [ 1496.200642][T12601] team0: Port device dummy0 removed [ 1496.210347][T12601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1496.341482][T12606] siw: device registration error -23 [ 1496.391234][T12623] 9pnet_fd: Insufficient options for proto=fd [ 1496.562778][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23936'. [ 1496.596583][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23938'. [ 1496.607894][T12651] 9pnet_fd: Insufficient options for proto=fd [ 1496.615149][T12649] veth31: entered promiscuous mode [ 1496.673601][T12657] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1496.767522][T12671] 9pnet_fd: Insufficient options for proto=fd [ 1496.818400][T12683] 9pnet_fd: Insufficient options for proto=fd [ 1496.819926][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23953'. [ 1496.839961][T12686] netlink: 32 bytes leftover after parsing attributes in process `syz.6.23956'. [ 1496.905878][T12692] netlink: 'syz.7.23960': attribute type 10 has an invalid length. [ 1496.924145][T12692] bond0: (slave dummy0): Releasing backup interface [ 1496.944690][T12692] dummy0: left promiscuous mode [ 1496.951856][T12674] loop9: detected capacity change from 0 to 32768 [ 1496.953980][T12692] team0: Port device dummy0 added [ 1496.974135][T12697] netlink: 'syz.7.23960': attribute type 10 has an invalid length. [ 1496.977802][T12696] veth31: entered promiscuous mode [ 1497.004674][T12674] loop9: p1 p2 p3 < p5 p6 > [ 1497.011273][T12697] team0: Port device dummy0 removed [ 1497.016754][T12674] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1497.026863][T12700] netlink: 'syz.3.23963': attribute type 10 has an invalid length. [ 1497.038499][T12674] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1497.039512][T12697] dummy0: entered promiscuous mode [ 1497.051411][T12697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1497.063289][T12700] bond0: (slave dummy0): Releasing backup interface [ 1497.076001][T12700] team0: Port device dummy0 added [ 1497.094852][T12701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1497.124036][T12700] team0: Port device dummy0 removed [ 1497.131439][T12700] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1497.188418][T12674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1497.214160][T12706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1497.254821][T12712] futex_wake_op: syz.3.23968 tries to shift op by 144; fix this program [ 1497.277392][T12714] futex_wake_op: syz.4.23970 tries to shift op by 144; fix this program [ 1497.367657][T12728] bridge: RTM_NEWNEIGH with invalid ether address [ 1497.400994][T12732] macvtap0: entered promiscuous mode [ 1497.407898][T12732] macvtap0: left promiscuous mode [ 1497.648461][T12753] bridge: RTM_NEWNEIGH with invalid ether address [ 1497.826176][T12751] siw: device registration error -23 [ 1497.937291][T12771] loop9: detected capacity change from 0 to 32768 [ 1497.984386][T12771] loop9: p1 p2 p3 < p5 p6 > [ 1497.989573][T12771] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1497.997822][T12771] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1498.133125][T12783] veth33: entered promiscuous mode [ 1498.595281][T12824] loop9: detected capacity change from 0 to 1024 [ 1498.602032][T12824] EXT4-fs: Ignoring removed orlov option [ 1498.612503][T12826] veth33: entered promiscuous mode [ 1498.639750][T12824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.685761][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 1498.685776][ T29] audit: type=1326 audit(1761311472.885:107104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.716980][ T29] audit: type=1326 audit(1761311472.885:107105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.741999][ T29] audit: type=1326 audit(1761311472.885:107106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.765985][ T29] audit: type=1326 audit(1761311472.885:107107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.790332][ T29] audit: type=1326 audit(1761311472.945:107108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.814968][ T29] audit: type=1326 audit(1761311472.945:107109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.839365][ T29] audit: type=1326 audit(1761311472.945:107110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.863517][ T29] audit: type=1326 audit(1761311472.945:107111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.887643][ T29] audit: type=1326 audit(1761311472.945:107112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a38efc9 code=0x7ffc0000 [ 1498.911580][ T29] audit: type=1326 audit(1761311472.945:107113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12823 comm="syz.9.24014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa69a390ee7 code=0x7ffc0000 [ 1498.936167][T12842] bond0: (slave dummy0): Releasing backup interface [ 1498.945035][T12842] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1498.954102][T12842] team0: Failed to send options change via netlink (err -105) [ 1498.960124][T12849] futex_wake_op: syz.7.24024 tries to shift op by 144; fix this program [ 1498.961914][T12842] team0: Port device dummy0 added [ 1498.976577][T12845] bond0: (slave dummy0): Releasing backup interface [ 1498.984866][T12845] team0: Port device dummy0 added [ 1498.991162][T12846] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1499.001252][T12846] team0: Failed to send options change via netlink (err -105) [ 1499.008970][T12846] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1499.019045][T12846] team0: Port device dummy0 removed [ 1499.027610][T12846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1499.045839][T12847] team0: Port device dummy0 removed [ 1499.051618][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.063195][T12847] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1499.090675][T12850] rdma_rxe: rxe_newlink: failed to add lo [ 1499.119529][T12856] bond0: (slave dummy0): Releasing backup interface [ 1499.136074][T12856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1499.148447][T12856] team0: Failed to send options change via netlink (err -105) [ 1499.156277][T12856] team0: Port device dummy0 added [ 1499.172134][T12856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1499.182644][T12856] team0: Failed to send options change via netlink (err -105) [ 1499.190464][T12856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1499.200126][T12856] team0: Port device dummy0 removed [ 1499.207810][T12856] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1499.395995][T12883] __nla_validate_parse: 10 callbacks suppressed [ 1499.396010][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24037'. [ 1499.423304][T12883] veth35: entered promiscuous mode [ 1499.447057][T12891] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1499.471229][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24041'. [ 1499.491555][T12894] veth35: entered promiscuous mode [ 1499.504618][T12898] bridge: RTM_NEWNEIGH with invalid ether address [ 1499.729156][T12906] siw: device registration error -23 [ 1499.879432][T12930] FAULT_INJECTION: forcing a failure. [ 1499.879432][T12930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.892635][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.3.24052 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1499.892668][T12930] Tainted: [W]=WARN [ 1499.892703][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1499.892716][T12930] Call Trace: [ 1499.892722][T12930] [ 1499.892729][T12930] __dump_stack+0x1d/0x30 [ 1499.892748][T12930] dump_stack_lvl+0xe8/0x140 [ 1499.892838][T12930] dump_stack+0x15/0x1b [ 1499.892856][T12930] should_fail_ex+0x265/0x280 [ 1499.892883][T12930] should_fail+0xb/0x20 [ 1499.892902][T12930] should_fail_usercopy+0x1a/0x20 [ 1499.892919][T12930] _copy_from_user+0x1c/0xb0 [ 1499.892941][T12930] __sys_bpf+0x183/0x7c0 [ 1499.892966][T12930] __x64_sys_bpf+0x41/0x50 [ 1499.892994][T12930] x64_sys_call+0x2aee/0x3000 [ 1499.893117][T12930] do_syscall_64+0xd2/0x200 [ 1499.893136][T12930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1499.893163][T12930] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1499.893223][T12930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.893244][T12930] RIP: 0033:0x7fb32d69efc9 [ 1499.893259][T12930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.893276][T12930] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1499.893296][T12930] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1499.893354][T12930] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1499.893367][T12930] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.893379][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.893390][T12930] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1499.893406][T12930] [ 1500.069470][T12926] loop7: detected capacity change from 0 to 32768 [ 1500.087315][T12931] net_ratelimit: 4 callbacks suppressed [ 1500.087325][T12931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1500.114863][T12933] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1500.134280][T12926] loop7: p1 p2 p3 < p5 p6 > [ 1500.139612][T12926] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1500.141293][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24056'. [ 1500.149157][T12937] bridge: RTM_NEWNEIGH with invalid ether address [ 1500.158887][T12926] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1500.192426][T12939] veth37: entered promiscuous mode [ 1500.214133][T12943] 9pnet_fd: Insufficient options for proto=fd [ 1500.462011][T12948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1500.511752][T12948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1500.585792][T12972] bridge: RTM_NEWNEIGH with invalid ether address [ 1500.609133][T12977] FAULT_INJECTION: forcing a failure. [ 1500.609133][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.622031][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.4.24073 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1500.622062][T12977] Tainted: [W]=WARN [ 1500.622068][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.622082][T12977] Call Trace: [ 1500.622090][T12977] [ 1500.622097][T12977] __dump_stack+0x1d/0x30 [ 1500.622121][T12977] dump_stack_lvl+0xe8/0x140 [ 1500.622142][T12977] dump_stack+0x15/0x1b [ 1500.622217][T12977] should_fail_ex+0x265/0x280 [ 1500.622243][T12977] should_failslab+0x8c/0xb0 [ 1500.622265][T12977] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1500.622290][T12977] ? __alloc_skb+0x101/0x320 [ 1500.622420][T12977] __alloc_skb+0x101/0x320 [ 1500.622479][T12977] ? audit_log_start+0x342/0x720 [ 1500.622544][T12977] audit_log_start+0x3a0/0x720 [ 1500.622561][T12977] ? kstrtouint+0x76/0xc0 [ 1500.622589][T12977] audit_seccomp+0x48/0x100 [ 1500.622647][T12977] ? __seccomp_filter+0x82d/0x1250 [ 1500.622693][T12977] __seccomp_filter+0x83e/0x1250 [ 1500.622866][T12977] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1500.623047][T12977] ? vfs_write+0x7e8/0x960 [ 1500.623070][T12977] __secure_computing+0x82/0x150 [ 1500.623166][T12977] syscall_trace_enter+0xcf/0x1e0 [ 1500.623192][T12977] do_syscall_64+0xac/0x200 [ 1500.623209][T12977] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1500.623231][T12977] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1500.623326][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.623349][T12977] RIP: 0033:0x7fe63e04efc9 [ 1500.623426][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.623449][T12977] RSP: 002b:00007fe63caaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1500.623469][T12977] RAX: ffffffffffffffda RBX: 00007fe63e2a5fa0 RCX: 00007fe63e04efc9 [ 1500.623482][T12977] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1500.623493][T12977] RBP: 00007fe63caaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.623572][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.623585][T12977] R13: 00007fe63e2a6038 R14: 00007fe63e2a5fa0 R15: 00007ffd9502c148 [ 1500.623605][T12977] [ 1500.648135][T12974] loop9: detected capacity change from 0 to 764 [ 1500.757773][T12985] FAULT_INJECTION: forcing a failure. [ 1500.757773][T12985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.769425][T12985] CPU: 1 UID: 0 PID: 12985 Comm: syz.6.24076 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1500.769457][T12985] Tainted: [W]=WARN [ 1500.769464][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1500.769476][T12985] Call Trace: [ 1500.769483][T12985] [ 1500.769492][T12985] __dump_stack+0x1d/0x30 [ 1500.769514][T12985] dump_stack_lvl+0xe8/0x140 [ 1500.769549][T12985] dump_stack+0x15/0x1b [ 1500.769565][T12985] should_fail_ex+0x265/0x280 [ 1500.769593][T12985] should_fail+0xb/0x20 [ 1500.769660][T12985] should_fail_usercopy+0x1a/0x20 [ 1500.769679][T12985] strncpy_from_user+0x25/0x230 [ 1500.769703][T12985] ? kmem_cache_alloc_noprof+0x242/0x480 [ 1500.769730][T12985] ? getname_flags+0x80/0x3b0 [ 1500.769837][T12985] getname_flags+0xae/0x3b0 [ 1500.769981][T12985] do_sys_openat2+0x60/0x110 [ 1500.770008][T12985] __x64_sys_openat+0xf2/0x120 [ 1500.770028][T12985] x64_sys_call+0x2eab/0x3000 [ 1500.770049][T12985] do_syscall_64+0xd2/0x200 [ 1500.770135][T12985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1500.770161][T12985] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1500.770234][T12985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.770254][T12985] RIP: 0033:0x7f96299bd810 [ 1500.770269][T12985] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1500.770287][T12985] RSP: 002b:00007f9628426b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1500.770373][T12985] RAX: ffffffffffffffda RBX: 00000000001a3c82 RCX: 00007f96299bd810 [ 1500.770394][T12985] RDX: 00000000001a3c82 RSI: 00007f9628426c10 RDI: 00000000ffffff9c [ 1500.770407][T12985] RBP: 00007f9628426c10 R08: 0000000000000000 R09: 002367732f766564 [ 1500.770421][T12985] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1500.770433][T12985] R13: 00007f9629c16038 R14: 00007f9629c15fa0 R15: 00007ffdd12ce3b8 [ 1500.770450][T12985] [ 1501.071609][T12974] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1501.142939][T13004] loop7: detected capacity change from 0 to 1024 [ 1501.154379][T12992] siw: device registration error -23 [ 1501.160809][T13004] EXT4-fs: Ignoring removed orlov option [ 1501.191988][T13004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.204725][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.6.24087'. [ 1501.311998][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.330195][T13035] loop7: detected capacity change from 0 to 1024 [ 1501.355502][T13035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.381892][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.394528][T13040] FAULT_INJECTION: forcing a failure. [ 1501.394528][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.407297][T13040] CPU: 1 UID: 0 PID: 13040 Comm: syz.6.24097 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1501.407326][T13040] Tainted: [W]=WARN [ 1501.407331][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1501.407341][T13040] Call Trace: [ 1501.407353][T13040] [ 1501.407360][T13040] __dump_stack+0x1d/0x30 [ 1501.407380][T13040] dump_stack_lvl+0xe8/0x140 [ 1501.407397][T13040] dump_stack+0x15/0x1b [ 1501.407412][T13040] should_fail_ex+0x265/0x280 [ 1501.407438][T13040] should_failslab+0x8c/0xb0 [ 1501.407460][T13040] kmem_cache_alloc_noprof+0x50/0x480 [ 1501.407481][T13040] ? mas_alloc_nodes+0x1a2/0x210 [ 1501.407506][T13040] mas_alloc_nodes+0x1a2/0x210 [ 1501.407530][T13040] mas_preallocate+0x2ca/0x510 [ 1501.407557][T13040] __split_vma+0x240/0x650 [ 1501.407581][T13040] ? obj_cgroup_charge_account+0x122/0x1a0 [ 1501.407599][T13040] vms_gather_munmap_vmas+0x17a/0x7b0 [ 1501.407613][T13040] ? mas_find+0x608/0x700 [ 1501.407623][T13040] mmap_region+0x52b/0x1620 [ 1501.407637][T13040] ? __rcu_read_unlock+0x4f/0x70 [ 1501.407652][T13040] ? mntput_no_expire+0x6f/0x440 [ 1501.407673][T13040] do_mmap+0x9b3/0xbe0 [ 1501.407685][T13040] vm_mmap_pgoff+0x17a/0x2e0 [ 1501.407703][T13040] ksys_mmap_pgoff+0x268/0x310 [ 1501.407713][T13040] x64_sys_call+0x14a3/0x3000 [ 1501.407725][T13040] do_syscall_64+0xd2/0x200 [ 1501.407735][T13040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1501.407750][T13040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1501.407766][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.407777][T13040] RIP: 0033:0x7f96299befc9 [ 1501.407786][T13040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.407796][T13040] RSP: 002b:00007f9628427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1501.407808][T13040] RAX: ffffffffffffffda RBX: 00007f9629c15fa0 RCX: 00007f96299befc9 [ 1501.407815][T13040] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000200000ff9000 [ 1501.407822][T13040] RBP: 00007f9628427090 R08: 0000000000000006 R09: 0000000000000000 [ 1501.407829][T13040] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1501.407836][T13040] R13: 00007f9629c16038 R14: 00007f9629c15fa0 R15: 00007ffdd12ce3b8 [ 1501.407847][T13040] [ 1501.777292][T13052] validate_nla: 8 callbacks suppressed [ 1501.777305][T13052] netlink: 'syz.3.24100': attribute type 10 has an invalid length. [ 1501.809235][T13052] bond0: (slave dummy0): Releasing backup interface [ 1501.818051][T13052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1501.827064][T13052] team0: Failed to send options change via netlink (err -105) [ 1501.834824][T13052] team0: Port device dummy0 added [ 1501.841080][T13057] netlink: 'syz.3.24100': attribute type 10 has an invalid length. [ 1501.843109][T13057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1501.868172][T13057] team0: Failed to send options change via netlink (err -105) [ 1501.876463][T13057] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1501.876806][T13057] team0: Port device dummy0 removed [ 1501.879520][T13057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1501.903135][T13048] siw: device registration error -23 [ 1501.947633][T13065] FAULT_INJECTION: forcing a failure. [ 1501.947633][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.960489][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.3.24104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1501.960521][T13065] Tainted: [W]=WARN [ 1501.960607][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1501.960618][T13065] Call Trace: [ 1501.960626][T13065] [ 1501.960634][T13065] __dump_stack+0x1d/0x30 [ 1501.960657][T13065] dump_stack_lvl+0xe8/0x140 [ 1501.960677][T13065] dump_stack+0x15/0x1b [ 1501.960723][T13065] should_fail_ex+0x265/0x280 [ 1501.960753][T13065] ? get_mountpoint+0x17e/0x370 [ 1501.960855][T13065] should_failslab+0x8c/0xb0 [ 1501.960878][T13065] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1501.960904][T13065] get_mountpoint+0x17e/0x370 [ 1501.960929][T13065] do_lock_mount+0x3a5/0x640 [ 1501.961028][T13065] do_loopback+0x182/0x2a0 [ 1501.961049][T13065] path_mount+0x3dc/0xb70 [ 1501.961068][T13065] ? user_path_at+0x109/0x130 [ 1501.961101][T13065] __se_sys_mount+0x28c/0x2e0 [ 1501.961178][T13065] __x64_sys_mount+0x67/0x80 [ 1501.961198][T13065] x64_sys_call+0x2b51/0x3000 [ 1501.961237][T13065] do_syscall_64+0xd2/0x200 [ 1501.961289][T13065] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1501.961346][T13065] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1501.961373][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.961393][T13065] RIP: 0033:0x7fb32d69efc9 [ 1501.961408][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.961453][T13065] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.961469][T13065] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1501.961481][T13065] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 1501.961586][T13065] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.961597][T13065] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 1501.961607][T13065] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1501.961630][T13065] [ 1502.311043][T13093] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1502.584987][T13101] siw: device registration error -23 [ 1502.698177][T13121] netlink: 'syz.7.24121': attribute type 10 has an invalid length. [ 1502.736829][T13121] bond0: (slave dummy0): Releasing backup interface [ 1502.745242][T13121] dummy0: left promiscuous mode [ 1502.750846][T13124] netlink: 'syz.7.24121': attribute type 10 has an invalid length. [ 1502.761021][T13121] team0: Port device dummy0 added [ 1502.768614][T13111] loop9: detected capacity change from 0 to 32768 [ 1502.792190][T13124] team0: Port device dummy0 removed [ 1502.799640][T13124] dummy0: entered promiscuous mode [ 1502.805707][T13124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1502.815222][T13111] loop9: p1 p2 p3 < p5 p6 > [ 1502.830515][T13111] loop9: p2 size 16775168 extends beyond EOD, truncated [ 1502.837984][T13129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.853868][T13135] futex_wake_op: syz.6.24127 tries to shift op by 144; fix this program [ 1502.865739][T13111] loop9: p5 start 4294970168 is beyond EOD, truncated [ 1502.883751][T13140] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1502.895801][T13136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.915994][T13143] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 1503.119992][T13165] netlink: 'syz.9.24139': attribute type 10 has an invalid length. [ 1503.139819][T13165] bond0: (slave dummy0): Releasing backup interface [ 1503.157238][T13165] team0: Port device dummy0 added [ 1503.174433][T13165] netlink: 'syz.9.24139': attribute type 10 has an invalid length. [ 1503.205107][T13146] siw: device registration error -23 [ 1503.228584][T13165] team0: Port device dummy0 removed [ 1503.236709][T13165] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1503.275893][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.24143'. [ 1503.409018][T13187] lo speed is unknown, defaulting to 1000 [ 1503.570853][T13179] loop7: detected capacity change from 0 to 512 [ 1503.578974][T13179] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1503.702874][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 1503.702950][ T29] audit: type=1326 audit(1761311477.895:107676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fe63e081885 code=0x7ffc0000 [ 1503.797748][ T29] audit: type=1326 audit(1761311477.945:107677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.822038][ T29] audit: type=1326 audit(1761311477.945:107678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.847796][ T29] audit: type=1326 audit(1761311477.955:107679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.871993][ T29] audit: type=1326 audit(1761311477.965:107680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.897052][ T29] audit: type=1326 audit(1761311477.975:107681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.921273][ T29] audit: type=1326 audit(1761311477.995:107682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.945699][ T29] audit: type=1326 audit(1761311478.035:107683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.970235][ T29] audit: type=1326 audit(1761311478.045:107684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1503.994285][ T29] audit: type=1326 audit(1761311478.055:107685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.4.24144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1504.091478][T13197] netlink: 'syz.3.24148': attribute type 10 has an invalid length. [ 1504.101857][T13197] bond0: (slave dummy0): Releasing backup interface [ 1504.110878][T13197] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1504.120315][T13197] team0: Failed to send options change via netlink (err -105) [ 1504.127987][T13197] team0: Port device dummy0 added [ 1504.135869][T13197] netlink: 'syz.3.24148': attribute type 10 has an invalid length. [ 1504.149999][T13197] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1504.162216][T13197] team0: Failed to send options change via netlink (err -105) [ 1504.172245][T13197] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1504.182871][T13197] team0: Port device dummy0 removed [ 1504.190987][T13197] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1504.208212][T13201] netlink: 'syz.9.24150': attribute type 10 has an invalid length. [ 1504.253615][T13201] bond0: (slave dummy0): Releasing backup interface [ 1504.265387][T13201] team0: Failed to send options change via netlink (err -105) [ 1504.273297][T13201] team0: Port device dummy0 added [ 1504.286011][T13201] netlink: 'syz.9.24150': attribute type 10 has an invalid length. [ 1504.295121][T13201] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1504.311721][T13201] team0: Failed to send options change via netlink (err -105) [ 1504.320544][T13201] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1504.330661][T13201] team0: Port device dummy0 removed [ 1504.343187][T13201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1504.619615][T13216] siw: device registration error -23 [ 1504.639287][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24161'. [ 1504.676737][T13238] siw: device registration error -23 [ 1504.769048][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24165'. [ 1504.900521][T13257] netlink: 64 bytes leftover after parsing attributes in process `syz.9.24170'. [ 1504.950591][T13262] loop9: detected capacity change from 0 to 1024 [ 1504.957953][T13262] EXT4-fs: Ignoring removed orlov option [ 1504.985970][T13262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.066345][T13272] lo speed is unknown, defaulting to 1000 [ 1505.429364][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.443507][T13277] siw: device registration error -23 [ 1505.591110][T13282] bridge: RTM_NEWNEIGH with invalid ether address [ 1505.601845][T13279] FAULT_INJECTION: forcing a failure. [ 1505.601845][T13279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.615805][T13279] CPU: 1 UID: 0 PID: 13279 Comm: syz.9.24175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1505.615913][T13279] Tainted: [W]=WARN [ 1505.615919][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1505.615929][T13279] Call Trace: [ 1505.615935][T13279] [ 1505.615942][T13279] __dump_stack+0x1d/0x30 [ 1505.615960][T13279] dump_stack_lvl+0xe8/0x140 [ 1505.615976][T13279] dump_stack+0x15/0x1b [ 1505.615989][T13279] should_fail_ex+0x265/0x280 [ 1505.616018][T13279] should_fail+0xb/0x20 [ 1505.616030][T13279] should_fail_usercopy+0x1a/0x20 [ 1505.616046][T13279] copy_fpstate_to_sigframe+0x628/0x7d0 [ 1505.616071][T13279] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 1505.616155][T13279] ? x86_task_fpu+0x36/0x60 [ 1505.616224][T13279] get_sigframe+0x34d/0x490 [ 1505.616239][T13279] ? get_signal+0xdc7/0xf70 [ 1505.616257][T13279] x64_setup_rt_frame+0xa8/0x580 [ 1505.616274][T13279] arch_do_signal_or_restart+0x23e/0x440 [ 1505.616300][T13279] exit_to_user_mode_loop+0x77/0x110 [ 1505.616332][T13279] do_syscall_64+0x1d6/0x200 [ 1505.616347][T13279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1505.616370][T13279] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1505.616432][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.616448][T13279] RIP: 0033:0x7fa69a38efc7 [ 1505.616616][T13279] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1505.616630][T13279] RSP: 002b:00007fa698df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1505.616646][T13279] RAX: 0000000000000013 RBX: 00007fa69a5e5fa0 RCX: 00007fa69a38efc9 [ 1505.616656][T13279] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000003 [ 1505.616709][T13279] RBP: 00007fa698df7090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.616736][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.616746][T13279] R13: 00007fa69a5e6038 R14: 00007fa69a5e5fa0 R15: 00007ffd7a3fafa8 [ 1505.616760][T13279] [ 1505.955327][T13296] bridge: RTM_NEWNEIGH with invalid ether address [ 1506.124607][T13307] bond0: (slave dummy0): Releasing backup interface [ 1506.178654][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24186'. [ 1506.190451][T13307] team0: Port device dummy0 added [ 1506.210841][T13308] team0: Port device dummy0 removed [ 1506.220955][T13308] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1506.272357][T13295] siw: device registration error -23 [ 1506.384704][T13322] loop9: detected capacity change from 0 to 1024 [ 1506.391772][T13322] EXT4-fs: Ignoring removed orlov option [ 1506.424856][T13322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.565592][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.618424][T13337] $Hÿ: (slave dummy0): Releasing backup interface [ 1506.626270][T13337] dummy0: left promiscuous mode [ 1506.633360][T13337] team0: Port device dummy0 added [ 1506.664091][T13337] team0: Port device dummy0 removed [ 1506.677862][T13337] dummy0: entered promiscuous mode [ 1506.685152][T13337] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 1506.774750][T13350] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 1506.788800][T13331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.833296][T13358] validate_nla: 4 callbacks suppressed [ 1506.833310][T13358] netlink: 'syz.3.24209': attribute type 10 has an invalid length. [ 1506.851568][T13358] bond0: (slave dummy0): Releasing backup interface [ 1506.863134][T13358] team0: Port device dummy0 added [ 1506.871618][T13358] netlink: 'syz.3.24209': attribute type 10 has an invalid length. [ 1506.883114][T13358] team0: Port device dummy0 removed [ 1506.892152][T13358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1506.924044][T13364] netlink: 'syz.3.24211': attribute type 10 has an invalid length. [ 1506.934620][T13364] bond0: (slave dummy0): Releasing backup interface [ 1506.943719][T13364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1506.955989][T13364] team0: Failed to send options change via netlink (err -105) [ 1506.965483][T13364] team0: Port device dummy0 added [ 1506.974160][T13364] netlink: 'syz.3.24211': attribute type 10 has an invalid length. [ 1506.983184][T13364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1506.997330][T13364] team0: Failed to send options change via netlink (err -105) [ 1507.006898][T13364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1507.016401][T13364] team0: Port device dummy0 removed [ 1507.024454][T13364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1507.350394][T13366] siw: device registration error -23 [ 1507.408339][T13386] FAULT_INJECTION: forcing a failure. [ 1507.408339][T13386] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.408422][T13386] CPU: 0 UID: 0 PID: 13386 Comm: syz.6.24215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1507.408453][T13386] Tainted: [W]=WARN [ 1507.408518][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.408529][T13386] Call Trace: [ 1507.408540][T13386] [ 1507.408549][T13386] __dump_stack+0x1d/0x30 [ 1507.408643][T13386] dump_stack_lvl+0xe8/0x140 [ 1507.408685][T13386] dump_stack+0x15/0x1b [ 1507.408702][T13386] should_fail_ex+0x265/0x280 [ 1507.408741][T13386] should_failslab+0x8c/0xb0 [ 1507.408767][T13386] kmem_cache_alloc_noprof+0x50/0x480 [ 1507.408845][T13386] ? alloc_empty_file+0x76/0x200 [ 1507.408873][T13386] ? fast_dput+0x44/0x2c0 [ 1507.408897][T13386] alloc_empty_file+0x76/0x200 [ 1507.408951][T13386] dentry_open+0x2d/0x90 [ 1507.408968][T13386] ptm_open_peer+0x113/0x180 [ 1507.408996][T13386] tty_ioctl+0x3bc/0xb80 [ 1507.409016][T13386] ? __pfx_tty_ioctl+0x10/0x10 [ 1507.409036][T13386] __se_sys_ioctl+0xce/0x140 [ 1507.409126][T13386] __x64_sys_ioctl+0x43/0x50 [ 1507.409145][T13386] x64_sys_call+0x1816/0x3000 [ 1507.409166][T13386] do_syscall_64+0xd2/0x200 [ 1507.409198][T13386] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1507.409292][T13386] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1507.409347][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.409368][T13386] RIP: 0033:0x7f96299befc9 [ 1507.409382][T13386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.409464][T13386] RSP: 002b:00007f9628427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.409482][T13386] RAX: ffffffffffffffda RBX: 00007f9629c15fa0 RCX: 00007f96299befc9 [ 1507.409495][T13386] RDX: 0000000000000b3d RSI: 0000000000005441 RDI: 0000000000000003 [ 1507.409507][T13386] RBP: 00007f9628427090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.409519][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.409586][T13386] R13: 00007f9629c16038 R14: 00007f9629c15fa0 R15: 00007ffdd12ce3b8 [ 1507.409604][T13386] [ 1507.449141][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24219'. [ 1507.463709][T13373] siw: device registration error -23 [ 1507.710832][T13409] futex_wake_op: syz.9.24225 tries to shift op by 144; fix this program [ 1507.752397][T13409] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.24225'. [ 1507.790915][T13407] netlink: 64 bytes leftover after parsing attributes in process `syz.7.24224'. [ 1507.899791][T13416] sz1: rxe_newlink: already configured on lo [ 1507.934565][T13418] loop7: detected capacity change from 0 to 512 [ 1507.941420][T13418] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1508.134105][T13428] netlink: 'syz.7.24230': attribute type 10 has an invalid length. [ 1508.144421][T13428] bond0: (slave dummy0): Releasing backup interface [ 1508.166013][T13428] dummy0: left promiscuous mode [ 1508.175435][T13428] team0: Port device dummy0 added [ 1508.177984][T13422] siw: device registration error -23 [ 1508.190263][T13428] netlink: 'syz.7.24230': attribute type 10 has an invalid length. [ 1508.206725][T13428] team0: Port device dummy0 removed [ 1508.214623][T13428] dummy0: entered promiscuous mode [ 1508.222485][T13428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1508.225082][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24231'. [ 1508.261114][T13438] netlink: 64 bytes leftover after parsing attributes in process `syz.7.24232'. [ 1508.471395][T13436] siw: device registration error -23 [ 1508.672382][T13480] bridge: RTM_NEWNEIGH with invalid ether address [ 1508.724674][T13470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1508.929332][T13488] siw: device registration error -23 [ 1508.950628][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 1508.950641][ T29] audit: type=1326 audit(1761311483.145:108174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1508.985676][ T29] audit: type=1326 audit(1761311483.145:108175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.016218][ T29] audit: type=1326 audit(1761311483.145:108176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.043947][ T29] audit: type=1326 audit(1761311483.145:108177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.071362][ T29] audit: type=1326 audit(1761311483.145:108178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.097597][ T29] audit: type=1326 audit(1761311483.145:108179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.123981][ T29] audit: type=1326 audit(1761311483.145:108180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.151188][ T29] audit: type=1326 audit(1761311483.145:108181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.179385][ T29] audit: type=1326 audit(1761311483.145:108182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.185956][T13508] bridge: RTM_NEWNEIGH with invalid ether address [ 1509.206744][ T29] audit: type=1326 audit(1761311483.145:108183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.4.24255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63e04efc9 code=0x7ffc0000 [ 1509.243650][T13511] netlink: 64 bytes leftover after parsing attributes in process `syz.4.24259'. [ 1509.277618][T13513] bridge: RTM_NEWNEIGH with invalid ether address [ 1509.311684][T13518] loop7: detected capacity change from 0 to 1024 [ 1509.319446][T13518] EXT4-fs: Ignoring removed orlov option [ 1509.345509][T13518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.412988][T13533] loop9: detected capacity change from 0 to 1024 [ 1509.420588][T13531] 9pnet_fd: Insufficient options for proto=fd [ 1509.436680][T13533] EXT4-fs: Ignoring removed orlov option [ 1509.449811][T13537] bridge: RTM_NEWNEIGH with invalid ether address [ 1509.470905][T13533] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.499349][ T7690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.577132][ T5694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.611090][T13547] bridge: RTM_NEWNEIGH with invalid ether address [ 1509.740180][T13562] netlink: 'syz.7.24279': attribute type 10 has an invalid length. [ 1509.749864][T13562] bond0: (slave dummy0): Releasing backup interface [ 1509.759980][T13561] netlink: 'syz.3.24280': attribute type 10 has an invalid length. [ 1509.774616][T13562] dummy0: left promiscuous mode [ 1509.781273][T13562] team0: Port device dummy0 added [ 1509.788461][T13561] bond0: (slave dummy0): Releasing backup interface [ 1509.799748][T13562] netlink: 'syz.7.24279': attribute type 10 has an invalid length. [ 1509.811073][T13561] team0: Port device dummy0 added [ 1509.812566][T13569] netlink: 'syz.3.24280': attribute type 10 has an invalid length. [ 1509.842902][T13562] team0: Port device dummy0 removed [ 1509.844576][T13562] dummy0: entered promiscuous mode [ 1509.845503][T13562] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1509.856492][T13569] team0: Port device dummy0 removed [ 1509.858654][T13569] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1509.918986][T13579] bond0: (slave dummy0): Releasing backup interface [ 1509.919742][T13579] dummy0: left promiscuous mode [ 1509.921199][T13579] team0: Port device dummy0 added [ 1509.924940][T13543] siw: device registration error -23 [ 1509.934849][T13579] team0: Port device dummy0 removed [ 1509.936606][T13579] dummy0: entered promiscuous mode [ 1509.937218][T13579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.072576][T13598] bond0: (slave dummy0): Releasing backup interface [ 1510.088556][T13598] team0: Port device dummy0 added [ 1510.098121][T13598] team0: Port device dummy0 removed [ 1510.105992][T13598] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.157588][T13604] bond0: (slave dummy0): Releasing backup interface [ 1510.167154][T13604] team0: Port device dummy0 added [ 1510.180813][T13604] team0: Port device dummy0 removed [ 1510.188130][T13604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.217615][T13607] bond0: (slave dummy0): Releasing backup interface [ 1510.225923][T13607] team0: Port device dummy0 added [ 1510.241727][T13607] team0: Port device dummy0 removed [ 1510.249876][T13607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.295013][T13608] lo speed is unknown, defaulting to 1000 [ 1510.412342][T13619] FAULT_INJECTION: forcing a failure. [ 1510.412342][T13619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1510.425771][T13619] CPU: 0 UID: 0 PID: 13619 Comm: syz.3.24301 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1510.425806][T13619] Tainted: [W]=WARN [ 1510.425813][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1510.425827][T13619] Call Trace: [ 1510.425835][T13619] [ 1510.425845][T13619] __dump_stack+0x1d/0x30 [ 1510.425886][T13619] dump_stack_lvl+0xe8/0x140 [ 1510.425902][T13619] dump_stack+0x15/0x1b [ 1510.425920][T13619] should_fail_ex+0x265/0x280 [ 1510.426018][T13619] should_fail+0xb/0x20 [ 1510.426039][T13619] should_fail_usercopy+0x1a/0x20 [ 1510.426059][T13619] _copy_from_user+0x1c/0xb0 [ 1510.426113][T13619] __sys_bpf+0x183/0x7c0 [ 1510.426138][T13619] __x64_sys_bpf+0x41/0x50 [ 1510.426165][T13619] x64_sys_call+0x2aee/0x3000 [ 1510.426308][T13619] do_syscall_64+0xd2/0x200 [ 1510.426332][T13619] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1510.426359][T13619] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1510.426451][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.426562][T13619] RIP: 0033:0x7fb32d69efc9 [ 1510.426577][T13619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.426595][T13619] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1510.426632][T13619] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1510.426651][T13619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 1510.426662][T13619] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.426672][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.426683][T13619] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1510.426705][T13619] [ 1510.713671][T13628] bond0: (slave dummy0): Releasing backup interface [ 1510.726912][T13628] team0: Port device dummy0 added [ 1510.737449][T13628] team0: Port device dummy0 removed [ 1510.745429][T13628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.945440][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24312'. [ 1511.007620][T13631] siw: device registration error -23 [ 1511.046906][T13664] FAULT_INJECTION: forcing a failure. [ 1511.046906][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.060171][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.7.24318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1511.060257][T13664] Tainted: [W]=WARN [ 1511.060263][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1511.060276][T13664] Call Trace: [ 1511.060282][T13664] [ 1511.060289][T13664] __dump_stack+0x1d/0x30 [ 1511.060311][T13664] dump_stack_lvl+0xe8/0x140 [ 1511.060365][T13664] dump_stack+0x15/0x1b [ 1511.060382][T13664] should_fail_ex+0x265/0x280 [ 1511.060410][T13664] should_fail+0xb/0x20 [ 1511.060425][T13664] should_fail_usercopy+0x1a/0x20 [ 1511.060471][T13664] _copy_from_user+0x1c/0xb0 [ 1511.060493][T13664] do_arpt_set_ctl+0x3aa/0x9a0 [ 1511.060516][T13664] ? lock_sock_nested+0x112/0x140 [ 1511.060564][T13664] ? _raw_spin_unlock_bh+0x36/0x40 [ 1511.060590][T13664] nf_setsockopt+0x199/0x1b0 [ 1511.060612][T13664] ip_setsockopt+0x102/0x110 [ 1511.060643][T13664] udp_setsockopt+0x99/0xb0 [ 1511.060668][T13664] sock_common_setsockopt+0x69/0x80 [ 1511.060691][T13664] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1511.060732][T13664] __sys_setsockopt+0x184/0x200 [ 1511.060760][T13664] __x64_sys_setsockopt+0x64/0x80 [ 1511.060792][T13664] x64_sys_call+0x20ec/0x3000 [ 1511.060813][T13664] do_syscall_64+0xd2/0x200 [ 1511.060879][T13664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1511.060905][T13664] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1511.061039][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.061067][T13664] RIP: 0033:0x7f0e7b91efc9 [ 1511.061081][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.061097][T13664] RSP: 002b:00007f0e7a37f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1511.061188][T13664] RAX: ffffffffffffffda RBX: 00007f0e7bb75fa0 RCX: 00007f0e7b91efc9 [ 1511.061200][T13664] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1511.061212][T13664] RBP: 00007f0e7a37f090 R08: 0000000000000418 R09: 0000000000000000 [ 1511.061224][T13664] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1511.061235][T13664] R13: 00007f0e7bb76038 R14: 00007f0e7bb75fa0 R15: 00007ffea2b830a8 [ 1511.061251][T13664] [ 1511.098393][T13670] futex_wake_op: syz.9.24321 tries to shift op by 144; fix this program [ 1511.149962][T13675] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.24321'. [ 1511.382447][T13675] sz1: rxe_newlink: already configured on lo [ 1511.453654][T13685] loop7: detected capacity change from 0 to 512 [ 1511.460528][T13685] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1511.700062][T13688] loop7: detected capacity change from 0 to 512 [ 1511.707057][T13688] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1511.831427][T13690] siw: device registration error -23 [ 1511.887093][T13703] futex_wake_op: syz.3.24330 tries to shift op by 144; fix this program [ 1511.920165][T13707] validate_nla: 10 callbacks suppressed [ 1511.920181][T13707] netlink: 'syz.7.24331': attribute type 10 has an invalid length. [ 1511.953909][T13709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.976601][T13714] netlink: 'syz.7.24331': attribute type 10 has an invalid length. [ 1511.985767][T13707] bond0: (slave dummy0): Releasing backup interface [ 1511.993552][T13707] dummy0: left promiscuous mode [ 1512.000379][T13707] team0: Port device dummy0 added [ 1512.022109][T13714] team0: Port device dummy0 removed [ 1512.033527][T13717] FAULT_INJECTION: forcing a failure. [ 1512.033527][T13717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.047348][T13717] CPU: 1 UID: 0 PID: 13717 Comm: syz.4.24334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1512.047383][T13717] Tainted: [W]=WARN [ 1512.047390][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1512.047402][T13717] Call Trace: [ 1512.047410][T13717] [ 1512.047418][T13717] __dump_stack+0x1d/0x30 [ 1512.047442][T13717] dump_stack_lvl+0xe8/0x140 [ 1512.047482][T13717] dump_stack+0x15/0x1b [ 1512.047550][T13717] should_fail_ex+0x265/0x280 [ 1512.047657][T13717] should_fail+0xb/0x20 [ 1512.047674][T13717] should_fail_usercopy+0x1a/0x20 [ 1512.047695][T13717] strncpy_from_user+0x25/0x230 [ 1512.047720][T13717] ? kmem_cache_alloc_noprof+0x242/0x480 [ 1512.047825][T13717] ? getname_flags+0x80/0x3b0 [ 1512.047988][T13717] getname_flags+0xae/0x3b0 [ 1512.048016][T13717] user_path_at+0x28/0x130 [ 1512.048036][T13717] __x64_sys_umount+0x85/0xe0 [ 1512.048057][T13717] x64_sys_call+0xdd2/0x3000 [ 1512.048086][T13717] do_syscall_64+0xd2/0x200 [ 1512.048185][T13717] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1512.048284][T13717] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1512.048412][T13717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.048433][T13717] RIP: 0033:0x7fe63e04efc9 [ 1512.048449][T13717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.048481][T13717] RSP: 002b:00007fe63caaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1512.048500][T13717] RAX: ffffffffffffffda RBX: 00007fe63e2a5fa0 RCX: 00007fe63e04efc9 [ 1512.048591][T13717] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000002c0 [ 1512.048603][T13717] RBP: 00007fe63caaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.048613][T13717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.048699][T13717] R13: 00007fe63e2a6038 R14: 00007fe63e2a5fa0 R15: 00007ffd9502c148 [ 1512.048716][T13717] [ 1512.050711][T13714] dummy0: entered promiscuous mode [ 1512.249603][T13714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1512.281842][T13722] futex_wake_op: syz.4.24336 tries to shift op by 144; fix this program [ 1512.291009][T13722] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.24336'. [ 1512.414205][T13729] rdma_rxe: rxe_newlink: failed to add lo [ 1513.184517][T13751] netlink: 'syz.7.24346': attribute type 10 has an invalid length. [ 1513.204655][T13751] bond0: (slave dummy0): Releasing backup interface [ 1513.212349][T13751] dummy0: left promiscuous mode [ 1513.262235][T13755] netlink: 'syz.7.24346': attribute type 10 has an invalid length. [ 1513.303323][T13751] team0: Port device dummy0 added [ 1513.323207][T13754] lo speed is unknown, defaulting to 1000 [ 1513.417990][T13755] team0: Port device dummy0 removed [ 1513.443706][T13755] dummy0: entered promiscuous mode [ 1513.476058][T13755] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1513.615323][T13767] netlink: 'syz.7.24351': attribute type 10 has an invalid length. [ 1513.626796][T13767] bond0: (slave dummy0): Releasing backup interface [ 1513.635681][T13767] dummy0: left promiscuous mode [ 1513.637036][T13767] team0: Port device dummy0 added [ 1513.638626][T13767] netlink: 'syz.7.24351': attribute type 10 has an invalid length. [ 1513.657951][T13767] team0: Port device dummy0 removed [ 1513.659284][T13767] dummy0: entered promiscuous mode [ 1513.659957][T13767] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1513.750405][T13778] netlink: 'syz.7.24352': attribute type 10 has an invalid length. [ 1513.752404][T13778] bond0: (slave dummy0): Releasing backup interface [ 1513.753200][T13778] dummy0: left promiscuous mode [ 1513.755022][T13778] team0: Port device dummy0 added [ 1513.757748][T13778] netlink: 'syz.7.24352': attribute type 10 has an invalid length. [ 1513.759607][T13778] team0: Port device dummy0 removed [ 1513.761058][T13778] dummy0: entered promiscuous mode [ 1513.762177][T13778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1513.763385][T13760] siw: device registration error -23 [ 1513.804384][T13784] netlink: 64 bytes leftover after parsing attributes in process `syz.7.24355'. [ 1513.812963][T13786] FAULT_INJECTION: forcing a failure. [ 1513.812963][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.813103][T13786] CPU: 1 UID: 0 PID: 13786 Comm: syz.3.24356 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1513.813137][T13786] Tainted: [W]=WARN [ 1513.813143][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1513.813155][T13786] Call Trace: [ 1513.813161][T13786] [ 1513.813169][T13786] __dump_stack+0x1d/0x30 [ 1513.813191][T13786] dump_stack_lvl+0xe8/0x140 [ 1513.813266][T13786] dump_stack+0x15/0x1b [ 1513.813283][T13786] should_fail_ex+0x265/0x280 [ 1513.813324][T13786] should_fail+0xb/0x20 [ 1513.813340][T13786] should_fail_usercopy+0x1a/0x20 [ 1513.813360][T13786] _copy_from_user+0x1c/0xb0 [ 1513.813434][T13786] get_user_ifreq+0x53/0x110 [ 1513.813455][T13786] sock_ioctl+0x54e/0x610 [ 1513.813478][T13786] ? __pfx_sock_ioctl+0x10/0x10 [ 1513.813497][T13786] __se_sys_ioctl+0xce/0x140 [ 1513.813519][T13786] __x64_sys_ioctl+0x43/0x50 [ 1513.813594][T13786] x64_sys_call+0x1816/0x3000 [ 1513.813612][T13786] do_syscall_64+0xd2/0x200 [ 1513.813675][T13786] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1513.813697][T13786] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1513.813721][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.813759][T13786] RIP: 0033:0x7fb32d69efc9 [ 1513.813777][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.813791][T13786] RSP: 002b:00007fb32c0ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.813808][T13786] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69efc9 [ 1513.813820][T13786] RDX: 0000200000000240 RSI: 00000000000089f3 RDI: 0000000000000003 [ 1513.813891][T13786] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.813901][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.813912][T13786] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1513.813928][T13786] [ 1513.995581][T13795] siw: device registration error -23 [ 1514.177745][T13806] tmpfs: Bad value for 'defcontext' [ 1514.224822][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24362'. [ 1514.389290][T13825] FAULT_INJECTION: forcing a failure. [ 1514.389290][T13825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.402548][T13825] CPU: 0 UID: 0 PID: 13825 Comm: syz.3.24365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1514.402579][T13825] Tainted: [W]=WARN [ 1514.402586][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1514.402598][T13825] Call Trace: [ 1514.402606][T13825] [ 1514.402614][T13825] __dump_stack+0x1d/0x30 [ 1514.402655][T13825] dump_stack_lvl+0xe8/0x140 [ 1514.402675][T13825] dump_stack+0x15/0x1b [ 1514.402693][T13825] should_fail_ex+0x265/0x280 [ 1514.402796][T13825] should_fail+0xb/0x20 [ 1514.402812][T13825] should_fail_usercopy+0x1a/0x20 [ 1514.402833][T13825] _copy_to_user+0x20/0xa0 [ 1514.402934][T13825] simple_read_from_buffer+0xb5/0x130 [ 1514.402954][T13825] proc_fail_nth_read+0x10e/0x150 [ 1514.403058][T13825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1514.403132][T13825] vfs_read+0x1a8/0x770 [ 1514.403151][T13825] ? __rcu_read_unlock+0x4f/0x70 [ 1514.403176][T13825] ? __fget_files+0x184/0x1c0 [ 1514.403200][T13825] ksys_read+0xda/0x1a0 [ 1514.403263][T13825] __x64_sys_read+0x40/0x50 [ 1514.403282][T13825] x64_sys_call+0x27c0/0x3000 [ 1514.403324][T13825] do_syscall_64+0xd2/0x200 [ 1514.403340][T13825] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1514.403365][T13825] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1514.403511][T13825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.403529][T13825] RIP: 0033:0x7fb32d69d9dc [ 1514.403547][T13825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1514.403580][T13825] RSP: 002b:00007fb32c0ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1514.403597][T13825] RAX: ffffffffffffffda RBX: 00007fb32d8f5fa0 RCX: 00007fb32d69d9dc [ 1514.403608][T13825] RDX: 000000000000000f RSI: 00007fb32c0ff0a0 RDI: 0000000000000007 [ 1514.403682][T13825] RBP: 00007fb32c0ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.403695][T13825] R10: 0000000000012141 R11: 0000000000000246 R12: 0000000000000001 [ 1514.403707][T13825] R13: 00007fb32d8f6038 R14: 00007fb32d8f5fa0 R15: 00007ffda0fbdc68 [ 1514.403722][T13825] [ 1514.487260][T13809] siw: device registration error -23 [ 1514.595079][T13836] netlink: 'syz.6.24367': attribute type 10 has an invalid length. [ 1514.608334][T13817] siw: device registration error -23 [ 1514.627664][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 1514.627681][ T29] audit: type=1326 audit(1761311488.815:108627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1514.660370][ T29] audit: type=1326 audit(1761311488.815:108628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1514.660498][T13816] ================================================================== [ 1514.660518][T13816] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1514.660538][T13816] [ 1514.660549][T13816] write to 0xffffffff8688b350 of 8 bytes by task 29 on cpu 0: [ 1514.660563][T13816] data_alloc+0x274/0x2e0 [ 1514.660585][T13816] prb_reserve+0x807/0xaf0 [ 1514.660600][T13816] vprintk_store+0x56d/0x860 [ 1514.660617][T13816] vprintk_emit+0x10d/0x580 [ 1514.660640][T13816] vprintk_default+0x26/0x30 [ 1514.660663][T13816] vprintk+0x1d/0x30 [ 1514.660690][T13816] _printk+0x79/0xa0 [ 1514.660712][T13816] kauditd_hold_skb+0x1b1/0x1c0 [ 1514.660733][T13816] kauditd_send_queue+0x273/0x2c0 [ 1514.660752][T13816] kauditd_thread+0x421/0x630 [ 1514.660775][T13816] kthread+0x489/0x510 [ 1514.660795][T13816] ret_from_fork+0x122/0x1b0 [ 1514.660813][T13816] ret_from_fork_asm+0x1a/0x30 [ 1514.660832][T13816] [ 1514.660838][T13816] read to 0xffffffff8688b350 of 16 bytes by task 13816 on cpu 1: [ 1514.660855][T13816] _prb_read_valid+0x1bc/0x920 [ 1514.660874][T13816] prb_read_valid+0x3c/0x60 [ 1514.660889][T13816] printk_get_next_message+0xc8/0x510 [ 1514.660908][T13816] console_flush_all+0x290/0x6a0 [ 1514.660931][T13816] console_unlock+0xa1/0x2e0 [ 1514.660950][T13816] do_con_write+0x28df/0x2940 [ 1514.660970][T13816] con_write+0x24/0x40 [ 1514.660987][T13816] n_tty_write+0x7ca/0xb40 [ 1514.661008][T13816] file_tty_write+0x378/0x690 [ 1514.661026][T13816] tty_write+0x25/0x30 [ 1514.661043][T13816] do_iter_readv_writev+0x4a1/0x540 [ 1514.661063][T13816] vfs_writev+0x2df/0x8b0 [ 1514.661090][T13816] do_writev+0xe7/0x210 [ 1514.661116][T13816] __x64_sys_writev+0x45/0x50 [ 1514.661139][T13816] x64_sys_call+0x1e9a/0x3000 [ 1514.661160][T13816] do_syscall_64+0xd2/0x200 [ 1514.661176][T13816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.661193][T13816] [ 1514.661197][T13816] Reported by Kernel Concurrency Sanitizer on: [ 1514.661211][T13816] CPU: 1 UID: 0 PID: 13816 Comm: syz.7.24361 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1514.661240][T13816] Tainted: [W]=WARN [ 1514.661246][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1514.661256][T13816] ================================================================== [ 1514.675444][T13841] netlink: 'syz.3.24368': attribute type 10 has an invalid length. [ 1514.678036][T13841] bond0: (slave dummy0): Releasing backup interface [ 1514.682080][T13841] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1514.682138][T13841] team0: Failed to send options change via netlink (err -105) [ 1514.682154][T13841] team0: Port device dummy0 added [ 1514.704895][ T29] audit: type=1326 audit(1761311488.825:108629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1514.744743][T13836] bond0: (slave dummy0): Releasing backup interface [ 1514.747309][ T29] audit: type=1326 audit(1761311488.825:108630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.021984][ T29] audit: type=1326 audit(1761311488.825:108631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.022018][ T29] audit: type=1326 audit(1761311488.825:108632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.069896][ T29] audit: type=1326 audit(1761311488.825:108633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.069923][ T29] audit: type=1326 audit(1761311488.825:108634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.118039][ T29] audit: type=1326 audit(1761311488.825:108635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.118069][ T29] audit: type=1326 audit(1761311488.825:108636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.3.24366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32d69efc9 code=0x7ffc0000 [ 1515.168611][T13836] team0: Port device dummy0 added [ 1515.175311][T13841] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1515.180738][T13841] team0: Failed to send options change via netlink (err -105) [ 1515.196262][T13841] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1515.196574][T13841] team0: Port device dummy0 removed [ 1515.198625][T13841] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1515.223030][T13843] team0: Port device dummy0 removed [ 1515.225577][T13843] bond0: (slave dummy0): Enslaving as an active interface with an up link