last executing test programs:

4m40.633109158s ago: executing program 1 (id=523):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x220}}], 0x2, 0x0)

4m40.577496708s ago: executing program 1 (id=525):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x5}, 0xffffff75)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x441, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000300)={[0x3]}, &(0x7f0000000340), 0x8)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x71, 0x1, 0xb, 0x8, 0x0, 0x1f, 0x200c, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0xc2}, 0x1b88, 0x300003, 0x4, 0x3, 0xffffffff, 0x800, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10000002, 0xffffffffffffffff, 0xa)
r5 = msgget(0x2, 0x60c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
msgrcv(r5, 0xfffffffffffffffe, 0x0, 0x0, 0x1000)
socket(0xf, 0x80005, 0x8)
msgsnd(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0000040000000008"], 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))

4m39.643241334s ago: executing program 1 (id=534):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0x0, 0x0, <r1=>0x0, &(0x7f0000000380)=""/238, 0xee}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
socket$inet(0x2, 0x3, 0x33)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]})
syz_clone3(&(0x7f0000001880)={0x120000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)

4m38.728647459s ago: executing program 1 (id=551):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0xb2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0xc9b, 0x3, 0x8}, 0x7f, 0xf, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff9, 0x9, 0xa2, 0x6})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000000)={0x3, 0x200, "fe00", 0x0, 0xf})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x40, &(0x7f0000000080), 0x5, 0x505, &(0x7f0000000a40)="$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")
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x100010, r0, 0xbf265000)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="7f")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x3, 0xee00, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x5, 0x7fffffffffffffff, 0x3, 0x5, r6, r1, 0x1})
writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8b", 0x1}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='ext4_da_write_pages\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1010e, &(0x7f0000000300)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@debug}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")

4m38.336835075s ago: executing program 1 (id=555):
r0 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

4m37.944622232s ago: executing program 1 (id=557):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb6b85a6aecb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f538a2daf8c1b30cec480fa98fa8dfef0e6ac48ce473044998d904bfb6b0ac9500b2ad07efe67efc836664f17e7b2af6ac11dc351bb0b72d475f990a3b5ecfcd7b1ae90772f7c819554a35c9b189f59cf62715795c2dae3bd6715c2656d451274a38e60ba826d4ada1cd0000"], 0xf6, 0x320, &(0x7f0000000080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

4m37.910204222s ago: executing program 32 (id=557):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x8000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf6, 0x320, &(0x7f0000000080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

3m30.887118565s ago: executing program 2 (id=2114):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
close(r2)

3m30.865635655s ago: executing program 2 (id=2115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff)

3m30.833507466s ago: executing program 2 (id=2118):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000020000000000ffffffff030e4a0e09000100b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000a70000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1b86a14636108b94, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='dlm_unlock_start\x00', r4}, 0x18)
getpgrp(0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f00000001c0)={{0x2, @rand_addr, 0x4e22, 0x0, 'rr\x00', 0x1, 0x2, 0x2000002}, {@private=0xa010101, 0x0, 0x0, 0x2}}, 0x44)
getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

3m29.911660592s ago: executing program 2 (id=2132):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffdc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/190, 0xbe}], 0x8}, 0x7}, {{&(0x7f0000001cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001e80)=[{0x0}, {0x0}, {&(0x7f0000001e00)=""/116, 0x74}], 0x3, &(0x7f0000001f00)=""/3, 0x3}, 0x6}, {{&(0x7f0000001f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000001fc0)=""/29, 0x1d}, {&(0x7f0000003080)=""/133, 0x85}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/117, 0x75}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/142, 0x8e}], 0x6}, 0x5}, {{&(0x7f0000003140)=@qipcrtr, 0x80, &(0x7f00000035c0)=[{&(0x7f00000009c0)=""/119, 0x77}, {&(0x7f0000003240)=""/88, 0x58}, {0x0}, {&(0x7f00000034c0)=""/249, 0xf9}], 0x4}, 0x3}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f0000003780)=[{&(0x7f00000036c0)=""/186, 0xba}], 0x1, &(0x7f00000037c0)=""/24, 0x18}, 0x5}, {{&(0x7f0000003800)=@rc, 0x80, &(0x7f0000003900)=[{&(0x7f0000003880)=""/13, 0xd}, {0x0}], 0x2, &(0x7f0000003940)=""/230, 0xe6}, 0xa}], 0x6, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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")
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
unshare(0x22020400)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
unshare(0x40010800)
vmsplice(r4, &(0x7f0000003680)=[{&(0x7f00000000c0)="ab8c16e645c2", 0x6}], 0x1000000000000231, 0xe)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x10}, 0x1c)
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
timerfd_create(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000001000000000000000102008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x48081}, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m29.893122081s ago: executing program 2 (id=2133):
r0 = getpid()
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r3}, 0x18)
r4 = syz_pidfd_open(r0, 0x0)
setns(r4, 0x24020000)
r5 = io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
move_mount(r7, 0x0, r6, 0x0, 0x46)
close_range(r5, 0xffffffffffffffff, 0x0)

3m29.619774906s ago: executing program 2 (id=2138):
r0 = io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2})
pause()
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)

3m29.598874646s ago: executing program 33 (id=2138):
r0 = io_uring_setup(0x6f94, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2})
pause()
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)

3m23.358207299s ago: executing program 5 (id=2271):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
close(r2)

3m23.357417119s ago: executing program 5 (id=2272):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x1000000000000}, 0x18)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x40}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x2, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)

3m23.133367713s ago: executing program 5 (id=2278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000cb0b1040000d49a634d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], <r1=>0x0, 0x55, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2831], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x46820000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESDEC=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x10001000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
umount2(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"})

3m22.736517709s ago: executing program 5 (id=2290):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xd}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
unshare(0x28020480)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010001fff000000000006000047e54f8680623c7f79549aacfbefa5e0829981faa19fe2c9e69567d24a4c335dd9", @ANYRES32=0x0, @ANYBLOB="81ffffff000000002800128008000100677470001c000280080003000700000008000400020000000500060004000000"], 0x48}}, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)
r8 = memfd_secret(0x80000)
fcntl$setlease(r8, 0x400, 0x1)

3m22.460393664s ago: executing program 5 (id=2293):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x4, 0xff, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x16}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44800)
r4 = socket(0x40000000015, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080b0}, 0x4000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="000828bd7000fedbdf250c0000000200000012000a0043465923ae636bb06c11c7d6471b000008000a00e63bd4430a00060008022a00000100008800090005ac0f0004006e8011000700372157d11e593e50fe8471f1b5f300000008009b705400000012000a000973a87672000000006af05400"/131], 0x8c}, 0x1, 0x0, 0x0, 0x2000050}, 0x4048804)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
unshare(0x24020400)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r7, r7, 0x0, r7}, 0x10)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000150a0102"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040808)
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r8 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
ppoll(&(0x7f0000000d40)=[{r8}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)

3m22.258570007s ago: executing program 5 (id=2301):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000008780))
write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="41f13bdf", @ANYRES16=r7, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40001)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f4000000400000004000000998da35700000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20)
recvmsg$unix(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0)
sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>&', 0x2}], 0x1}, 0x800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0)

3m22.258003957s ago: executing program 34 (id=2301):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000008780))
write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="41f13bdf", @ANYRES16=r7, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40001)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f4000000400000004000000998da35700000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20)
recvmsg$unix(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0)
sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>&', 0x2}], 0x1}, 0x800)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0)

1m50.851608055s ago: executing program 7 (id=4279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r1, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r2 = dup2(r1, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfff, 0x0, 0xffff, 0x0, 0xa7a5, 0x0, 0x3, 0x4a}}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = syz_usbip_server_init(0x3)
write$usbip_server(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040050)

1m50.096269408s ago: executing program 7 (id=4309):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 4)

1m49.845219002s ago: executing program 7 (id=4312):
madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
r1 = getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r2 = signalfd(r0, &(0x7f00000001c0)={[0x2]}, 0x8)
openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xb, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000e8e09e9ab702000008000000b70300000000000085000000c80000"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x79, &(0x7f0000000140)=""/121, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303337372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865896b3d7374726963742c756e695f786c6174653d302c696f636861727365743d69736f383835392d392c646d61736b3d30313030303030303030303030303030303030303030302c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c00"], 0x80, 0x364, &(0x7f0000000400)="$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") (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (rerun: 64)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000afbffcba0308f697294983c76261caded6f166e4c6dcaae00b82d29a6d98da2cdb464c78426627ab3fb19ea094fb682883ac9f06e3b35eabc2092953024ddb221fd4e5b03e588aed74294e65d29be55fa2d6f10d6fa237dbacc7fe63d93f83371d897b2c77a2f6122142d0523f611cb6ebabda263eebdf65c978f37684f1fa8f6ccbac9ec92f31896895c6d07969f83a50247d36ea82900d389cc30b30f58c4e86a78ab60c3e114eeb7f8a86ecaee7eed60a665b9ab930139efcf8539642", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x1405, 0x20, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000045}, 0x800) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
mincore(&(0x7f0000b04000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/88)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

1m49.400316559s ago: executing program 7 (id=4314):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'gre0\x00', <r0=>0x0, 0x7, 0x7e1, 0x401, 0xffffb74b, {{0x27, 0x4, 0x0, 0x6, 0x9c, 0x67, 0x0, 0xc, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0xb, 0x86, [@rand_addr=0x64010101, @empty]}, @timestamp_prespec={0x44, 0x34, 0xfc, 0x3, 0xe, [{@loopback, 0x1}, {@loopback, 0x4}, {@loopback}, {@rand_addr=0x64010100, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x6cc}]}, @cipso={0x86, 0x22, 0x3, [{0x6, 0x4, "184a"}, {0x4, 0x7, "0637256024"}, {0x2, 0x8, "68e02d1b8f1c"}, {0x6, 0x9, "e10589e98c8b8d"}]}, @noop, @generic={0x7, 0x11, "1fa344092a004ab9e74ae0263e1c7f"}, @ssrr={0x89, 0xb, 0x9, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x30, '\x00', r0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000018000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x3}, 0x18)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
socketpair(0x18, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x68f}, 0x18)
process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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")
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan1\x00'})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)

1m48.71973533s ago: executing program 7 (id=4322):
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6c9, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b12b90000000700000001000100090000000500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305"], 0x40}}, 0x4000800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYRESOCT=r5, @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES8=r0, @ANYBLOB="ea826177d95bf68f393fe13854b6f5a29ff093f677ff4f060f5f9a1b5c6cfcf687c927d541fcd05450a4ee3f534ded6b0c3c5514978ba0aad4936d72c3cda58a0e49a57d2e9cbdd7e96004cfe6dafa482405ae75fa843b3b77bd7712ec187cd0523fab0a35348680b2caa812d1f6b2aaaef10cbc2c723421b00ce1b4b6b531ba2ab98a625e34c7504816521b0bfad55ac31ae30cd8ca6623dd872ea79fc1120ec149b309c982832ce1c5dda46f3a2197b30a0c5f307209dcf649", @ANYRESHEX=r1, @ANYRES64=r5, @ANYRES16=r2, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r8)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x2, 0x4, 0x1}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000005280))
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)={<r12=>0x0, 0x7f}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={r12, 0x7fffffff}, &(0x7f00000006c0)=0x8)
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)

1m48.383143806s ago: executing program 7 (id=4331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m33.148066466s ago: executing program 35 (id=4331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.757746653s ago: executing program 4 (id=6720):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r1, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r2 = dup2(r1, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfff, 0x0, 0xffff, 0x0, 0xa7a5, 0x0, 0x3, 0x4a}}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = syz_usbip_server_init(0x3)
write$usbip_server(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040050)

1.357427409s ago: executing program 6 (id=6726):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x40, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb4, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x11, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x8000, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0xffffffff, 0x20000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff3bac, 0xd, 0x2, 0x2000, 0x3, 0x0, 0x0, 0x34, 0xfffffffe, 0x480000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a0, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x713b, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0xffffffff, 0x2, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xca2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0xfffffff9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}}, 0x44004)

1.356948159s ago: executing program 6 (id=6727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mq_open(&(0x7f0000000280)='kfree\x00', 0x80, 0x38, &(0x7f0000000340)={0x8001, 0x1, 0x10, 0x80000001})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x54, 0x0, 0x706, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080)
getegid()
syz_clone(0x1000000, &(0x7f0000002ac0)="a64016d3b8b9964948c75f5b635c01d68aaa704dfb84454697b43f81eb695f326a7e5f1bfcc9ead2d14be2de43bb6b2eb9d9280d2d8550886607b7a529e046d01455b94e0864", 0x46, &(0x7f0000002b40), &(0x7f0000002b80), &(0x7f0000002bc0)="9b4897bd87c24fe8b25ac4ea")

1.174949862s ago: executing program 8 (id=6733):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

824.004577ms ago: executing program 8 (id=6735):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$eJzs3EFv29YdAPDH1G4UFwsGFFvSNMDYtIfsUFeSFwdGd4hGUzZbSRRIunBOQ7HYXTC7BdYNWHNaLt0KbNhp56HXfYJ9kn2JoZ/BAyXZkeTYztJ6doHfD4jfE/kn3/8xxHs2occAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQoWW82W1HoZYOt7fhkyXqR90/Zf3i+f80UMxanfoYohKj+FxqNcHO86ebrz2J/VP+4E26MP90IjbpohCev/fiH77++cKU+cDGKwikJfSeuzX787Mo4n6MNn3/x5Dcf7+3t/Pa8E7mkNtJBVuZZv7ORxlmZx2urq833Nrtl3M16afmwrNJ+nBRpp8qL+G7yIISwthKnyw/zrcHGeqeXxneTn8attbX777abzdX4g+Vh2inKfPDeB8tlspn1etlgYxRT767vgfv1jfhhVsVV2ujH8e7jvZ2Vs5Ksg1ovEtQ+K6jdbLdbrXa7tXpv7d79ZrMxuVuPNiw054T5QxbO/6bl0nk1TA0ch2Pcq9/REA4v7SD520WnAAAAAJyzaPSMPRo9l785qnWzXtqciTmIrp10MAAAAPA9MPoT/sbkAUAIN0N0/O9/AAAA4Pvtz6eusQtRFMrh1ehwqcpw+51ov1PXOvuvjDe9Mn/Gqnsruj45yahYXZh8StLb0RvjoDcOo7+ZFLuzeSyG+TyioliMnr50AnXUQvhLuDWOufVoXD6axE1WJC51s166nOS991uh07l+pUq3q99/+vgPIRTFwStfDfrXo7D7eG9n+Vef7T0a5fK0PsvT/ck3IY59IWI2l6vh2cUIvzta9zi58g9me7w4ehBT9/qrQX9p3G5zuv+TxYhXXvw/IHwZ3hzHvLk0Lpdm+9+o22wtP6f301m0htvvXJ009oI9n8vi9jjm9t236+Ltu5M9i1NZtM/Koj19/V/qWpyQxfS1WDkri5VvmQXARdmdn4WOzf/H5t3jo9x4Tf8po9zu6b9l1JPzXCv/+ff4gGez+6/DWa18Gd4ax7x1a+HZjDQ3ojfPGtGbLzivH/2GMpfFP8Odf/w9hK1w5zD4pDm2bvevM7NqtP91fcDXx9o9XGle9toHByFcm0y/Xzx59/H+x5/sfLLzabu9str8WbN5rx0WR92YFOYeAJ4jLb6Jlqo/RUWRDX/ZWltrdarNNC7y5MO4yNY30jgbVGmRbHYGG2k8LPIqT/JeXfkoW0/LuNwaDvOiirt5EQ/zMtsevfklDn8cvfqlTPudQZUl5bCXdso0TvJB1UmqeD0rk3i49YteVm6mxejgcpgmWTdLOlWWD+Iy3yqSdDmOyzSdCszW00GVdbO6OoiHRdbvFA/jj/LeVj+N19MyKbJhlY9PeNhWNujmRX902uWLvtgAcEl8HiZvsDt6ld3/XAmNM2Iuuo8AwKz5WfrqiZEnvAMAAAAAAAAAAAAAAAA4d9PL9X4+eaXPt14R+H+uNGa3PHjtecE/uRSpHlVCCAuXII1LWIlCCJcgjdPvsfOqHL7n6aSYxcn+l22ivrhnB/+gjrmoEQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATvbfAAAA//9S7I0P")
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (fail_nth: 1)

805.666178ms ago: executing program 8 (id=6736):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

794.101008ms ago: executing program 0 (id=6737):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=<r5=>0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10)
r9 = syz_open_pts(r6, 0x0)
dup3(r9, r6, 0x0)
getpgid(r5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000002e80))

793.684868ms ago: executing program 4 (id=6738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x15, 0x1f, 0x192, &(0x7f0000000dc0)})

738.421369ms ago: executing program 4 (id=6739):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
io_setup(0x4202, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r2, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x439, 0x1, 0xfffffffe, {0x0, 0x0, 0x0, r5, 0x4000, 0x21190}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x3}}]}]}]}, 0x34}}, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

691.993499ms ago: executing program 0 (id=6740):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
socket$key(0xf, 0x3, 0x2)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc))

691.596149ms ago: executing program 4 (id=6741):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

655.76329ms ago: executing program 8 (id=6743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='-6', 0x2}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCCBRK(r2, 0x5428)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

631.84856ms ago: executing program 4 (id=6744):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_setup(0xd483, &(0x7f00000004c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0x8}, 0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r8=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000c00)="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", &(0x7f0000001c00)=""/4096, &(0x7f00000000c0)="8613445532714ea978d5b2e09017189979602911600a961ca55a74410c24472a6825a3fab5232ffc98cf93980154c0a5a77eb80e3a65fe9b3b99a303d99cf70feec099fe0eb6dc79ddbce089f4588968ec2c0113d88e789354308acdd38cb8ea54756bfee2cadafd9c16d4ec63935d9f43bf534490349a86b7b30349559b426816a38ded419398541ce7952cd4dd5899086a3e08503f1b0591827022bb965bfe7c662a80e727824d10a5a22a4dbeca84e856ee015c", &(0x7f00000003c0)="1a51c46ca652195ffcca1ef3bb10f97d66a755d791c48c27d948fb7997e1af99024930c0c495aca8074f00533c3eb4e28cb2282a6f38aa5341ce786ef04581930c9f50adf824fed7", 0x3, r8, 0x4}, 0x38)
r9 = mq_open(&(0x7f0000000580)='kfree\x00', 0x3, 0x5, &(0x7f00000005c0)={0x2, 0x2, 0xed, 0x1})
mq_timedreceive(r9, &(0x7f0000000800)=""/167, 0xa7, 0x7, &(0x7f0000000980))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

621.4897ms ago: executing program 3 (id=6745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001280)={'syztnl1\x00', &(0x7f0000001200)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x8, 0xfffffffa, 0x14, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x40, 0xbfd, 0xd9}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x0, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x7a}}, 0x40006)

585.914121ms ago: executing program 8 (id=6746):
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0xda0, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000014780)='/sys/kernel/uevent_seqnum', 0x400101, 0x118)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000147c0)='highspeed\x00', 0xa)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000148c0)={&(0x7f0000014800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000014880)={&(0x7f0000014840)={0x40, 0x1410, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x48800)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000014900), &(0x7f0000014940)=0x4)
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000014980)=""/220, &(0x7f0000014a80)=0xdc)
socketpair(0x28, 0x800, 0x80000001, &(0x7f0000014ac0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000014b40)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000014c00)={&(0x7f0000014b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000014bc0)={&(0x7f0000014b80)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {0x0, 0x7}, {0xfff1, 0x6}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4004844)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000014c40))
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000014c80))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
listen(r0, 0x1)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000014dc0)={&(0x7f0000014cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000014d80)={&(0x7f0000014d00)={0x48, 0x1409, 0x300, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000014e00)={{0x1, 0x1, 0x18, <r6=>r3, {<r7=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000301, r7, 0x0)
connect$qrtr(r1, &(0x7f0000014e40)={0x2a, 0x0, 0x7ffe}, 0xc)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000014e80)=0x9, 0x12)
r8 = perf_event_open(&(0x7f0000014f00)={0x3, 0x80, 0x4, 0x0, 0x9, 0x7, 0x0, 0xfc0, 0xa1001, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x752, 0x0, @perf_bp={&(0x7f0000014ec0), 0xc}, 0x0, 0x8000000000000000, 0x9, 0x7, 0xafb, 0xe, 0x2, 0x0, 0x8, 0x0, 0x8000}, 0x0, 0x1, r1, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000014f80)={{0x1, 0x1, 0x18, <r9=>r1, {0x4}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
write$binfmt_script(r6, &(0x7f0000014fc0)={'#! ', './file0', [{0x20, 'highspeed\x00'}, {0x20, 'team0\x00'}, {0x20, 'wg0\x00'}, {0x20, '-{'}, {0x20, 'team0\x00'}, {0x20, '\x00'}, {0x20, '}'}], 0xa, "0f94c2553cc1e6b03b65c4f5b74488627f9030953cf5a72ca3b718f9fa63e9303d49ad28766847b4ed81e21adf58c13eae5d2d14e040b6e464c83ba2cacf3d1444fcd9d4ff99c9"}, 0x77)
semget$private(0x0, 0x4, 0x200)
syz_genetlink_get_family_id$tipc(&(0x7f0000015040), r3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000015080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x10, '\x00', r4, r9, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bind$inet(r2, &(0x7f0000015100)={0x2, 0x4e24, @private=0xa010100}, 0x10)
pwritev2(r0, &(0x7f0000015240)=[{&(0x7f0000015140)="6ad536265765b2e38012dd2c1b6ad81b492b8ad99698897526283b48c24f927d9a55aeb9386912db7562cfe2f10335adabeabc119a042331b6840f45271b11819433b38b90e1136a630776e0014e84430cf917f38ea6c875dfc7b1f0c5e18083a9cf014e98b5f28de6d4a003254f9d483523ca6d40ea023531b51f525096cd8c02189c69871799a52f591d04fb0eaab0b53219b73c520c1b86162076b63d3d77eeccaaed6a39a9fc983bb4542d778b1cc5c7c3833e3da5b7a5cac137c5869adf4721526226af752ef8e06a48241a9cdeb4d6bb8a9104cf289184868dc2e195aef3e5091f", 0xe4}], 0x1, 0x0, 0x4, 0x6)

585.661431ms ago: executing program 3 (id=6747):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) (fail_nth: 2)

388.810414ms ago: executing program 8 (id=6748):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r1, &(0x7f0000000880)={0xa, 0x80, 0x0, @remote, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r2 = dup2(r1, r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0xfff, 0x0, 0xffff, 0x0, 0xa7a5, 0x0, 0x3, 0x4a}}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = syz_usbip_server_init(0x3)
write$usbip_server(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040050)

295.714735ms ago: executing program 3 (id=6749):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x15, 0x1f, 0x192, &(0x7f0000000dc0)})

295.458005ms ago: executing program 0 (id=6750):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0x0, 0x20000, 0xfffffffffffffffd, 0x5, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
io_setup(0x9, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])

295.056465ms ago: executing program 6 (id=6751):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x8365, 0x4, 0x0, 0x53}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
mq_unlink(&(0x7f00000002c0)='eth0\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10)
ioprio_get$uid(0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x448, &(0x7f00000009c0)="$eJzs3MtvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcOgEDiABISHMoxJGlV6jaoCRKtKigIlSOqxB1xROIv4AQXBJyQuMIdVapQLy2cjNbeTRzHdprEiQP+fKRtZ3Ynmfl6duKZnTgBDKyR7J8kYndE/BYRw43s0gIjjf/u3Loy9detK1NJ1Gpv/pnUy92+dWWqKFp83a4iU45IP03iYJt65y5dPjdZrc5czPNj8+ffG5u7dPmZs+cnz8ycmbkwcfLk8WPjz52YeLYncWZx3T7w4eyh/a++ff31qVPX3/npm6SIvyWOBS+sq8qRbhcfr9XW9c23mj1N6aTcx4awKqXGMI2h+vgfjlIsdt5wvPJJXxsHbKharVa7r/PlqzXgPyyJfrcA6I/ijT5b/xbHJk09toSbLzYWQFncd/KjcaUcaV5mqGV920sjEXHq6t9fZkd0eg4BANBD32Xzn6fbzf/SaH4u9P98D6USEfdExN6IOBER+yLi3oh62fsj4oFV1t+6SbJ8/pPeWFNgdymb/z2f720tnf8Vs7+olPLcnnr8Q8nps9WZo/lrciSGtmf58S51fP/yr593utY8/8uOrP5iLpi340Z5e4+CbePmxxEHyu3iTxZ2ApKI2B8RB9ZYx9knvz7U6drK8XfRg32m2lcRTzT6/2q0xF9Iuu9Pjv0vqjNHx4q7Yrmff7n2Rqf61xV/D2T9v7Pt/V/Ev6eSNO/Xzq2+jmu/f9ZxTbOW+396cn5yW/LWknMfTM7PXxyP2Ja8Vs9Xms9PtJSbWCyfxX/kcPvxvzcWX4mDEZHdxA9GxEMR8XB+/pGIeDQiDneJ/8eXHnt37fFvrCz+6a79Hy39v5jYFq1n2idK5374dkmlldXEn/X/8XrqSH4m6/+V4rqbdq3tbgYAAIB/nzQidkeSji6k03R0tPE7/PtiZ1qdnZt/6vTs+xemG58RqMRQWjzpGm56HjqeL+uL/ERL/lj+3PiL0o56fnRqtjrd7+BhwO3qMP4zf5T63TpgwyX9bgDQNz6vCYPL+IfBZfzD4Goz/nf0ox3A5mv3/v9RH9oBbL6W8W/bDwaI9T8MrrL1Pgws7/8wkOZ2xMofkpeQWJaIdEs0o0ui+BuXW6U9WyuRRkS3Mv3+yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAb/wQAAP//F5XoQw==")
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

263.214926ms ago: executing program 3 (id=6752):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005"], 0x44}}, 0x0)

186.933617ms ago: executing program 6 (id=6753):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

185.244857ms ago: executing program 3 (id=6754):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

161.523357ms ago: executing program 3 (id=6755):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0xc0f85403, 0x0)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffe}]})
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
fstatfs(r10, &(0x7f0000000200)=""/235)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

80.092808ms ago: executing program 0 (id=6756):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

79.206588ms ago: executing program 4 (id=6757):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x34, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

61.370609ms ago: executing program 0 (id=6758):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)

41.897769ms ago: executing program 0 (id=6759):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r6, 0xc6d27bba7cc0b532, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x824}, 0x24004080)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005"], 0x44}}, 0x0)

38.42241ms ago: executing program 6 (id=6760):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
setpriority(0x2, 0xff, 0x0)

0s ago: executing program 6 (id=6761):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10, 0x0}, 0x24008000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000300008802c0000880400098024000100"/82], 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r4=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc6c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x444, 0x8, 0x0, 0x1, [{0x440, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x160, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2b0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0xa40e, 0xffffff2f, @mcast1, 0xfffff449}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b7ef91e8746c19259eb2b7d801d581c7e96cf8c9de947d58238c88c3cddbb89"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_PEERS={0x430, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private1, 0xf}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @local, 0x1ec}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc81b0414040fd266f94f5e61422fbeab16f9215971931bb2b5ac7e336412372"}, @WGPEER_A_ALLOWEDIPS={0x3a8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_PEERS={0x348, 0x8, 0x0, 0x1, [{0x4}, {0x144, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x134, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x70}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x40, @mcast2, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffa}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)

kernel console output (not intermixed with test programs):

_hcd: disconnect device
[  323.644229][T21150] FAULT_INJECTION: forcing a failure.
[  323.644229][T21150] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.657506][T21150] CPU: 1 UID: 0 PID: 21150 Comm: syz.8.6017 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  323.657541][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  323.657554][T21150] Call Trace:
[  323.657561][T21150]  <TASK>
[  323.657569][T21150]  dump_stack_lvl+0xf6/0x150
[  323.657600][T21150]  dump_stack+0x15/0x1a
[  323.657687][T21150]  should_fail_ex+0x261/0x270
[  323.657782][T21150]  should_fail+0xb/0x10
[  323.657812][T21150]  should_fail_usercopy+0x1a/0x20
[  323.657848][T21150]  _copy_from_user+0x1c/0xa0
[  323.657934][T21150]  copy_msghdr_from_user+0x54/0x2b0
[  323.658022][T21150]  __sys_sendmsg+0x141/0x240
[  323.658075][T21150]  __x64_sys_sendmsg+0x46/0x50
[  323.658218][T21150]  x64_sys_call+0x26f3/0x2e10
[  323.658282][T21150]  do_syscall_64+0xc9/0x1c0
[  323.658320][T21150]  ? clear_bhb_loop+0x25/0x80
[  323.658381][T21150]  ? clear_bhb_loop+0x25/0x80
[  323.658408][T21150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.658436][T21150] RIP: 0033:0x7f6ebf97e169
[  323.658500][T21150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.658519][T21150] RSP: 002b:00007f6ebdfe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.658537][T21150] RAX: ffffffffffffffda RBX: 00007f6ebfba5fa0 RCX: 00007f6ebf97e169
[  323.658552][T21150] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003
[  323.658568][T21150] RBP: 00007f6ebdfe7090 R08: 0000000000000000 R09: 0000000000000000
[  323.658589][T21150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.658681][T21150] R13: 0000000000000000 R14: 00007f6ebfba5fa0 R15: 00007fff988dce98
[  323.658704][T21150]  </TASK>
[  323.921303][T21162] SELinux:  policydb version 0 does not match my version range 15-34
[  323.969789][T21162] SELinux: failed to load policy
[  324.027834][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6025'.
[  324.223137][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6029'.
[  324.251257][T21158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.272057][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6029'.
[  324.286255][T21180] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6029'.
[  324.367227][T21191] netlink: 'syz.6.6033': attribute type 1 has an invalid length.
[  324.415642][T21194] FAULT_INJECTION: forcing a failure.
[  324.415642][T21194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.428879][T21194] CPU: 1 UID: 0 PID: 21194 Comm: syz.4.6034 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  324.428911][T21194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  324.428927][T21194] Call Trace:
[  324.428934][T21194]  <TASK>
[  324.428943][T21194]  dump_stack_lvl+0xf6/0x150
[  324.429015][T21194]  dump_stack+0x15/0x1a
[  324.429031][T21194]  should_fail_ex+0x261/0x270
[  324.429059][T21194]  should_fail+0xb/0x10
[  324.429085][T21194]  should_fail_usercopy+0x1a/0x20
[  324.429155][T21194]  _copy_from_user+0x1c/0xa0
[  324.429191][T21194]  copy_msghdr_from_user+0x54/0x2b0
[  324.429322][T21194]  __sys_sendmsg+0x141/0x240
[  324.429387][T21194]  __x64_sys_sendmsg+0x46/0x50
[  324.429419][T21194]  x64_sys_call+0x26f3/0x2e10
[  324.429445][T21194]  do_syscall_64+0xc9/0x1c0
[  324.429478][T21194]  ? clear_bhb_loop+0x25/0x80
[  324.429513][T21194]  ? clear_bhb_loop+0x25/0x80
[  324.429539][T21194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.429564][T21194] RIP: 0033:0x7fcfb702e169
[  324.429582][T21194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.429619][T21194] RSP: 002b:00007fcfb5697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.429637][T21194] RAX: ffffffffffffffda RBX: 00007fcfb7255fa0 RCX: 00007fcfb702e169
[  324.429649][T21194] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003
[  324.429717][T21194] RBP: 00007fcfb5697090 R08: 0000000000000000 R09: 0000000000000000
[  324.429731][T21194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.429742][T21194] R13: 0000000000000000 R14: 00007fcfb7255fa0 R15: 00007ffe65a56898
[  324.429760][T21194]  </TASK>
[  324.676040][T21200] pim6reg1: entered promiscuous mode
[  324.681461][T21200] pim6reg1: entered allmulticast mode
[  324.778648][T21205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.851968][T21210] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  324.858609][T21210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  324.866303][T21210] vhci_hcd vhci_hcd.0: Device attached
[  324.900545][T21213] vhci_hcd: unknown pdu 2
[  324.905671][ T5606] vhci_hcd: stop threads
[  324.910316][ T5606] vhci_hcd: release socket
[  324.914922][ T5606] vhci_hcd: disconnect device
[  324.936712][T21218] SELinux:  policydb version 0 does not match my version range 15-34
[  324.955809][T21218] SELinux: failed to load policy
[  325.035292][T21226] netlink: 'syz.8.6046': attribute type 5 has an invalid length.
[  325.214325][T21243] FAULT_INJECTION: forcing a failure.
[  325.214325][T21243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.227547][T21243] CPU: 1 UID: 0 PID: 21243 Comm: syz.8.6054 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  325.227610][T21243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  325.227625][T21243] Call Trace:
[  325.227633][T21243]  <TASK>
[  325.227642][T21243]  dump_stack_lvl+0xf6/0x150
[  325.227667][T21243]  dump_stack+0x15/0x1a
[  325.227684][T21243]  should_fail_ex+0x261/0x270
[  325.227712][T21243]  should_fail+0xb/0x10
[  325.227776][T21243]  should_fail_usercopy+0x1a/0x20
[  325.227832][T21243]  _copy_from_user+0x1c/0xa0
[  325.227884][T21243]  snd_seq_ioctl+0x124/0x2c0
[  325.227910][T21243]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  325.227929][T21243]  __se_sys_ioctl+0xc9/0x140
[  325.227959][T21243]  __x64_sys_ioctl+0x43/0x50
[  325.228050][T21243]  x64_sys_call+0x168d/0x2e10
[  325.228075][T21243]  do_syscall_64+0xc9/0x1c0
[  325.228124][T21243]  ? clear_bhb_loop+0x25/0x80
[  325.228200][T21243]  ? clear_bhb_loop+0x25/0x80
[  325.228313][T21243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.228365][T21243] RIP: 0033:0x7f6ebf97e169
[  325.228383][T21243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.228403][T21243] RSP: 002b:00007f6ebdfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  325.228426][T21243] RAX: ffffffffffffffda RBX: 00007f6ebfba5fa0 RCX: 00007f6ebf97e169
[  325.228440][T21243] RDX: 0000200000001280 RSI: 0000000040605346 RDI: 0000000000000004
[  325.228453][T21243] RBP: 00007f6ebdfe7090 R08: 0000000000000000 R09: 0000000000000000
[  325.228496][T21243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.228508][T21243] R13: 0000000000000000 R14: 00007f6ebfba5fa0 R15: 00007fff988dce98
[  325.228530][T21243]  </TASK>
[  325.498750][T21247] SELinux:  policydb version 0 does not match my version range 15-34
[  325.521599][T21247] SELinux: failed to load policy
[  325.525210][T21245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.655782][T21255] ALSA: seq fatal error: cannot create timer (-19)
[  325.698897][T21187] syz.0.6031 (21187) used greatest stack depth: 6080 bytes left
[  325.791148][    T9] IPVS: starting estimator thread 0...
[  325.883274][T21279] IPVS: using max 2304 ests per chain, 115200 per kthread
[  326.129684][T21287] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.629959][   T29] kauditd_printk_skb: 184 callbacks suppressed
[  326.629974][   T29] audit: type=1400 audit(1744849121.706:11259): avc:  denied  { mount } for  pid=21338 comm="syz.3.6093" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  326.678802][   T29] audit: type=1400 audit(1744849121.756:11260): avc:  denied  { unmount } for  pid=11997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  326.742462][T21349] __nla_validate_parse: 7 callbacks suppressed
[  326.742484][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6096'.
[  326.806424][T21302] chnl_net:caif_netlink_parms(): no params data found
[  326.847992][   T29] audit: type=1326 audit(1744849121.926:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.4.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  326.871850][   T29] audit: type=1326 audit(1744849121.926:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.4.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  326.900738][T21345] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.974835][T21302] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.980898][T21366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  326.982134][T21302] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.988523][T21366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  326.996227][T21302] bridge_slave_0: entered allmulticast mode
[  327.003286][T21366] vhci_hcd vhci_hcd.0: Device attached
[  327.010003][T21302] bridge_slave_0: entered promiscuous mode
[  327.030267][T21302] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.037408][T21302] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.066014][T21302] bridge_slave_1: entered allmulticast mode
[  327.076214][T21372] vhci_hcd: unknown pdu 2
[  327.082599][ T5606] vhci_hcd: stop threads
[  327.087035][ T5606] vhci_hcd: release socket
[  327.091517][ T5606] vhci_hcd: disconnect device
[  327.097167][T21302] bridge_slave_1: entered promiscuous mode
[  327.138655][T21302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.152682][T21302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.166044][   T29] audit: type=1400 audit(1744849122.246:11263): avc:  denied  { bind } for  pid=21374 comm="syz.6.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  327.185713][   T29] audit: type=1400 audit(1744849122.246:11264): avc:  denied  { listen } for  pid=21374 comm="syz.6.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  327.188273][T21377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6105'.
[  327.205644][   T29] audit: type=1400 audit(1744849122.246:11265): avc:  denied  { accept } for  pid=21374 comm="syz.6.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  327.238160][   T29] audit: type=1400 audit(1744849122.316:11266): avc:  denied  { read } for  pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  327.260541][   T29] audit: type=1400 audit(1744849122.316:11267): avc:  denied  { search } for  pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  327.282379][   T29] audit: type=1400 audit(1744849122.316:11268): avc:  denied  { append } for  pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  327.313866][T21302] team0: Port device team_slave_0 added
[  327.320889][T21302] team0: Port device team_slave_1 added
[  327.340398][T21302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.347389][T21302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.373792][T21302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.387728][T21302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.394817][T21302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.421020][T21302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.440314][T21384] pim6reg1: entered promiscuous mode
[  327.445682][T21384] pim6reg1: entered allmulticast mode
[  327.487037][T21302] hsr_slave_0: entered promiscuous mode
[  327.494628][T21302] hsr_slave_1: entered promiscuous mode
[  327.501365][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6110'.
[  327.504342][T21302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.518643][T21302] Cannot create hsr debugfs directory
[  327.554905][T21398] SELinux:  policydb version 0 does not match my version range 15-34
[  327.567434][T21398] SELinux: failed to load policy
[  327.602814][T21404] SELinux:  Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped).
[  327.659180][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6117'.
[  327.688718][T21302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.709214][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6115'.
[  327.734695][T21302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.770480][T21424] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  327.777110][T21424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  327.784990][T21424] vhci_hcd vhci_hcd.0: Device attached
[  327.797573][T21426] vhci_hcd: unknown pdu 2
[  327.802292][   T12] vhci_hcd: stop threads
[  327.806554][   T12] vhci_hcd: release socket
[  327.811539][   T12] vhci_hcd: disconnect device
[  327.825143][T21302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.853498][T21432] SELinux:  policydb version 0 does not match my version range 15-34
[  327.862141][T21432] SELinux: failed to load policy
[  327.880560][T21302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.987290][T21302] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  328.006440][T21446] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6131'.
[  328.008075][T21302] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  328.025228][T21302] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  328.035746][T21302] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  328.099592][T21462] SELinux:  policydb version 0 does not match my version range 15-34
[  328.115497][T21462] SELinux: failed to load policy
[  328.152847][T21302] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.179100][T21302] 8021q: adding VLAN 0 to HW filter on device team0
[  328.189967][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.197099][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.215549][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.222719][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.317220][T21476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6143'.
[  328.355882][T21302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.432852][T21302] veth0_vlan: entered promiscuous mode
[  328.441238][T21302] veth1_vlan: entered promiscuous mode
[  328.447597][T21501] usb usb8: usbfs: process 21501 (syz.6.6148) did not claim interface 0 before use
[  328.468991][T21302] veth0_macvtap: entered promiscuous mode
[  328.478894][T21302] veth1_macvtap: entered promiscuous mode
[  328.493326][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.503898][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.513901][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.517919][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6150'.
[  328.524638][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.543863][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.554407][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.564290][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.574802][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.584659][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.595330][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.605190][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.615691][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.625549][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.636368][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.646328][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.656783][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.666806][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.677362][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.687219][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.697975][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.707894][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.718351][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.728431][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.738954][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.750899][T21302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.759319][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.769886][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.779742][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.790226][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.800079][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.810609][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.820468][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.831090][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.841128][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.851685][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.861524][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.872006][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.881855][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.892311][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.902212][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.912855][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.922715][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.933170][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.943006][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.953745][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.963662][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.974184][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.984022][T21302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.994467][T21302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.013317][T21302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.025072][T21506] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.041937][T21302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.050770][T21302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.059795][T21302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.068802][T21302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.213834][T21526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6156'.
[  329.251145][T21541] pim6reg1: entered promiscuous mode
[  329.256728][T21541] pim6reg1: entered allmulticast mode
[  329.347510][T21549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  329.354134][T21549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  329.361921][T21549] vhci_hcd vhci_hcd.0: Device attached
[  329.428358][T21552] vhci_hcd: connection closed
[  329.429184][   T31] vhci_hcd: stop threads
[  329.438348][   T31] vhci_hcd: release socket
[  329.442897][   T31] vhci_hcd: disconnect device
[  329.460370][T21558] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  329.467002][T21558] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  329.474759][T21558] vhci_hcd vhci_hcd.0: Device attached
[  329.495048][T21561] vhci_hcd: unknown pdu 2
[  329.506426][   T12] vhci_hcd: stop threads
[  329.510756][   T12] vhci_hcd: release socket
[  329.515175][   T12] vhci_hcd: disconnect device
[  329.741564][T21559] chnl_net:caif_netlink_parms(): no params data found
[  329.796670][T21583] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6173'.
[  329.816297][T21559] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.823504][T21559] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.837798][T21559] bridge_slave_0: entered allmulticast mode
[  329.844358][T21559] bridge_slave_0: entered promiscuous mode
[  329.853486][T21559] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.860686][T21559] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.868017][T21559] bridge_slave_1: entered allmulticast mode
[  329.875257][T21559] bridge_slave_1: entered promiscuous mode
[  329.901081][T21598] pim6reg1: entered promiscuous mode
[  329.906532][T21598] pim6reg1: entered allmulticast mode
[  329.920335][T21559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.931369][T21559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.953458][T21559] team0: Port device team_slave_0 added
[  329.963872][T21559] team0: Port device team_slave_1 added
[  329.993582][T21559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.000691][T21559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.027140][T21559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.038937][T21559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.046023][T21559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.072229][T21559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.073908][T21604] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  330.089386][T21604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  330.097099][T21604] vhci_hcd vhci_hcd.0: Device attached
[  330.110874][T21605] vhci_hcd: unknown pdu 2
[  330.115371][ T5606] vhci_hcd: stop threads
[  330.119699][ T5606] vhci_hcd: release socket
[  330.124241][ T5606] vhci_hcd: disconnect device
[  330.146895][T21559] hsr_slave_0: entered promiscuous mode
[  330.155077][T21559] hsr_slave_1: entered promiscuous mode
[  330.161401][T21559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.169051][T21559] Cannot create hsr debugfs directory
[  330.240392][T21624] veth0_macvtap: left promiscuous mode
[  330.260304][T21624] macvtap0: entered promiscuous mode
[  330.265671][T21624] macvtap0: entered allmulticast mode
[  330.278543][T21624] veth0_macvtap: entered promiscuous mode
[  330.284418][T21624] veth0_macvtap: entered allmulticast mode
[  330.298453][T21627] netlink: 'syz.4.6186': attribute type 21 has an invalid length.
[  330.307606][T21624] team0: Device macvtap0 failed to register rx_handler
[  330.315104][T21624] veth0_macvtap: left allmulticast mode
[  330.321041][T21624] veth0_macvtap: left promiscuous mode
[  330.370793][T21631] pim6reg1: entered promiscuous mode
[  330.376308][T21631] pim6reg1: entered allmulticast mode
[  330.435267][T21559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.456381][T21643] FAULT_INJECTION: forcing a failure.
[  330.456381][T21643] name failslab, interval 1, probability 0, space 0, times 0
[  330.456473][T21643] CPU: 0 UID: 0 PID: 21643 Comm: syz.4.6194 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  330.456501][T21643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  330.456513][T21643] Call Trace:
[  330.456519][T21643]  <TASK>
[  330.456525][T21643]  dump_stack_lvl+0xf6/0x150
[  330.456549][T21643]  dump_stack+0x15/0x1a
[  330.456569][T21643]  should_fail_ex+0x261/0x270
[  330.456622][T21643]  should_failslab+0x8f/0xb0
[  330.456653][T21643]  __kmalloc_cache_noprof+0x55/0x320
[  330.456677][T21643]  ? kobject_uevent_env+0x1a4/0x550
[  330.456704][T21643]  ? __pfx_dev_uevent_name+0x10/0x10
[  330.456816][T21643]  kobject_uevent_env+0x1a4/0x550
[  330.456843][T21643]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  330.456869][T21643]  ? device_pm_check_callbacks+0x632/0x650
[  330.456896][T21643]  kobject_uevent+0x1c/0x30
[  330.456918][T21643]  device_del+0x6fc/0x780
[  330.456980][T21643]  device_destroy+0x6c/0xa0
[  330.457006][T21643]  vcs_remove_sysfs+0x21/0x60
[  330.457032][T21643]  vc_deallocate+0x105/0x210
[  330.457066][T21643]  vt_disallocate_all+0x170/0x200
[  330.457104][T21643]  vt_ioctl+0x15cf/0x18e0
[  330.457123][T21643]  ? tty_jobctrl_ioctl+0x2ab/0x810
[  330.457209][T21643]  tty_ioctl+0x813/0xbd0
[  330.457231][T21643]  ? __pfx_tty_ioctl+0x10/0x10
[  330.457253][T21643]  __se_sys_ioctl+0xc9/0x140
[  330.457285][T21643]  __x64_sys_ioctl+0x43/0x50
[  330.457320][T21643]  x64_sys_call+0x168d/0x2e10
[  330.457381][T21643]  do_syscall_64+0xc9/0x1c0
[  330.457413][T21643]  ? clear_bhb_loop+0x25/0x80
[  330.457439][T21643]  ? clear_bhb_loop+0x25/0x80
[  330.457489][T21643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.457510][T21643] RIP: 0033:0x7fcfb702e169
[  330.457526][T21643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.457549][T21643] RSP: 002b:00007fcfb5697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  330.457571][T21643] RAX: ffffffffffffffda RBX: 00007fcfb7255fa0 RCX: 00007fcfb702e169
[  330.457585][T21643] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  330.457599][T21643] RBP: 00007fcfb5697090 R08: 0000000000000000 R09: 0000000000000000
[  330.457614][T21643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.457628][T21643] R13: 0000000000000000 R14: 00007fcfb7255fa0 R15: 00007ffe65a56898
[  330.457720][T21643]  </TASK>
[  330.492549][T21559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.547095][T21559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.793101][T21654] Cannot find set identified by id 0 to match
[  330.795009][T21559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.868969][T21668] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[  330.868969][T21668]    program syz.8.6206 not setting count and/or reply_len properly
[  330.905273][T21559] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  330.916026][T21559] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  330.934926][T21559] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  330.965405][T21559] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  331.057621][T21559] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.070801][T21666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.076487][T21559] 8021q: adding VLAN 0 to HW filter on device team0
[  331.079411][T21666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.098856][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.106061][ T5619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.118804][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.125902][ T5609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.170635][T21684] sctp: [Deprecated]: syz.4.6212 (pid 21684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  331.170635][T21684] Use struct sctp_sack_info instead
[  331.235173][T21559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.323065][T21707] sctp: [Deprecated]: syz.4.6218 (pid 21707) Use of int in maxseg socket option.
[  331.323065][T21707] Use struct sctp_assoc_value instead
[  331.366609][T21559] veth0_vlan: entered promiscuous mode
[  331.379049][T21559] veth1_vlan: entered promiscuous mode
[  331.399424][T21559] veth0_macvtap: entered promiscuous mode
[  331.409165][T21559] veth1_macvtap: entered promiscuous mode
[  331.424431][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.435024][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.444923][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.455461][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.465519][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.476317][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.486303][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.496797][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.506757][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517236][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517271][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517290][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517307][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517323][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517342][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517357][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517373][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517386][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517480][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517567][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517598][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517613][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517629][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517644][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.517659][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.517671][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.519688][T21559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.701467][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.711955][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.722025][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.732590][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.742548][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.753032][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.762936][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.773520][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.783425][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.794028][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.803897][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.814886][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.824732][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.835299][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.845253][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.855824][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.865761][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.876315][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.886185][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.896889][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.906824][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.917469][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.927398][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.937976][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.947863][T21559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.958413][T21559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.970601][T21559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.991515][T21559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.000366][T21559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.009257][T21559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.018088][T21559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.033110][   T29] kauditd_printk_skb: 68 callbacks suppressed
[  332.033127][   T29] audit: type=1400 audit(1744849127.116:11335): avc:  denied  { bind } for  pid=21737 comm="syz.4.6229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  332.094697][T21734] __nla_validate_parse: 7 callbacks suppressed
[  332.094717][T21734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6228'.
[  332.185811][T21758] netlink: 332 bytes leftover after parsing attributes in process `syz.8.6236'.
[  332.195383][T21758] netlink: 'syz.8.6236': attribute type 9 has an invalid length.
[  332.203281][T21758] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6236'.
[  332.212399][T21758] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6236'.
[  332.226984][   T29] audit: type=1326 audit(1744849127.306:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.250883][   T29] audit: type=1326 audit(1744849127.306:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.274704][   T29] audit: type=1326 audit(1744849127.306:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.298514][   T29] audit: type=1326 audit(1744849127.306:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.322418][   T29] audit: type=1326 audit(1744849127.306:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.346246][   T29] audit: type=1326 audit(1744849127.306:11341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.369860][   T29] audit: type=1326 audit(1744849127.306:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.393870][   T29] audit: type=1326 audit(1744849127.306:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.417609][   T29] audit: type=1326 audit(1744849127.306:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21752 comm="syz.4.6234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  332.505198][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6240'.
[  332.627576][T21791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6243'.
[  332.636373][T21793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6248'.
[  332.708028][T21802] pim6reg1: entered promiscuous mode
[  332.713605][T21802] pim6reg1: entered allmulticast mode
[  332.731444][T21804] netem: incorrect gi model size
[  332.736439][T21804] netem: change failed
[  333.094111][T21828] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6264'.
[  333.187085][T21851] pim6reg1: entered promiscuous mode
[  333.192778][T21851] pim6reg1: entered allmulticast mode
[  333.408840][T21875] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6279'.
[  333.493802][T21888] batadv_slave_1: entered promiscuous mode
[  333.524538][T21888] batadv_slave_1: left promiscuous mode
[  333.530792][T21894] pim6reg1: entered promiscuous mode
[  333.536123][T21894] pim6reg1: entered allmulticast mode
[  333.547723][T21896] FAULT_INJECTION: forcing a failure.
[  333.547723][T21896] name failslab, interval 1, probability 0, space 0, times 0
[  333.560636][T21896] CPU: 1 UID: 0 PID: 21896 Comm: syz.8.6287 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  333.560668][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.560683][T21896] Call Trace:
[  333.560691][T21896]  <TASK>
[  333.560699][T21896]  dump_stack_lvl+0xf6/0x150
[  333.560725][T21896]  dump_stack+0x15/0x1a
[  333.560742][T21896]  should_fail_ex+0x261/0x270
[  333.560828][T21896]  should_failslab+0x8f/0xb0
[  333.560862][T21896]  kmem_cache_alloc_noprof+0x59/0x340
[  333.560888][T21896]  ? getname_flags+0x81/0x3b0
[  333.560911][T21896]  getname_flags+0x81/0x3b0
[  333.560959][T21896]  __x64_sys_symlinkat+0x43/0x70
[  333.560995][T21896]  x64_sys_call+0x14dc/0x2e10
[  333.561018][T21896]  do_syscall_64+0xc9/0x1c0
[  333.561067][T21896]  ? clear_bhb_loop+0x25/0x80
[  333.561155][T21896]  ? clear_bhb_loop+0x25/0x80
[  333.561176][T21896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.561197][T21896] RIP: 0033:0x7f6ebf97e169
[  333.561286][T21896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.561308][T21896] RSP: 002b:00007f6ebdfe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  333.561327][T21896] RAX: ffffffffffffffda RBX: 00007f6ebfba5fa0 RCX: 00007f6ebf97e169
[  333.561339][T21896] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000200000000000
[  333.561351][T21896] RBP: 00007f6ebdfe7090 R08: 0000000000000000 R09: 0000000000000000
[  333.561362][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.561373][T21896] R13: 0000000000000000 R14: 00007f6ebfba5fa0 R15: 00007fff988dce98
[  333.561410][T21896]  </TASK>
[  333.779211][T21905] FAULT_INJECTION: forcing a failure.
[  333.779211][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.790163][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6289'.
[  333.792353][T21905] CPU: 1 UID: 0 PID: 21905 Comm: syz.3.6290 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  333.792405][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.792422][T21905] Call Trace:
[  333.792431][T21905]  <TASK>
[  333.792441][T21905]  dump_stack_lvl+0xf6/0x150
[  333.792590][T21905]  dump_stack+0x15/0x1a
[  333.792618][T21905]  should_fail_ex+0x261/0x270
[  333.792654][T21905]  should_fail+0xb/0x10
[  333.792684][T21905]  should_fail_usercopy+0x1a/0x20
[  333.792722][T21905]  _copy_from_user+0x1c/0xa0
[  333.792786][T21905]  move_addr_to_kernel+0x8c/0x130
[  333.792970][T21905]  __sys_sendto+0x130/0x230
[  333.793028][T21905]  __x64_sys_sendto+0x78/0x90
[  333.793059][T21905]  x64_sys_call+0x2bcb/0x2e10
[  333.793087][T21905]  do_syscall_64+0xc9/0x1c0
[  333.793171][T21905]  ? clear_bhb_loop+0x25/0x80
[  333.793199][T21905]  ? clear_bhb_loop+0x25/0x80
[  333.793302][T21905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.793404][T21905] RIP: 0033:0x7f2931d9e169
[  333.793423][T21905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.793445][T21905] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  333.793468][T21905] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  333.793507][T21905] RDX: 000000000000000e RSI: 0000200000000580 RDI: 0000000000000003
[  333.793519][T21905] RBP: 00007f2930407090 R08: 0000200000000440 R09: 0000000000000014
[  333.793530][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.793541][T21905] R13: 0000000000000000 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  333.793561][T21905]  </TASK>
[  334.192333][T21936] FAULT_INJECTION: forcing a failure.
[  334.192333][T21936] name failslab, interval 1, probability 0, space 0, times 0
[  334.205235][T21936] CPU: 1 UID: 0 PID: 21936 Comm: syz.3.6303 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  334.205263][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  334.205276][T21936] Call Trace:
[  334.205282][T21936]  <TASK>
[  334.205290][T21936]  dump_stack_lvl+0xf6/0x150
[  334.205318][T21936]  dump_stack+0x15/0x1a
[  334.205337][T21936]  should_fail_ex+0x261/0x270
[  334.205387][T21936]  should_failslab+0x8f/0xb0
[  334.205423][T21936]  __kmalloc_cache_node_noprof+0x58/0x340
[  334.205461][T21936]  ? page_pool_create_percpu+0x4d/0x660
[  334.205488][T21936]  page_pool_create_percpu+0x4d/0x660
[  334.205540][T21936]  ? __kvmalloc_node_noprof+0x27f/0x520
[  334.205568][T21936]  ? bpf_test_run_xdp_live+0x120/0x1050
[  334.205606][T21936]  page_pool_create+0x1a/0x20
[  334.205700][T21936]  bpf_test_run_xdp_live+0x13a/0x1050
[  334.205728][T21936]  ? synchronize_rcu_expedited+0x6d5/0x790
[  334.205752][T21936]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  334.205793][T21936]  ? __pfx_autoremove_wake_function+0x10/0x10
[  334.205826][T21936]  ? 0xffffffffa00038c0
[  334.205843][T21936]  ? synchronize_rcu+0x4a/0x320
[  334.205869][T21936]  ? 0xffffffffa00038c0
[  334.205887][T21936]  ? 0xffffffffa00038c0
[  334.205913][T21936]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  334.206006][T21936]  bpf_prog_test_run_xdp+0x526/0x8e0
[  334.206074][T21936]  ? __rcu_read_unlock+0x4e/0x70
[  334.206110][T21936]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  334.206176][T21936]  bpf_prog_test_run+0x20e/0x3a0
[  334.206263][T21936]  __sys_bpf+0x440/0x800
[  334.206296][T21936]  __x64_sys_bpf+0x43/0x50
[  334.206318][T21936]  x64_sys_call+0x23da/0x2e10
[  334.206423][T21936]  do_syscall_64+0xc9/0x1c0
[  334.206531][T21936]  ? clear_bhb_loop+0x25/0x80
[  334.206554][T21936]  ? clear_bhb_loop+0x25/0x80
[  334.206580][T21936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.206612][T21936] RIP: 0033:0x7f2931d9e169
[  334.206630][T21936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.206679][T21936] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  334.206700][T21936] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  334.206713][T21936] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  334.206725][T21936] RBP: 00007f2930407090 R08: 0000000000000000 R09: 0000000000000000
[  334.206739][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.206799][T21936] R13: 0000000000000000 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  334.206818][T21936]  </TASK>
[  334.501230][T21934] pim6reg1: entered promiscuous mode
[  334.506586][T21934] pim6reg1: entered allmulticast mode
[  334.923696][T21976] block device autoloading is deprecated and will be removed.
[  334.950503][T21976] syz.3.6318: attempt to access beyond end of device
[  334.950503][T21976] md31: rw=2048, sector=0, nr_sectors = 8 limit=0
[  335.072285][T21984] vlan2: entered allmulticast mode
[  335.077479][T21984] bridge_slave_0: entered allmulticast mode
[  335.108307][T21989] FAULT_INJECTION: forcing a failure.
[  335.108307][T21989] name failslab, interval 1, probability 0, space 0, times 0
[  335.121282][T21989] CPU: 0 UID: 0 PID: 21989 Comm: syz.3.6324 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  335.121316][T21989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  335.121331][T21989] Call Trace:
[  335.121365][T21989]  <TASK>
[  335.121374][T21989]  dump_stack_lvl+0xf6/0x150
[  335.121401][T21989]  dump_stack+0x15/0x1a
[  335.121422][T21989]  should_fail_ex+0x261/0x270
[  335.121526][T21989]  should_failslab+0x8f/0xb0
[  335.121601][T21989]  kmem_cache_alloc_noprof+0x59/0x340
[  335.121623][T21989]  ? vm_area_alloc+0x2c/0xb0
[  335.121686][T21989]  vm_area_alloc+0x2c/0xb0
[  335.121711][T21989]  alloc_bprm+0x2b5/0x680
[  335.121744][T21989]  ? __check_object_size+0x367/0x510
[  335.121839][T21989]  do_execveat_common+0x12b/0x7e0
[  335.121966][T21989]  __x64_sys_execve+0x5c/0x70
[  335.121998][T21989]  x64_sys_call+0x1362/0x2e10
[  335.122026][T21989]  do_syscall_64+0xc9/0x1c0
[  335.122062][T21989]  ? clear_bhb_loop+0x25/0x80
[  335.122134][T21989]  ? clear_bhb_loop+0x25/0x80
[  335.122200][T21989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.122224][T21989] RIP: 0033:0x7f2931d9e169
[  335.122239][T21989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.122331][T21989] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  335.122354][T21989] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  335.122369][T21989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  335.122407][T21989] RBP: 00007f2930407090 R08: 0000000000000000 R09: 0000000000000000
[  335.122421][T21989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.122435][T21989] R13: 0000000000000000 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  335.122458][T21989]  </TASK>
[  335.323560][T21990] vlan2: entered allmulticast mode
[  335.328757][T21990] bridge0: entered allmulticast mode
[  335.334231][T21990] bridge0: port 1(vlan2) entered blocking state
[  335.340913][T21990] bridge0: port 1(vlan2) entered disabled state
[  335.379036][T21997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.441608][T21997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.513590][T21997] netlink: 'syz.6.6328': attribute type 13 has an invalid length.
[  335.571667][T22014] dccp_xmit_packet: Payload too large (65475) for featneg.
[  335.614686][T21997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.759510][T22024] netlink: 'syz.0.6339': attribute type 1 has an invalid length.
[  336.206574][T22048] FAULT_INJECTION: forcing a failure.
[  336.206574][T22048] name failslab, interval 1, probability 0, space 0, times 0
[  336.219414][T22048] CPU: 0 UID: 0 PID: 22048 Comm: syz.6.6344 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  336.219445][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  336.219460][T22048] Call Trace:
[  336.219467][T22048]  <TASK>
[  336.219474][T22048]  dump_stack_lvl+0xf6/0x150
[  336.219513][T22048]  dump_stack+0x15/0x1a
[  336.219533][T22048]  should_fail_ex+0x261/0x270
[  336.219620][T22048]  should_failslab+0x8f/0xb0
[  336.219669][T22048]  kmem_cache_alloc_noprof+0x59/0x340
[  336.219693][T22048]  ? skb_clone+0x154/0x1f0
[  336.219727][T22048]  skb_clone+0x154/0x1f0
[  336.219759][T22048]  __netlink_deliver_tap+0x2bd/0x4f0
[  336.219797][T22048]  netlink_unicast+0x69e/0x6c0
[  336.219826][T22048]  netlink_sendmsg+0x609/0x720
[  336.219977][T22048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.220073][T22048]  __sock_sendmsg+0x140/0x180
[  336.220097][T22048]  ____sys_sendmsg+0x350/0x4e0
[  336.220226][T22048]  __sys_sendmsg+0x1a0/0x240
[  336.220272][T22048]  __x64_sys_sendmsg+0x46/0x50
[  336.220354][T22048]  x64_sys_call+0x26f3/0x2e10
[  336.220376][T22048]  do_syscall_64+0xc9/0x1c0
[  336.220412][T22048]  ? clear_bhb_loop+0x25/0x80
[  336.220439][T22048]  ? clear_bhb_loop+0x25/0x80
[  336.220502][T22048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.220524][T22048] RIP: 0033:0x7f0c1957e169
[  336.220575][T22048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.220595][T22048] RSP: 002b:00007f0c17be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.220618][T22048] RAX: ffffffffffffffda RBX: 00007f0c197a5fa0 RCX: 00007f0c1957e169
[  336.220634][T22048] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  336.220657][T22048] RBP: 00007f0c17be7090 R08: 0000000000000000 R09: 0000000000000000
[  336.220669][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.220682][T22048] R13: 0000000000000000 R14: 00007f0c197a5fa0 R15: 00007ffe433788f8
[  336.220703][T22048]  </TASK>
[  336.636507][T22081] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  336.643321][T22081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  336.650999][T22081] vhci_hcd vhci_hcd.0: Device attached
[  336.686776][T22083] vhci_hcd: unknown pdu 2
[  336.693162][ T5619] vhci_hcd: stop threads
[  336.697442][ T5619] vhci_hcd: release socket
[  336.701956][ T5619] vhci_hcd: disconnect device
[  337.100406][T22146] FAULT_INJECTION: forcing a failure.
[  337.100406][T22146] name failslab, interval 1, probability 0, space 0, times 0
[  337.122137][T22146] CPU: 0 UID: 0 PID: 22146 Comm: syz.0.6354 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  337.122172][T22146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  337.122188][T22146] Call Trace:
[  337.122195][T22146]  <TASK>
[  337.122203][T22146]  dump_stack_lvl+0xf6/0x150
[  337.122233][T22146]  dump_stack+0x15/0x1a
[  337.122311][T22146]  should_fail_ex+0x261/0x270
[  337.122344][T22146]  should_failslab+0x8f/0xb0
[  337.122453][T22146]  kmem_cache_alloc_noprof+0x59/0x340
[  337.122480][T22146]  ? copy_fs_struct+0x31/0x110
[  337.122510][T22146]  copy_fs_struct+0x31/0x110
[  337.122538][T22146]  copy_fs+0x5a/0xf0
[  337.122577][T22146]  copy_process+0xc87/0x1f60
[  337.122613][T22146]  kernel_clone+0x168/0x5d0
[  337.122645][T22146]  ? ktime_get+0x1ef/0x210
[  337.122681][T22146]  __x64_sys_clone+0xe9/0x120
[  337.122746][T22146]  x64_sys_call+0x2dc9/0x2e10
[  337.122773][T22146]  do_syscall_64+0xc9/0x1c0
[  337.122809][T22146]  ? clear_bhb_loop+0x25/0x80
[  337.122835][T22146]  ? clear_bhb_loop+0x25/0x80
[  337.122896][T22146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.122920][T22146] RIP: 0033:0x7f2e5153e169
[  337.122937][T22146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.122955][T22146] RSP: 002b:00007f2e4fba6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  337.122975][T22146] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  337.122987][T22146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000
[  337.123034][T22146] RBP: 00007f2e4fba7090 R08: 0000000000000000 R09: 0000000000000000
[  337.123048][T22146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  337.123062][T22146] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  337.123082][T22146]  </TASK>
[  337.334394][T22153] __nla_validate_parse: 4 callbacks suppressed
[  337.334414][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6356'.
[  337.468680][   T29] kauditd_printk_skb: 899 callbacks suppressed
[  337.468699][   T29] audit: type=1400 audit(1744849132.546:12244): avc:  denied  { ioctl } for  pid=22163 comm="syz.4.6362" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  337.541411][   T29] audit: type=1400 audit(1744849132.586:12245): avc:  denied  { compute_member } for  pid=22163 comm="syz.4.6362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  337.633971][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6371'.
[  337.645345][T22180] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  337.652026][T22180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  337.659737][T22180] vhci_hcd vhci_hcd.0: Device attached
[  337.670152][T22185] vhci_hcd: unknown pdu 2
[  337.677190][ T5605] vhci_hcd: stop threads
[  337.681629][ T5605] vhci_hcd: release socket
[  337.686072][ T5605] vhci_hcd: disconnect device
[  337.714757][T22188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  337.721386][T22188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  337.721501][T22188] vhci_hcd vhci_hcd.0: Device attached
[  337.721889][T22189] vhci_hcd: unknown pdu 2
[  337.730823][ T5606] vhci_hcd: stop threads
[  337.730835][ T5606] vhci_hcd: release socket
[  337.730854][ T5606] vhci_hcd: disconnect device
[  337.787454][   T29] audit: type=1326 audit(1744849132.866:12246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.811213][   T29] audit: type=1326 audit(1744849132.866:12247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.834862][   T29] audit: type=1326 audit(1744849132.866:12248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.858685][   T29] audit: type=1326 audit(1744849132.866:12249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.882480][   T29] audit: type=1326 audit(1744849132.866:12250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.906107][   T29] audit: type=1326 audit(1744849132.866:12251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.930062][   T29] audit: type=1326 audit(1744849132.866:12252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.953703][   T29] audit: type=1326 audit(1744849132.866:12253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.3.6366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  337.965295][T22197] netlink: 'syz.8.6374': attribute type 1 has an invalid length.
[  337.993483][T22199] FAULT_INJECTION: forcing a failure.
[  337.993483][T22199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.006633][T22199] CPU: 1 UID: 0 PID: 22199 Comm: syz.0.6375 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  338.006685][T22199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  338.006697][T22199] Call Trace:
[  338.006704][T22199]  <TASK>
[  338.006712][T22199]  dump_stack_lvl+0xf6/0x150
[  338.006738][T22199]  dump_stack+0x15/0x1a
[  338.006831][T22199]  should_fail_ex+0x261/0x270
[  338.006864][T22199]  should_fail+0xb/0x10
[  338.006892][T22199]  should_fail_usercopy+0x1a/0x20
[  338.006986][T22199]  _copy_from_user+0x1c/0xa0
[  338.007020][T22199]  __se_sys_shmctl+0xfd/0x400
[  338.007054][T22199]  ? bpf_trace_run2+0x12c/0x1d0
[  338.007095][T22199]  __x64_sys_shmctl+0x43/0x50
[  338.007187][T22199]  x64_sys_call+0x152f/0x2e10
[  338.007287][T22199]  do_syscall_64+0xc9/0x1c0
[  338.007321][T22199]  ? clear_bhb_loop+0x25/0x80
[  338.007409][T22199]  ? clear_bhb_loop+0x25/0x80
[  338.007477][T22199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.007500][T22199] RIP: 0033:0x7f2e5153e169
[  338.007518][T22199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.007551][T22199] RSP: 002b:00007f2e4fba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  338.007572][T22199] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  338.007584][T22199] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  338.007596][T22199] RBP: 00007f2e4fba7090 R08: 0000000000000000 R09: 0000000000000000
[  338.007607][T22199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.007619][T22199] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  338.007640][T22199]  </TASK>
[  338.233722][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6376'.
[  338.327689][T22216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=22216 comm=syz.8.6381
[  338.354505][T22217] rdma_op ffff88810a694980 conn xmit_rdma 0000000000000000
[  338.466604][T22228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6386'.
[  338.585947][T22243] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  338.592527][T22243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  338.600295][T22243] vhci_hcd vhci_hcd.0: Device attached
[  338.622005][T22244] vhci_hcd: unknown pdu 2
[  338.639779][   T31] vhci_hcd: stop threads
[  338.644206][   T31] vhci_hcd: release socket
[  338.648731][   T31] vhci_hcd: disconnect device
[  338.672287][T22252] program syz.4.6396 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.673475][T22251] FAULT_INJECTION: forcing a failure.
[  338.673475][T22251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  338.694871][T22251] CPU: 0 UID: 0 PID: 22251 Comm: syz.6.6394 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  338.694905][T22251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  338.694920][T22251] Call Trace:
[  338.694927][T22251]  <TASK>
[  338.694935][T22251]  dump_stack_lvl+0xf6/0x150
[  338.694960][T22251]  dump_stack+0x15/0x1a
[  338.694976][T22251]  should_fail_ex+0x261/0x270
[  338.695084][T22251]  should_fail+0xb/0x10
[  338.695108][T22251]  should_fail_usercopy+0x1a/0x20
[  338.695136][T22251]  _copy_from_user+0x1c/0xa0
[  338.695169][T22251]  copy_msghdr_from_user+0x54/0x2b0
[  338.695265][T22251]  ? __fget_files+0x186/0x1c0
[  338.695287][T22251]  __sys_sendmsg+0x141/0x240
[  338.695448][T22251]  __x64_sys_sendmsg+0x46/0x50
[  338.695474][T22251]  x64_sys_call+0x26f3/0x2e10
[  338.695496][T22251]  do_syscall_64+0xc9/0x1c0
[  338.695605][T22251]  ? clear_bhb_loop+0x25/0x80
[  338.695626][T22251]  ? clear_bhb_loop+0x25/0x80
[  338.695649][T22251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.695669][T22251] RIP: 0033:0x7f0c1957e169
[  338.695684][T22251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.695738][T22251] RSP: 002b:00007f0c17be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.695757][T22251] RAX: ffffffffffffffda RBX: 00007f0c197a5fa0 RCX: 00007f0c1957e169
[  338.695769][T22251] RDX: 0000000000000040 RSI: 0000200000000500 RDI: 0000000000000003
[  338.695780][T22251] RBP: 00007f0c17be7090 R08: 0000000000000000 R09: 0000000000000000
[  338.695792][T22251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.695803][T22251] R13: 0000000000000000 R14: 00007f0c197a5fa0 R15: 00007ffe433788f8
[  338.695822][T22251]  </TASK>
[  339.061276][T22268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.070539][T22268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.202256][T22274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6404'.
[  339.256635][T22280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6407'.
[  339.288505][T22285] rdma_op ffff888133f0cd80 conn xmit_rdma 0000000000000000
[  339.489359][T22307] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6417'.
[  339.541977][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6420'.
[  339.567206][T22321] FAULT_INJECTION: forcing a failure.
[  339.567206][T22321] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.580562][T22321] CPU: 0 UID: 0 PID: 22321 Comm: syz.3.6422 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  339.580598][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  339.580614][T22321] Call Trace:
[  339.580623][T22321]  <TASK>
[  339.580632][T22321]  dump_stack_lvl+0xf6/0x150
[  339.580662][T22321]  dump_stack+0x15/0x1a
[  339.580682][T22321]  should_fail_ex+0x261/0x270
[  339.580772][T22321]  should_fail+0xb/0x10
[  339.580800][T22321]  should_fail_usercopy+0x1a/0x20
[  339.580834][T22321]  strncpy_from_user+0x25/0x230
[  339.580916][T22321]  __se_sys_request_key+0x5a/0x290
[  339.580950][T22321]  __x64_sys_request_key+0x55/0x70
[  339.580979][T22321]  x64_sys_call+0x2b17/0x2e10
[  339.581074][T22321]  do_syscall_64+0xc9/0x1c0
[  339.581109][T22321]  ? clear_bhb_loop+0x25/0x80
[  339.581200][T22321]  ? clear_bhb_loop+0x25/0x80
[  339.581226][T22321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.581300][T22321] RIP: 0033:0x7f2931d9e169
[  339.581317][T22321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.581353][T22321] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  339.581434][T22321] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  339.581448][T22321] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  339.581462][T22321] RBP: 00007f2930407090 R08: 0000000000000000 R09: 0000000000000000
[  339.581476][T22321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.581489][T22321] R13: 0000000000000001 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  339.581518][T22321]  </TASK>
[  339.807136][T22329] pim6reg1: entered promiscuous mode
[  339.812506][T22329] pim6reg1: entered allmulticast mode
[  339.839589][T22327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.848285][T22327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.220493][T22351] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  340.227056][T22351] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  340.234815][T22351] vhci_hcd vhci_hcd.0: Device attached
[  340.241565][T22352] vhci_hcd: unknown pdu 2
[  340.257687][ T5605] vhci_hcd: stop threads
[  340.262167][ T5605] vhci_hcd: release socket
[  340.266597][ T5605] vhci_hcd: disconnect device
[  340.284992][T22355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.293765][T22355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.306958][T22359] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6436'.
[  340.316178][T22359] netlink: 'syz.0.6436': attribute type 5 has an invalid length.
[  340.324035][T22359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6436'.
[  340.452387][T22365] pim6reg1: entered promiscuous mode
[  340.457937][T22365] pim6reg1: entered allmulticast mode
[  340.613933][T22374] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  340.620491][T22374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  340.628202][T22374] vhci_hcd vhci_hcd.0: Device attached
[  340.635615][T22375] vhci_hcd: unknown pdu 2
[  340.646795][ T5605] vhci_hcd: stop threads
[  340.651224][ T5605] vhci_hcd: release socket
[  340.655686][ T5605] vhci_hcd: disconnect device
[  340.855062][T22390] netlink: 'syz.4.6448': attribute type 1 has an invalid length.
[  340.894270][T22396] netlink: 'syz.6.6451': attribute type 1 has an invalid length.
[  341.184683][T22422] FAULT_INJECTION: forcing a failure.
[  341.184683][T22422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.197913][T22422] CPU: 1 UID: 0 PID: 22422 Comm: syz.6.6461 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  341.197994][T22422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  341.198010][T22422] Call Trace:
[  341.198018][T22422]  <TASK>
[  341.198027][T22422]  dump_stack_lvl+0xf6/0x150
[  341.198054][T22422]  dump_stack+0x15/0x1a
[  341.198179][T22422]  should_fail_ex+0x261/0x270
[  341.198219][T22422]  should_fail+0xb/0x10
[  341.198249][T22422]  should_fail_usercopy+0x1a/0x20
[  341.198335][T22422]  _copy_from_user+0x1c/0xa0
[  341.198391][T22422]  copy_msghdr_from_user+0x54/0x2b0
[  341.198462][T22422]  ? __fget_files+0x186/0x1c0
[  341.198487][T22422]  __sys_sendmsg+0x141/0x240
[  341.198575][T22422]  __x64_sys_sendmsg+0x46/0x50
[  341.198607][T22422]  x64_sys_call+0x26f3/0x2e10
[  341.198658][T22422]  do_syscall_64+0xc9/0x1c0
[  341.198691][T22422]  ? clear_bhb_loop+0x25/0x80
[  341.198715][T22422]  ? clear_bhb_loop+0x25/0x80
[  341.198788][T22422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.198810][T22422] RIP: 0033:0x7f0c1957e169
[  341.198828][T22422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.198851][T22422] RSP: 002b:00007f0c17be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.198874][T22422] RAX: ffffffffffffffda RBX: 00007f0c197a5fa0 RCX: 00007f0c1957e169
[  341.198888][T22422] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  341.198904][T22422] RBP: 00007f0c17be7090 R08: 0000000000000000 R09: 0000000000000000
[  341.198988][T22422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  341.199000][T22422] R13: 0000000000000000 R14: 00007f0c197a5fa0 R15: 00007ffe433788f8
[  341.199022][T22422]  </TASK>
[  341.383796][T22424] pim6reg1: entered promiscuous mode
[  341.389166][T22424] pim6reg1: entered allmulticast mode
[  341.418770][T22430] 9pnet_fd: Insufficient options for proto=fd
[  341.851751][T22466] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  341.883088][T22468] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  342.024875][T22480] bond1: entered promiscuous mode
[  342.030240][T22480] bond1: entered allmulticast mode
[  342.053035][T22480] 8021q: adding VLAN 0 to HW filter on device bond1
[  342.076074][T22480] bond1 (unregistering): Released all slaves
[  342.228628][T22504] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  342.235271][T22504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  342.243029][T22504] vhci_hcd vhci_hcd.0: Device attached
[  342.249708][T22505] vhci_hcd: unknown pdu 2
[  342.268608][ T5607] vhci_hcd: stop threads
[  342.273039][ T5607] vhci_hcd: release socket
[  342.277477][ T5607] vhci_hcd: disconnect device
[  342.483975][   T29] kauditd_printk_skb: 291 callbacks suppressed
[  342.483995][   T29] audit: type=1326 audit(1744849137.566:12545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22452 comm="syz.6.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  342.517560][   T29] audit: type=1326 audit(1744849137.566:12546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22452 comm="syz.6.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  342.686463][T22508] FAULT_INJECTION: forcing a failure.
[  342.686463][T22508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.699649][T22508] CPU: 1 UID: 0 PID: 22508 Comm: syz.0.6494 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  342.699685][T22508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  342.699700][T22508] Call Trace:
[  342.699708][T22508]  <TASK>
[  342.699719][T22508]  dump_stack_lvl+0xf6/0x150
[  342.699745][T22508]  dump_stack+0x15/0x1a
[  342.699764][T22508]  should_fail_ex+0x261/0x270
[  342.699836][T22508]  should_fail+0xb/0x10
[  342.699872][T22508]  should_fail_usercopy+0x1a/0x20
[  342.699906][T22508]  _copy_from_user+0x1c/0xa0
[  342.699946][T22508]  copy_msghdr_from_user+0x54/0x2b0
[  342.699985][T22508]  ? __fget_files+0x186/0x1c0
[  342.700008][T22508]  __sys_sendmsg+0x141/0x240
[  342.700071][T22508]  __x64_sys_sendmsg+0x46/0x50
[  342.700175][T22508]  x64_sys_call+0x26f3/0x2e10
[  342.700202][T22508]  do_syscall_64+0xc9/0x1c0
[  342.700238][T22508]  ? clear_bhb_loop+0x25/0x80
[  342.700293][T22508]  ? clear_bhb_loop+0x25/0x80
[  342.700320][T22508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.700368][T22508] RIP: 0033:0x7f2e5153e169
[  342.700386][T22508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.700408][T22508] RSP: 002b:00007f2e4fba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.700464][T22508] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  342.700479][T22508] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  342.700493][T22508] RBP: 00007f2e4fba7090 R08: 0000000000000000 R09: 0000000000000000
[  342.700507][T22508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.700522][T22508] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  342.700545][T22508]  </TASK>
[  342.946168][T22514] __nla_validate_parse: 5 callbacks suppressed
[  342.946183][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6496'.
[  342.960342][   T29] audit: type=1400 audit(1744849138.036:12547): avc:  denied  { create } for  pid=22509 comm="syz.0.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  343.003381][   T29] audit: type=1400 audit(1744849138.066:12548): avc:  denied  { connect } for  pid=22509 comm="syz.0.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  343.024121][   T29] audit: type=1400 audit(1744849138.066:12549): avc:  denied  { allowed } for  pid=22509 comm="syz.0.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  343.080859][   T29] audit: type=1400 audit(1744849138.166:12550): avc:  denied  { setopt } for  pid=22521 comm="syz.8.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  343.113042][   T29] audit: type=1400 audit(1744849138.186:12551): avc:  denied  { create } for  pid=22521 comm="syz.8.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  343.131662][T22523] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6499'.
[  343.154183][   T29] audit: type=1400 audit(1744849138.206:12552): avc:  denied  { write } for  pid=22521 comm="syz.8.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  343.174679][   T29] audit: type=1400 audit(1744849138.206:12553): avc:  denied  { nlmsg_write } for  pid=22521 comm="syz.8.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  343.195791][   T29] audit: type=1400 audit(1744849138.216:12554): avc:  denied  { nlmsg_read } for  pid=22521 comm="syz.8.6499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  343.265274][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4
[  343.273172][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2
[  343.294965][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.302769][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.311038][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.318749][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.326506][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.334232][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.342005][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.342306][T22528] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.349689][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.364762][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.372609][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.380330][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.388010][ T3382] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0
[  343.430144][T22533] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  343.436488][T22546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.436803][T22533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  343.445907][T22546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.452921][T22533] vhci_hcd vhci_hcd.0: Device attached
[  343.469198][T22542] serio: Serial port ptm0
[  343.488769][T22539] vhci_hcd: connection closed
[  343.489067][ T5607] vhci_hcd: stop threads
[  343.489571][ T3382] hid-generic 0000:3000000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  343.494070][ T5607] vhci_hcd: release socket
[  343.512690][ T5607] vhci_hcd: disconnect device
[  343.517430][T22549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6508'.
[  343.645342][T22560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6513'.
[  343.676129][T22569] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  343.682821][T22569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  343.690614][T22569] vhci_hcd vhci_hcd.0: Device attached
[  343.703801][T22572] vhci_hcd: unknown pdu 2
[  343.706285][T22571] rdma_op ffff88810a69c580 conn xmit_rdma 0000000000000000
[  343.719703][   T31] vhci_hcd: stop threads
[  343.724093][   T31] vhci_hcd: release socket
[  343.728974][   T31] vhci_hcd: disconnect device
[  343.747164][T22575] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6517'.
[  343.764286][T22575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6517'.
[  343.808501][T22581] FAULT_INJECTION: forcing a failure.
[  343.808501][T22581] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  343.821771][T22581] CPU: 1 UID: 0 PID: 22581 Comm: syz.6.6520 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  343.821796][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  343.821856][T22581] Call Trace:
[  343.821862][T22581]  <TASK>
[  343.821869][T22581]  dump_stack_lvl+0xf6/0x150
[  343.821890][T22581]  dump_stack+0x15/0x1a
[  343.821928][T22581]  should_fail_ex+0x261/0x270
[  343.821959][T22581]  should_fail+0xb/0x10
[  343.821979][T22581]  should_fail_usercopy+0x1a/0x20
[  343.822004][T22581]  _copy_from_user+0x1c/0xa0
[  343.822094][T22581]  copy_msghdr_from_user+0x54/0x2b0
[  343.822124][T22581]  ? __fget_files+0x186/0x1c0
[  343.822144][T22581]  __sys_sendmsg+0x141/0x240
[  343.822186][T22581]  __x64_sys_sendmsg+0x46/0x50
[  343.822210][T22581]  x64_sys_call+0x26f3/0x2e10
[  343.822238][T22581]  do_syscall_64+0xc9/0x1c0
[  343.822264][T22581]  ? clear_bhb_loop+0x25/0x80
[  343.822298][T22581]  ? clear_bhb_loop+0x25/0x80
[  343.822322][T22581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.822340][T22581] RIP: 0033:0x7f0c1957e169
[  343.822381][T22581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.822396][T22581] RSP: 002b:00007f0c17be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.822412][T22581] RAX: ffffffffffffffda RBX: 00007f0c197a5fa0 RCX: 00007f0c1957e169
[  343.822422][T22581] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000003
[  343.822433][T22581] RBP: 00007f0c17be7090 R08: 0000000000000000 R09: 0000000000000000
[  343.822443][T22581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  343.822510][T22581] R13: 0000000000000000 R14: 00007f0c197a5fa0 R15: 00007ffe433788f8
[  343.822526][T22581]  </TASK>
[  344.048913][T22587] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6523'.
[  344.060568][T22587] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6523'.
[  344.080561][T22587] bond2: entered promiscuous mode
[  344.085743][T22587] bond2: entered allmulticast mode
[  344.091217][T22587] 8021q: adding VLAN 0 to HW filter on device bond2
[  344.103432][T22587] bond2 (unregistering): Released all slaves
[  344.181755][T22597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6527'.
[  344.195957][T22601] 9pnet_fd: Insufficient options for proto=fd
[  344.210437][T22605] netlink: 'syz.6.6529': attribute type 1 has an invalid length.
[  344.242652][T22608] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32)
[  344.374781][T22621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.383403][T22621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.610575][T22635] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6541'.
[  344.791768][T22655] netlink: 'syz.8.6546': attribute type 1 has an invalid length.
[  344.996545][T22665] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  345.003209][T22665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  345.011111][T22665] vhci_hcd vhci_hcd.0: Device attached
[  345.038631][T22666] vhci_hcd: unknown pdu 2
[  345.043483][ T5608] vhci_hcd: stop threads
[  345.047874][ T5608] vhci_hcd: release socket
[  345.052487][ T5608] vhci_hcd: disconnect device
[  345.410272][T22689] FAULT_INJECTION: forcing a failure.
[  345.410272][T22689] name failslab, interval 1, probability 0, space 0, times 0
[  345.423121][T22689] CPU: 0 UID: 0 PID: 22689 Comm: syz.8.6558 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  345.423149][T22689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  345.423161][T22689] Call Trace:
[  345.423169][T22689]  <TASK>
[  345.423178][T22689]  dump_stack_lvl+0xf6/0x150
[  345.423207][T22689]  dump_stack+0x15/0x1a
[  345.423288][T22689]  should_fail_ex+0x261/0x270
[  345.423319][T22689]  should_failslab+0x8f/0xb0
[  345.423349][T22689]  __kmalloc_cache_noprof+0x55/0x320
[  345.423377][T22689]  ? alloc_pipe_info+0xb0/0x360
[  345.423483][T22689]  alloc_pipe_info+0xb0/0x360
[  345.423545][T22689]  splice_direct_to_actor+0x621/0x680
[  345.423575][T22689]  ? __pfx_direct_splice_actor+0x10/0x10
[  345.423613][T22689]  ? selinux_file_permission+0x32a/0x360
[  345.423641][T22689]  do_splice_direct+0xd9/0x150
[  345.423674][T22689]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  345.423787][T22689]  do_sendfile+0x40a/0x690
[  345.423816][T22689]  __x64_sys_sendfile64+0x113/0x160
[  345.423838][T22689]  x64_sys_call+0xfc3/0x2e10
[  345.423865][T22689]  do_syscall_64+0xc9/0x1c0
[  345.423973][T22689]  ? clear_bhb_loop+0x25/0x80
[  345.423994][T22689]  ? clear_bhb_loop+0x25/0x80
[  345.424019][T22689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.424064][T22689] RIP: 0033:0x7f6ebf97e169
[  345.424091][T22689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.424112][T22689] RSP: 002b:00007f6ebdfc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  345.424133][T22689] RAX: ffffffffffffffda RBX: 00007f6ebfba6080 RCX: 00007f6ebf97e169
[  345.424146][T22689] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  345.424158][T22689] RBP: 00007f6ebdfc6090 R08: 0000000000000000 R09: 0000000000000000
[  345.424170][T22689] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001
[  345.424182][T22689] R13: 0000000000000001 R14: 00007f6ebfba6080 R15: 00007fff988dce98
[  345.424250][T22689]  </TASK>
[  345.842114][T22698] netlink: 'syz.4.6562': attribute type 1 has an invalid length.
[  346.644647][T22693] syz.0.6560 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  346.658925][T22693] CPU: 0 UID: 0 PID: 22693 Comm: syz.0.6560 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  346.658982][T22693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  346.658999][T22693] Call Trace:
[  346.659007][T22693]  <TASK>
[  346.659017][T22693]  dump_stack_lvl+0xf6/0x150
[  346.659048][T22693]  dump_stack+0x15/0x1a
[  346.659066][T22693]  dump_header+0x83/0x2d0
[  346.659172][T22693]  oom_kill_process+0x341/0x4c0
[  346.659240][T22693]  out_of_memory+0x9d1/0xc20
[  346.659276][T22693]  mem_cgroup_out_of_memory+0x13f/0x190
[  346.659314][T22693]  try_charge_memcg+0x59f/0x820
[  346.659351][T22693]  obj_cgroup_charge_pages+0xc0/0x1a0
[  346.659435][T22693]  __memcg_kmem_charge_page+0x9d/0x170
[  346.659477][T22693]  __alloc_frozen_pages_noprof+0x1a6/0x360
[  346.659565][T22693]  alloc_pages_mpol+0xb6/0x260
[  346.659597][T22693]  alloc_pages_noprof+0xe8/0x130
[  346.659628][T22693]  __vmalloc_node_range_noprof+0x6ea/0xe80
[  346.659691][T22693]  __kvmalloc_node_noprof+0x311/0x520
[  346.659722][T22693]  ? ip_set_alloc+0x1f/0x30
[  346.659807][T22693]  ? ip_set_alloc+0x1f/0x30
[  346.659830][T22693]  ip_set_alloc+0x1f/0x30
[  346.659847][T22693]  hash_netiface_create+0x273/0x730
[  346.659868][T22693]  ? __nla_parse+0x40/0x60
[  346.659921][T22693]  ? __pfx_hash_netiface_create+0x10/0x10
[  346.659945][T22693]  ip_set_create+0x3b6/0x970
[  346.659972][T22693]  ? __schedule+0x800/0xb70
[  346.660061][T22693]  ? schedule+0x5f/0xd0
[  346.660091][T22693]  ? __pfx_ip_set_create+0x10/0x10
[  346.660120][T22693]  nfnetlink_rcv_msg+0x4ba/0x580
[  346.660255][T22693]  netlink_rcv_skb+0x12f/0x230
[  346.660284][T22693]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  346.660335][T22693]  nfnetlink_rcv+0x187/0x1610
[  346.660370][T22693]  ? __kfree_skb+0x102/0x150
[  346.660399][T22693]  ? nlmon_xmit+0x51/0x60
[  346.660432][T22693]  ? __kfree_skb+0x102/0x150
[  346.660469][T22693]  ? consume_skb+0x49/0x160
[  346.660498][T22693]  ? nlmon_xmit+0x51/0x60
[  346.660536][T22693]  ? dev_hard_start_xmit+0x3d1/0x400
[  346.660571][T22693]  ? __dev_queue_xmit+0xb76/0x20b0
[  346.660653][T22693]  ? should_fail_ex+0x31/0x270
[  346.660685][T22693]  ? ref_tracker_free+0x3b8/0x420
[  346.660725][T22693]  ? __netlink_deliver_tap+0x4c6/0x4f0
[  346.660765][T22693]  netlink_unicast+0x605/0x6c0
[  346.660789][T22693]  netlink_sendmsg+0x609/0x720
[  346.660820][T22693]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.660928][T22693]  __sock_sendmsg+0x140/0x180
[  346.660984][T22693]  ____sys_sendmsg+0x350/0x4e0
[  346.661020][T22693]  __sys_sendmsg+0x1a0/0x240
[  346.661145][T22693]  __x64_sys_sendmsg+0x46/0x50
[  346.661180][T22693]  x64_sys_call+0x26f3/0x2e10
[  346.661203][T22693]  do_syscall_64+0xc9/0x1c0
[  346.661237][T22693]  ? clear_bhb_loop+0x25/0x80
[  346.661326][T22693]  ? clear_bhb_loop+0x25/0x80
[  346.661349][T22693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.661373][T22693] RIP: 0033:0x7f2e5153e169
[  346.661392][T22693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.661415][T22693] RSP: 002b:00007f2e4fba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.661440][T22693] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  346.661477][T22693] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  346.661534][T22693] RBP: 00007f2e515c0a68 R08: 0000000000000000 R09: 0000000000000000
[  346.661546][T22693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.661557][T22693] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  346.661577][T22693]  </TASK>
[  347.010529][T22693] memory: usage 307200kB, limit 307200kB, failcnt 246
[  347.017411][T22693] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[  347.025809][T22693] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  347.033201][T22693] Memory cgroup stats for /syz0:
[  347.035087][T22693] cache 0
[  347.043126][T22693] rss 0
[  347.045910][T22693] shmem 0
[  347.048859][T22693] mapped_file 0
[  347.052371][T22693] dirty 0
[  347.055314][T22693] writeback 0
[  347.058595][T22693] workingset_refault_anon 91
[  347.063203][T22693] workingset_refault_file 172
[  347.067914][T22693] swap 212992
[  347.071407][T22693] swapcached 0
[  347.074786][T22693] pgpgin 248325
[  347.078375][T22693] pgpgout 248317
[  347.081985][T22693] pgfault 334213
[  347.085533][T22693] pgmajfault 61
[  347.088992][T22693] inactive_anon 0
[  347.092718][T22693] active_anon 0
[  347.096208][T22693] inactive_file 0
[  347.099891][T22693] active_file 32768
[  347.103828][T22693] unevictable 0
[  347.107349][T22693] hierarchical_memory_limit 314572800
[  347.112792][T22693] hierarchical_memsw_limit 9223372036854771712
[  347.118996][T22693] total_cache 0
[  347.122511][T22693] total_rss 0
[  347.125802][T22693] total_shmem 0
[  347.129262][T22693] total_mapped_file 0
[  347.133312][T22693] total_dirty 0
[  347.136849][T22693] total_writeback 0
[  347.140708][T22693] total_workingset_refault_anon 91
[  347.145829][T22693] total_workingset_refault_file 172
[  347.151072][T22693] total_swap 212992
[  347.154896][T22693] total_swapcached 0
[  347.158863][T22693] total_pgpgin 275303
[  347.162950][T22693] total_pgpgout 275295
[  347.167037][T22693] total_pgfault 369789
[  347.171139][T22693] total_pgmajfault 61
[  347.175148][T22693] total_inactive_anon 0
[  347.179463][T22693] total_active_anon 0
[  347.183471][T22693] total_inactive_file 0
[  347.187630][T22693] total_active_file 32768
[  347.192164][T22693] total_unevictable 0
[  347.196293][T22693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6560,pid=22692,uid=0
[  347.211153][T22693] Memory cgroup out of memory: Killed process 22692 (syz.0.6560) total-vm:95928kB, anon-rss:936kB, file-rss:22584kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  347.458778][T22741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.467347][T22741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.796017][T22639] Set syz1 is full, maxelem 65536 reached
[  347.803572][T22751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  347.810127][T22751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  347.817880][T22751] vhci_hcd vhci_hcd.0: Device attached
[  347.826985][T22752] vhci_hcd: unknown pdu 2
[  347.833117][T22754] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  347.839765][T22754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  347.847446][T22754] vhci_hcd vhci_hcd.0: Device attached
[  347.854618][ T5608] vhci_hcd: stop threads
[  347.859018][ T5608] vhci_hcd: release socket
[  347.863555][ T5608] vhci_hcd: disconnect device
[  347.873073][T22758] vhci_hcd: unknown pdu 2
[  347.887651][ T5608] vhci_hcd: stop threads
[  347.892085][ T5608] vhci_hcd: release socket
[  347.896625][ T5608] vhci_hcd: disconnect device
[  347.956492][T22765] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.965345][T22765] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.974176][T22765] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.983035][T22765] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  347.991891][T22765] vxlan0: entered promiscuous mode
[  347.997095][T22765] vxlan0: entered allmulticast mode
[  348.056807][   T29] kauditd_printk_skb: 124 callbacks suppressed
[  348.056825][   T29] audit: type=1400 audit(1744849143.136:12679): avc:  denied  { ioctl } for  pid=22771 comm="syz.3.6586" path="socket:[67375]" dev="sockfs" ino=67375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  348.070312][T22769] __nla_validate_parse: 5 callbacks suppressed
[  348.070335][T22769] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6585'.
[  348.089455][T22773] team0: entered allmulticast mode
[  348.109440][T22773] team_slave_0: entered allmulticast mode
[  348.115315][T22773] team_slave_1: entered allmulticast mode
[  348.127120][   T29] audit: type=1400 audit(1744849143.206:12680): avc:  denied  { create } for  pid=22771 comm="syz.3.6586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  348.205023][   T29] audit: type=1400 audit(1744849143.286:12681): avc:  granted  { setsecparam } for  pid=22781 comm="syz.3.6589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  348.250522][   T29] audit: type=1326 audit(1744849143.326:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.269515][T22786] syzkaller1: entered promiscuous mode
[  348.274205][   T29] audit: type=1326 audit(1744849143.326:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.279623][T22786] syzkaller1: entered allmulticast mode
[  348.303250][   T29] audit: type=1326 audit(1744849143.326:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.303297][   T29] audit: type=1326 audit(1744849143.326:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.356319][   T29] audit: type=1326 audit(1744849143.326:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.380076][   T29] audit: type=1326 audit(1744849143.326:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.403808][   T29] audit: type=1326 audit(1744849143.326:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22777 comm="syz.6.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1957e169 code=0x7ffc0000
[  348.442962][T22784] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6590'.
[  348.541592][T22798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6594'.
[  348.553874][T22801] netlink: 'syz.4.6593': attribute type 1 has an invalid length.
[  348.580328][T22801] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.610976][T22801] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.618397][T22801] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  348.632301][T22801] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  348.754278][T22823] FAULT_INJECTION: forcing a failure.
[  348.754278][T22823] name failslab, interval 1, probability 0, space 0, times 0
[  348.767081][T22823] CPU: 1 UID: 0 PID: 22823 Comm: syz.8.6605 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  348.767112][T22823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  348.767127][T22823] Call Trace:
[  348.767134][T22823]  <TASK>
[  348.767142][T22823]  dump_stack_lvl+0xf6/0x150
[  348.767172][T22823]  dump_stack+0x15/0x1a
[  348.767261][T22823]  should_fail_ex+0x261/0x270
[  348.767292][T22823]  should_failslab+0x8f/0xb0
[  348.767395][T22823]  __kmalloc_cache_noprof+0x55/0x320
[  348.767424][T22823]  ? alloc_netdev_mqs+0x843/0xac0
[  348.767486][T22823]  alloc_netdev_mqs+0x843/0xac0
[  348.767583][T22823]  ip6_tnl_locate+0x397/0x4b0
[  348.767611][T22823]  ip6_tnl_siocdevprivate+0x4ed/0x700
[  348.767641][T22823]  dev_ifsioc+0x937/0xb20
[  348.767718][T22823]  dev_ioctl+0x8da/0xad0
[  348.767753][T22823]  sock_ioctl+0x5b8/0x630
[  348.767785][T22823]  ? __pfx_sock_ioctl+0x10/0x10
[  348.767881][T22823]  __se_sys_ioctl+0xc9/0x140
[  348.767915][T22823]  __x64_sys_ioctl+0x43/0x50
[  348.767947][T22823]  x64_sys_call+0x168d/0x2e10
[  348.767973][T22823]  do_syscall_64+0xc9/0x1c0
[  348.768008][T22823]  ? clear_bhb_loop+0x25/0x80
[  348.768034][T22823]  ? clear_bhb_loop+0x25/0x80
[  348.768055][T22823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.768117][T22823] RIP: 0033:0x7f6ebf97e169
[  348.768135][T22823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.768158][T22823] RSP: 002b:00007f6ebdfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.768177][T22823] RAX: ffffffffffffffda RBX: 00007f6ebfba5fa0 RCX: 00007f6ebf97e169
[  348.768189][T22823] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  348.768201][T22823] RBP: 00007f6ebdfe7090 R08: 0000000000000000 R09: 0000000000000000
[  348.768212][T22823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.768272][T22823] R13: 0000000000000000 R14: 00007f6ebfba5fa0 R15: 00007fff988dce98
[  348.768295][T22823]  </TASK>
[  348.799631][T22816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6602'.
[  348.840856][T22821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  348.985956][T22821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  348.993820][T22821] vhci_hcd vhci_hcd.0: Device attached
[  349.011026][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6607'.
[  349.022021][T22824] vhci_hcd: connection closed
[  349.022293][ T5619] vhci_hcd: stop threads
[  349.031448][ T5619] vhci_hcd: release socket
[  349.035894][ T5619] vhci_hcd: disconnect device
[  349.074032][T22841] rdma_op ffff88814b792580 conn xmit_rdma 0000000000000000
[  349.105733][T22845] FAULT_INJECTION: forcing a failure.
[  349.105733][T22845] name failslab, interval 1, probability 0, space 0, times 0
[  349.118668][T22845] CPU: 1 UID: 0 PID: 22845 Comm: syz.8.6613 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  349.118696][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  349.118789][T22845] Call Trace:
[  349.118794][T22845]  <TASK>
[  349.118802][T22845]  dump_stack_lvl+0xf6/0x150
[  349.118827][T22845]  dump_stack+0x15/0x1a
[  349.118847][T22845]  should_fail_ex+0x261/0x270
[  349.118882][T22845]  should_failslab+0x8f/0xb0
[  349.118923][T22845]  kmem_cache_alloc_noprof+0x59/0x340
[  349.118945][T22845]  ? security_file_alloc+0x32/0x100
[  349.119027][T22845]  security_file_alloc+0x32/0x100
[  349.119046][T22845]  init_file+0x5e/0x1e0
[  349.119068][T22845]  alloc_empty_file+0x8e/0x200
[  349.119092][T22845]  alloc_file_pseudo+0xcb/0x160
[  349.119156][T22845]  __shmem_file_setup+0x1bb/0x1f0
[  349.119196][T22845]  shmem_file_setup+0x3b/0x50
[  349.119307][T22845]  __se_sys_memfd_create+0x2e1/0x5a0
[  349.119342][T22845]  __x64_sys_memfd_create+0x31/0x40
[  349.119368][T22845]  x64_sys_call+0x1163/0x2e10
[  349.119392][T22845]  do_syscall_64+0xc9/0x1c0
[  349.119428][T22845]  ? clear_bhb_loop+0x25/0x80
[  349.119487][T22845]  ? clear_bhb_loop+0x25/0x80
[  349.119514][T22845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.119540][T22845] RIP: 0033:0x7f6ebf97e169
[  349.119558][T22845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.119603][T22845] RSP: 002b:00007f6ebdfe6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  349.119700][T22845] RAX: ffffffffffffffda RBX: 0000000000000527 RCX: 00007f6ebf97e169
[  349.119724][T22845] RDX: 00007f6ebdfe6ef0 RSI: 0000000000000000 RDI: 00007f6ebfa01404
[  349.119738][T22845] RBP: 0000200000019580 R08: 00007f6ebdfe6bb7 R09: 00007f6ebdfe6e40
[  349.119770][T22845] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280
[  349.119782][T22845] R13: 00007f6ebdfe6ef0 R14: 00007f6ebdfe6eb0 R15: 0000200000000200
[  349.119800][T22845]  </TASK>
[  349.412908][T22853] netlink: 'syz.3.6617': attribute type 1 has an invalid length.
[  349.593693][T22869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  349.600346][T22869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  349.608115][T22869] vhci_hcd vhci_hcd.0: Device attached
[  349.619144][T22870] vhci_hcd: unknown pdu 2
[  349.624448][ T5619] vhci_hcd: stop threads
[  349.628750][ T5619] vhci_hcd: release socket
[  349.633270][ T5619] vhci_hcd: disconnect device
[  349.691071][T22873] 8021q: adding VLAN 0 to HW filter on device bond1
[  349.794462][T22880] netlink: 'syz.0.6626': attribute type 1 has an invalid length.
[  350.086540][T22894] FAULT_INJECTION: forcing a failure.
[  350.086540][T22894] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  350.099815][T22894] CPU: 0 UID: 0 PID: 22894 Comm: syz.4.6632 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  350.099854][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  350.099867][T22894] Call Trace:
[  350.099874][T22894]  <TASK>
[  350.099882][T22894]  dump_stack_lvl+0xf6/0x150
[  350.099907][T22894]  dump_stack+0x15/0x1a
[  350.099984][T22894]  should_fail_ex+0x261/0x270
[  350.100012][T22894]  should_fail+0xb/0x10
[  350.100071][T22894]  should_fail_usercopy+0x1a/0x20
[  350.100104][T22894]  strncpy_from_user+0x25/0x230
[  350.100129][T22894]  ? getname_flags+0x81/0x3b0
[  350.100155][T22894]  getname_flags+0xb0/0x3b0
[  350.100213][T22894]  vfs_fstatat+0x41/0x130
[  350.100237][T22894]  __se_sys_newfstatat+0x58/0x260
[  350.100298][T22894]  ? __bpf_trace_sys_enter+0x10/0x30
[  350.100328][T22894]  ? trace_sys_enter+0xcd/0x110
[  350.100356][T22894]  __x64_sys_newfstatat+0x55/0x70
[  350.100449][T22894]  x64_sys_call+0x2d6f/0x2e10
[  350.100506][T22894]  do_syscall_64+0xc9/0x1c0
[  350.100582][T22894]  ? clear_bhb_loop+0x25/0x80
[  350.100608][T22894]  ? clear_bhb_loop+0x25/0x80
[  350.100633][T22894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.100657][T22894] RIP: 0033:0x7fcfb702e169
[  350.100673][T22894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.100694][T22894] RSP: 002b:00007fcfb5697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  350.100780][T22894] RAX: ffffffffffffffda RBX: 00007fcfb7255fa0 RCX: 00007fcfb702e169
[  350.100853][T22894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  350.100865][T22894] RBP: 00007fcfb5697090 R08: 0000000000000000 R09: 0000000000000000
[  350.100878][T22894] R10: 0000000000004900 R11: 0000000000000246 R12: 0000000000000001
[  350.100892][T22894] R13: 0000000000000000 R14: 00007fcfb7255fa0 R15: 00007ffe65a56898
[  350.100915][T22894]  </TASK>
[  350.353543][T22906] netlink: 'syz.0.6634': attribute type 1 has an invalid length.
[  350.374787][T22905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  350.381442][T22905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  350.389175][T22905] vhci_hcd vhci_hcd.0: Device attached
[  350.468264][T22907] vhci_hcd: connection closed
[  350.468485][ T5607] vhci_hcd: stop threads
[  350.477641][ T5607] vhci_hcd: release socket
[  350.482147][ T5607] vhci_hcd: disconnect device
[  350.521374][T22917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'.
[  350.920748][T22933] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  350.927297][T22933] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  350.935002][T22933] vhci_hcd vhci_hcd.0: Device attached
[  350.945458][T22938] vhci_hcd: unknown pdu 2
[  350.953469][   T31] vhci_hcd: stop threads
[  350.957880][   T31] vhci_hcd: release socket
[  350.962399][   T31] vhci_hcd: disconnect device
[  350.984219][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6650'.
[  351.078911][T22947] ref_ctr_offset mismatch. inode: 0x645 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  351.118042][T22958] netlink: 'syz.3.6656': attribute type 1 has an invalid length.
[  351.143766][T22960] FAULT_INJECTION: forcing a failure.
[  351.143766][T22960] name failslab, interval 1, probability 0, space 0, times 0
[  351.156732][T22960] CPU: 1 UID: 0 PID: 22960 Comm: syz.0.6658 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  351.156774][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  351.156790][T22960] Call Trace:
[  351.156829][T22960]  <TASK>
[  351.156837][T22960]  dump_stack_lvl+0xf6/0x150
[  351.156867][T22960]  dump_stack+0x15/0x1a
[  351.156888][T22960]  should_fail_ex+0x261/0x270
[  351.156975][T22960]  should_failslab+0x8f/0xb0
[  351.157040][T22960]  __kmalloc_noprof+0xad/0x410
[  351.157065][T22960]  ? kernfs_fop_write_iter+0xe1/0x2d0
[  351.157094][T22960]  ? selinux_file_permission+0x22d/0x360
[  351.157126][T22960]  kernfs_fop_write_iter+0xe1/0x2d0
[  351.157157][T22960]  vfs_write+0x79b/0x950
[  351.157191][T22960]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  351.157266][T22960]  ksys_write+0xeb/0x1b0
[  351.157301][T22960]  __x64_sys_write+0x42/0x50
[  351.157335][T22960]  x64_sys_call+0x2a45/0x2e10
[  351.157362][T22960]  do_syscall_64+0xc9/0x1c0
[  351.157398][T22960]  ? clear_bhb_loop+0x25/0x80
[  351.157554][T22960]  ? clear_bhb_loop+0x25/0x80
[  351.157581][T22960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.157606][T22960] RIP: 0033:0x7f2e5153e169
[  351.157624][T22960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.157646][T22960] RSP: 002b:00007f2e4fba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  351.157828][T22960] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  351.157844][T22960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  351.157858][T22960] RBP: 00007f2e4fba7090 R08: 0000000000000000 R09: 0000000000000000
[  351.157873][T22960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.157887][T22960] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  351.157910][T22960]  </TASK>
[  351.376157][T22970] rdma_op ffff88814b791d80 conn xmit_rdma 0000000000000000
[  351.407516][T22974] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6664'.
[  351.417013][T22972] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.471824][T22977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  351.478410][T22977] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  351.486139][T22977] vhci_hcd vhci_hcd.0: Device attached
[  351.534731][T22980] vhci_hcd: connection closed
[  351.536156][   T31] vhci_hcd: stop threads
[  351.545212][   T31] vhci_hcd: release socket
[  351.549684][   T31] vhci_hcd: disconnect device
[  352.152497][T23023] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6682'.
[  352.166956][T23023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.178407][T23023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.192910][T23023] bond0 (unregistering): Released all slaves
[  352.544487][T23039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6688'.
[  352.594710][T23042] rdma_op ffff88811222b980 conn xmit_rdma 0000000000000000
[  352.626197][T23035] bond0: entered promiscuous mode
[  352.631523][T23035] bond0: entered allmulticast mode
[  352.640849][T23035] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.672735][T23035] bond0 (unregistering): Released all slaves
[  352.693574][T23049] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  352.700420][T23049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  352.708130][T23049] vhci_hcd vhci_hcd.0: Device attached
[  352.714907][T23052] vhci_hcd: unknown pdu 2
[  352.719667][ T5606] vhci_hcd: stop threads
[  352.724006][ T5606] vhci_hcd: release socket
[  352.728488][ T5606] vhci_hcd: disconnect device
[  352.851354][T23062] pim6reg1: entered promiscuous mode
[  352.856955][T23062] pim6reg1: entered allmulticast mode
[  352.893941][T23066] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  352.900547][T23066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  352.908193][T23066] vhci_hcd vhci_hcd.0: Device attached
[  352.940592][T23068] vhci_hcd: unknown pdu 2
[  352.959545][ T5619] vhci_hcd: stop threads
[  352.963950][ T5619] vhci_hcd: release socket
[  352.968554][ T5619] vhci_hcd: disconnect device
[  352.987760][T23074] rdma_op ffff888129958180 conn xmit_rdma 0000000000000000
[  353.036870][T23077] netlink: 'syz.8.6700': attribute type 1 has an invalid length.
[  353.071612][T23079] FAULT_INJECTION: forcing a failure.
[  353.071612][T23079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.084993][T23079] CPU: 0 UID: 0 PID: 23079 Comm: syz.3.6703 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  353.085104][T23079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  353.085119][T23079] Call Trace:
[  353.085127][T23079]  <TASK>
[  353.085135][T23079]  dump_stack_lvl+0xf6/0x150
[  353.085160][T23079]  dump_stack+0x15/0x1a
[  353.085221][T23079]  should_fail_ex+0x261/0x270
[  353.085253][T23079]  should_fail+0xb/0x10
[  353.085335][T23079]  should_fail_usercopy+0x1a/0x20
[  353.085362][T23079]  strncpy_from_user+0x25/0x230
[  353.085386][T23079]  __se_sys_request_key+0x5a/0x290
[  353.085437][T23079]  __x64_sys_request_key+0x55/0x70
[  353.085461][T23079]  x64_sys_call+0x2b17/0x2e10
[  353.085492][T23079]  do_syscall_64+0xc9/0x1c0
[  353.085528][T23079]  ? clear_bhb_loop+0x25/0x80
[  353.085555][T23079]  ? clear_bhb_loop+0x25/0x80
[  353.085612][T23079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.085633][T23079] RIP: 0033:0x7f2931d9e169
[  353.085648][T23079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.085733][T23079] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  353.085755][T23079] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  353.085819][T23079] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[  353.085833][T23079] RBP: 00007f2930407090 R08: 0000000000000000 R09: 0000000000000000
[  353.085848][T23079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.085923][T23079] R13: 0000000000000000 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  353.085945][T23079]  </TASK>
[  353.408478][   T29] kauditd_printk_skb: 320 callbacks suppressed
[  353.408495][   T29] audit: type=1400 audit(1744849148.486:13009): avc:  denied  { bind } for  pid=23088 comm="syz.8.6707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  353.451438][   T29] audit: type=1326 audit(1744849148.536:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.475262][   T29] audit: type=1326 audit(1744849148.536:13011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.492469][T23095] __nla_validate_parse: 2 callbacks suppressed
[  353.492491][T23095] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6709'.
[  353.498902][   T29] audit: type=1326 audit(1744849148.536:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.538209][   T29] audit: type=1326 audit(1744849148.536:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.564619][   T29] audit: type=1326 audit(1744849148.536:13014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.588238][   T29] audit: type=1326 audit(1744849148.536:13015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.612063][   T29] audit: type=1326 audit(1744849148.536:13016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23091 comm="syz.4.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb702e169 code=0x7ffc0000
[  353.647778][T23098] pim6reg1: entered promiscuous mode
[  353.653268][T23098] pim6reg1: entered allmulticast mode
[  353.713159][   T29] audit: type=1400 audit(1744849148.786:13017): avc:  denied  { bind } for  pid=23105 comm="syz.4.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  353.738662][T23110] FAULT_INJECTION: forcing a failure.
[  353.738662][T23110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.743391][T23108] bond0: entered promiscuous mode
[  353.751905][T23110] CPU: 0 UID: 0 PID: 23110 Comm: +}[@ Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  353.751941][T23110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  353.751957][T23110] Call Trace:
[  353.751965][T23110]  <TASK>
[  353.751976][T23110]  dump_stack_lvl+0xf6/0x150
[  353.752058][T23110]  dump_stack+0x15/0x1a
[  353.752075][T23110]  should_fail_ex+0x261/0x270
[  353.752186][T23110]  should_fail+0xb/0x10
[  353.752216][T23110]  should_fail_usercopy+0x1a/0x20
[  353.752288][T23110]  _copy_from_user+0x1c/0xa0
[  353.752330][T23110]  copy_msghdr_from_user+0x54/0x2b0
[  353.752373][T23110]  ? __fget_files+0x186/0x1c0
[  353.752401][T23110]  __sys_sendmsg+0x141/0x240
[  353.752529][T23110]  __x64_sys_sendmsg+0x46/0x50
[  353.752564][T23110]  x64_sys_call+0x26f3/0x2e10
[  353.752600][T23110]  do_syscall_64+0xc9/0x1c0
[  353.752638][T23110]  ? clear_bhb_loop+0x25/0x80
[  353.752697][T23110]  ? clear_bhb_loop+0x25/0x80
[  353.752777][T23110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.752805][T23110] RIP: 0033:0x7f2e5153e169
[  353.752824][T23110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.752847][T23110] RSP: 002b:00007f2e4fba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.752899][T23110] RAX: ffffffffffffffda RBX: 00007f2e51765fa0 RCX: 00007f2e5153e169
[  353.752915][T23110] RDX: 0000000002040000 RSI: 0000200000000280 RDI: 0000000000000003
[  353.752930][T23110] RBP: 00007f2e4fba7090 R08: 0000000000000000 R09: 0000000000000000
[  353.752946][T23110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.752961][T23110] R13: 0000000000000000 R14: 00007f2e51765fa0 R15: 00007ffc786829b8
[  353.752986][T23110]  </TASK>
[  353.846008][T23116] netlink: 'syz.8.6717': attribute type 1 has an invalid length.
[  353.846471][T23108] bond0: entered allmulticast mode
[  353.946085][T23108] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.957064][T23108] bond0 (unregistering): Released all slaves
[  353.992829][T23126] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  353.999468][T23126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  354.007198][T23126] vhci_hcd vhci_hcd.0: Device attached
[  354.016800][T23127] vhci_hcd: unknown pdu 2
[  354.025645][ T5619] vhci_hcd: stop threads
[  354.029999][ T5619] vhci_hcd: release socket
[  354.034587][ T5619] vhci_hcd: disconnect device
[  354.082197][T23130] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  354.088808][T23130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  354.096523][T23130] vhci_hcd vhci_hcd.0: Device attached
[  354.105866][T23131] vhci_hcd: unknown pdu 2
[  354.114226][ T5619] vhci_hcd: stop threads
[  354.118755][ T5619] vhci_hcd: release socket
[  354.123233][ T5619] vhci_hcd: disconnect device
[  354.161155][T23138] FAULT_INJECTION: forcing a failure.
[  354.161155][T23138] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.174347][T23138] CPU: 0 UID: 0 PID: 23138 Comm: syz.6.6724 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  354.174440][T23138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  354.174454][T23138] Call Trace:
[  354.174461][T23138]  <TASK>
[  354.174470][T23138]  dump_stack_lvl+0xf6/0x150
[  354.174497][T23138]  dump_stack+0x15/0x1a
[  354.174593][T23138]  should_fail_ex+0x261/0x270
[  354.174629][T23138]  should_fail+0xb/0x10
[  354.174652][T23138]  should_fail_usercopy+0x1a/0x20
[  354.174724][T23138]  _copy_from_user+0x1c/0xa0
[  354.174757][T23138]  copy_msghdr_from_user+0x54/0x2b0
[  354.174796][T23138]  ? __fget_files+0x186/0x1c0
[  354.174857][T23138]  __sys_sendmsg+0x141/0x240
[  354.174905][T23138]  __x64_sys_sendmsg+0x46/0x50
[  354.174933][T23138]  x64_sys_call+0x26f3/0x2e10
[  354.174955][T23138]  do_syscall_64+0xc9/0x1c0
[  354.175027][T23138]  ? clear_bhb_loop+0x25/0x80
[  354.175102][T23138]  ? clear_bhb_loop+0x25/0x80
[  354.175123][T23138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.175149][T23138] RIP: 0033:0x7f0c1957e169
[  354.175167][T23138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.175188][T23138] RSP: 002b:00007f0c17be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.175211][T23138] RAX: ffffffffffffffda RBX: 00007f0c197a5fa0 RCX: 00007f0c1957e169
[  354.175225][T23138] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 0000000000000003
[  354.175302][T23138] RBP: 00007f0c17be7090 R08: 0000000000000000 R09: 0000000000000000
[  354.175313][T23138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.175326][T23138] R13: 0000000000000000 R14: 00007f0c197a5fa0 R15: 00007ffe433788f8
[  354.175345][T23138]  </TASK>
[  354.410333][T23151] rdma_op ffff888129958580 conn xmit_rdma 0000000000000000
[  354.436410][T23153] ip6t_rpfilter: unknown options
[  354.665670][   T29] audit: type=1326 audit(1744849149.746:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23167 comm="syz.3.6734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2931d9e169 code=0x7ffc0000
[  354.703482][T23169] syzkaller1: entered promiscuous mode
[  354.709008][T23169] syzkaller1: entered allmulticast mode
[  354.732393][T23171] FAULT_INJECTION: forcing a failure.
[  354.732393][T23171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.745522][T23171] CPU: 0 UID: 0 PID: 23171 Comm: syz.8.6735 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  354.745556][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  354.745573][T23171] Call Trace:
[  354.745579][T23171]  <TASK>
[  354.745587][T23171]  dump_stack_lvl+0xf6/0x150
[  354.745675][T23171]  dump_stack+0x15/0x1a
[  354.745744][T23171]  should_fail_ex+0x261/0x270
[  354.745775][T23171]  should_fail+0xb/0x10
[  354.745849][T23171]  should_fail_usercopy+0x1a/0x20
[  354.745958][T23171]  _copy_from_user+0x1c/0xa0
[  354.745997][T23171]  __sys_bpf+0x16a/0x800
[  354.746061][T23171]  __x64_sys_bpf+0x43/0x50
[  354.746082][T23171]  x64_sys_call+0x23da/0x2e10
[  354.746125][T23171]  do_syscall_64+0xc9/0x1c0
[  354.746159][T23171]  ? clear_bhb_loop+0x25/0x80
[  354.746184][T23171]  ? clear_bhb_loop+0x25/0x80
[  354.746289][T23171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.746323][T23171] RIP: 0033:0x7f6ebf97e169
[  354.746340][T23171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.746400][T23171] RSP: 002b:00007f6ebdfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  354.746422][T23171] RAX: ffffffffffffffda RBX: 00007f6ebfba5fa0 RCX: 00007f6ebf97e169
[  354.746437][T23171] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f
[  354.746452][T23171] RBP: 00007f6ebdfe7090 R08: 0000000000000000 R09: 0000000000000000
[  354.746466][T23171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.746480][T23171] R13: 0000000000000000 R14: 00007f6ebfba5fa0 R15: 00007fff988dce98
[  354.746499][T23171]  </TASK>
[  355.056287][T23183] rdma_op ffff88810c8a9180 conn xmit_rdma 0000000000000000
[  355.162726][T23195] FAULT_INJECTION: forcing a failure.
[  355.162726][T23195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.176010][T23195] CPU: 0 UID: 0 PID: 23195 Comm: syz.3.6747 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  355.176041][T23195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  355.176053][T23195] Call Trace:
[  355.176059][T23195]  <TASK>
[  355.176068][T23195]  dump_stack_lvl+0xf6/0x150
[  355.176105][T23195]  dump_stack+0x15/0x1a
[  355.176194][T23195]  should_fail_ex+0x261/0x270
[  355.176228][T23195]  should_fail+0xb/0x10
[  355.176262][T23195]  should_fail_usercopy+0x1a/0x20
[  355.176313][T23195]  strncpy_from_user+0x25/0x230
[  355.176400][T23195]  ? getname_flags+0x81/0x3b0
[  355.176424][T23195]  getname_flags+0xb0/0x3b0
[  355.176448][T23195]  __x64_sys_mkdirat+0x41/0x60
[  355.176546][T23195]  x64_sys_call+0x2ce3/0x2e10
[  355.176573][T23195]  do_syscall_64+0xc9/0x1c0
[  355.176608][T23195]  ? clear_bhb_loop+0x25/0x80
[  355.176632][T23195]  ? clear_bhb_loop+0x25/0x80
[  355.176733][T23195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.176754][T23195] RIP: 0033:0x7f2931d9e169
[  355.176768][T23195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.176789][T23195] RSP: 002b:00007f2930407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  355.176811][T23195] RAX: ffffffffffffffda RBX: 00007f2931fc5fa0 RCX: 00007f2931d9e169
[  355.176839][T23195] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  355.176853][T23195] RBP: 00007f2930407090 R08: 0000000000000000 R09: 0000000000000000
[  355.176865][T23195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.176877][T23195] R13: 0000000000000000 R14: 00007f2931fc5fa0 R15: 00007ffdc5d21a48
[  355.176899][T23195]  </TASK>
[  355.371018][T23197] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  355.377627][T23197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  355.385349][T23197] vhci_hcd vhci_hcd.0: Device attached
[  355.397374][T23198] vhci_hcd: unknown pdu 2
[  355.402230][   T31] vhci_hcd: stop threads
[  355.406492][   T31] vhci_hcd: release socket
[  355.410978][   T31] vhci_hcd: disconnect device
[  355.454702][T23193] bond2: entered promiscuous mode
[  355.459785][T23193] bond2: entered allmulticast mode
[  355.465569][T23193] 8021q: adding VLAN 0 to HW filter on device bond2
[  355.477008][T23193] bond2 (unregistering): Released all slaves
[  355.507358][T23209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6752'.
[  355.559418][T23213] rdma_op ffff88810c8aa580 conn xmit_rdma 0000000000000000
[  355.629985][T23217] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  355.661925][T23218] syzkaller1: entered promiscuous mode
[  355.667531][T23218] syzkaller1: entered allmulticast mode
[  355.739795][T23227] ==================================================================
[  355.747927][T23227] BUG: KCSAN: data-race in prepare_signal / ptrace_attach
[  355.755076][T23227] 
[  355.757404][T23227] write to 0xffff88810af24230 of 4 bytes by task 23226 on cpu 0:
[  355.765131][T23227]  ptrace_attach+0x258/0x520
[  355.769736][T23227]  __se_sys_ptrace+0x14c/0x2b0
[  355.774531][T23227]  __x64_sys_ptrace+0x55/0x70
[  355.779225][T23227]  x64_sys_call+0x1fd0/0x2e10
[  355.783928][T23227]  do_syscall_64+0xc9/0x1c0
[  355.788441][T23227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.794336][T23227] 
[  355.796657][T23227] read to 0xffff88810af24230 of 4 bytes by task 23227 on cpu 1:
[  355.804313][T23227]  prepare_signal+0x45d/0x670
[  355.809004][T23227]  __send_signal_locked+0x31/0x7a0
[  355.814145][T23227]  send_signal_locked+0x28f/0x3a0
[  355.819200][T23227]  force_sig_info_to_task+0x1ef/0x280
[  355.824624][T23227]  force_sig_fault+0x79/0xa0
[  355.829234][T23227]  __bad_area_nosemaphore+0x261/0x320
[  355.834709][T23227]  exc_page_fault+0x4e1/0x6a0
[  355.839414][T23227]  asm_exc_page_fault+0x26/0x30
[  355.844616][T23227] 
[  355.846935][T23227] value changed: 0x00000000 -> 0x00000001
[  355.852650][T23227] 
[  355.854972][T23227] Reported by Kernel Concurrency Sanitizer on:
[  355.861152][T23227] CPU: 1 UID: 0 PID: 23227 Comm: syz.0.6759 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) 
[  355.873679][T23227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  355.883739][T23227] ==================================================================
[  355.924856][T23226] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6759'.
[  359.710121][   T37] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3