last executing test programs: 7m29.320067743s ago: executing program 2 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 7m29.292138183s ago: executing program 2 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 7m29.203716005s ago: executing program 2 (id=362): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 7m29.171296135s ago: executing program 2 (id=366): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x20100, 0x10b) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 7m28.87167691s ago: executing program 2 (id=378): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 7m28.600435634s ago: executing program 2 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 7m28.600255944s ago: executing program 32 (id=389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 7m12.592054239s ago: executing program 5 (id=727): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) unshare(0x2a020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r3, 0x89f3, 0x20001116) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008973de38c4836ab07277fc0b29a074bfab6f3a176d435fc720ff1d1ada1d6a419f6ab1657d97d2312f20f85cc1afa43977dd5e54b950b06ef59500580000000000000000000000b8a1077aa3779b4360756e25b61def70998506a53ef351dfddf4828f69d514a69f77cdf2bbf9657c97d50afeaf5754c3801cc76fe4c8af922379fbfc42991de7cca626b6a4"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) connect$unix(r2, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xffffff95, 0x0}}) io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x16, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e24, 0x2, 'sed\x00', 0xc, 0x80000000, 0x17}, 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m11.319886318s ago: executing program 5 (id=752): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 7m10.569299119s ago: executing program 5 (id=774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, 0x0, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x627, 0xc1040000, 0x20, 0x0, 0x0) 7m10.452536801s ago: executing program 5 (id=779): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x20100, 0x10b) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 7m10.035061148s ago: executing program 5 (id=786): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_rr_get_interval(0x0, &(0x7f0000000200)) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) iopl(0x3) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r6) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0xc854) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/197, 0xc5}], 0x1}, 0x12000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x7ac7, 0x1, 0x208000, 0x34}, &(0x7f0000000340)=0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x5}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r10, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r9, 0x1, 0x0, 0x0, 0x2, 0xda11208aed45b3ab}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000a00)={r11, 0x188, "16ae9c95d1ddb7994688c3134f6298b3b74baf13d3e17113729b11a7dba864acd39d6e0cd91642630b127a8735af477a0aeff3c98f6f2667b8f922aeb711647ed15128d0a79bc9dd7f6e825b66cc8021b0b2e521fab22bfc5c8502100af9c8fb6ede054a08dba38a85f1f8db20d0010b4e576553ddb697dd267b4a3f4e6651c220bfbb34db22b84539283604b5c78c475638bb968ccf89252d1ea6518253292f2ae3d77e64c469105fa0799b28312208660c15c299b8a7b7de0cb547b96548c64cf5e41e2bd2b3bfb9078facf23681a3c3ef282f58711465e53af0bf246d2520c2cb96c8478cd368a0d7c27948c1ccb7523feefa84a519e9abf454edaddbb1101b3f5202451db335cca98ce845874d3a0d94ad238183ba0b7507ea5e31501b620af8dc39452079fe38baa64d65d2bac831e2a2fc6517f1d380d0e4e969d282b6b0bebca4dedcda28cef3a6e3d93c79b2a14c6d9d08bb8cab6ee334f88847f7fab600000000000000068ed3bfa99080f0693347e86916f2715100412c40f84f64306a145b008c1c83"}, 0x0) 7m9.777965661s ago: executing program 5 (id=792): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 7m9.719361502s ago: executing program 33 (id=792): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 2m54.690256992s ago: executing program 6 (id=8122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xacf8}, 0x1100, 0x5dd8, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x143a82, 0x2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x42500, 0x42) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x8, 0x7800, 0x5, 0x1}}) 2m53.968224803s ago: executing program 6 (id=8127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001"], 0xe8}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x85}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5ff, 0x10, 0x3, 0x400, 0xb9bf, 0x1180118}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69e1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000740)={0xb, 0x0, 0x3, 0x7fff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000001f19cd46e447422478a13a7605ca77f15b6a989"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) 2m52.602204545s ago: executing program 6 (id=8143): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{0x0}], 0x1) ioctl$FIOCLEX(r1, 0x5451) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r3, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syncfs(r4) 2m51.872483846s ago: executing program 6 (id=8149): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',fscache,cache=none,dfltuid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0]) getpid() chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2m51.61869042s ago: executing program 6 (id=8156): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2800400, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x305, &(0x7f0000000440)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800413, &(0x7f0000000940), 0x2, 0x5be, &(0x7f0000000ac0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000000440)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m51.017462519s ago: executing program 6 (id=8160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 2m50.97530516s ago: executing program 34 (id=8160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 3.944247009s ago: executing program 0 (id=9400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) getcwd(&(0x7f0000000180)=""/113, 0x71) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x20, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.746351191s ago: executing program 4 (id=9403): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='xprtrdma_post_send\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\xa3\x19\xfd\xba\xcaH\x90A?\x8a\xce\x1e\x1a\x9cN*\xd1\xbb\x16\xab\x93Z\x9cS\x99\xfcs\xd0\xed\xa8\x00\x97\x0e\xed\xb6\xfd-_\xd4l\xbf \xf3') quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'wg1\x00', 0x800}) capget(&(0x7f00000014c0)={0x20080522}, &(0x7f0000001500)={0x9, 0x4, 0x2, 0x2, 0x4, 0xe}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2.919314505s ago: executing program 0 (id=9405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2d00d85bd626ba6c16a33e31714510f199a78d829a513bf3adc711", @ANYRES16=r1, @ANYBLOB="318300000000000000001900000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c00078008000600000000002400078008000500000000000800060000000000080005000000000008000600000000003c0007800c0005"], 0x108}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@val={0x0, 0x18}, @val={0x3, 0x3, 0xf, 0x5f58, 0x3e0, 0xa}, @x25={0x2, 0x6, 0x17, "a2ec884c2eb80049397e185e190db7d2c755bdbc07832e120107380da6ddce70ae4d4ca004eacd4d116e82a702078366174c49894059"}}, 0x47) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x10040, 0x1) 2.917409645s ago: executing program 4 (id=9407): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000001000000000006002310"], 0x50) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r2, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x14) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000088e701801e0004000300f7ffffffffffffff0000000000de81002000000d030000403601000021eb5c4d59690e16e45324e6f6364954e115465bfd5a932cef9076e0b1358a21b8cab8cfebfb0646137705ee509ed255ce02f79f001094169066e7fc53e6"], 0x68) io_setup(0x2004, &(0x7f0000000680)) 2.764100407s ago: executing program 4 (id=9408): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0xd1) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d3982f712c7", 0x13}, {&(0x7f00000009c0)="5203308c3622dd99262e2d7930f79aa89a30daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb47290843493713f3e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb62ba6d8f08", 0x80}], 0x2, &(0x7f0000000ac0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000d949f86eb3a10f9f025458"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x20000000000000f8, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb9}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffff50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc000000000000", @ANYRES32=0x0], 0x48) 2.735027437s ago: executing program 0 (id=9411): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x1411, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001000d000800060000000000070003007e94342bfcb04a2209527daa6811477264c426400bdf063f249351960e9652fd6c021d9577f365000eba003c862df4babd393ec9fca3d5a0ba2a87b54669cf62c7c8ba473844", @ANYRES32=0x0], 0x30}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001811000000000000", @ANYRESOCT=r5, @ANYRESHEX=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, 0x0, 0x4010) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) 2.613091689s ago: executing program 3 (id=9412): syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x808008, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x150}}, 0x4804) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c0000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf25040000000500210001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000440)={0x2, &(0x7f0000000380)=[{0x7, 0x3}, {0xee, 0xfff9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) socket(0x10, 0x3, 0x0) 2.612315959s ago: executing program 4 (id=9413): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x97, 0x2ae, &(0x7f0000000400)="$eJzs3b9rO2UYAPDn0vQSdEgEJxE80MHpy7ff1SVFWihmUjKogxbbgjRBaKHgD4ydXF0cXV0Ewc1/wsX/QHAV3CxYOLnkrklqGpPatP74fJa+fe953nvet9eWDvf03ecHxwdZHJ1/8lM0m0nUOtGJiyTaUYvKZzGj80UAAP9mF3kev+Zjq+QlEdFcX1kAwBqt/Pv/u7WXBACs2RtvvvXadre783qWNWN38PlZr/jLvvg4vr59FO9HPw7jcbTiMiK/Mh7v5nk+rGeFdrw0GJ71iszBOz+U62//EjHK34pWtEdTs/l73Z2tbGwqf1jU8VR5/06R/yRa8eyc++91d57MyY9eGi+/OFX/o2jFj+/FB9GPtKxttEot4tOtLHs1//K3j98uZov8ZHjWa8TBzEnlG/f4ZQEAAAAAAAAAAAAAAAAAAAAA4D/uUdk7pxGj/j3FVNl/Z+Oy+GQzskp7tj/POD+pFrrWH2iYx1dVf57HWZblZeAkvx7P1aP+MLsGAAAAAAAAAAAAAAAAAACAf5bTDz863u/3D0/uZFB1A6he67/tOp2pmRdicXBjcq9aOVywcmxUMUnEwjKKTSxd8+9l24PbHd0zN9X8zbdLr/P1X++9HGwuEfM3B9XTdbyfzD/DRlQzzeoh+X46Jo0l75XedClf6fFL515qrbz39OnRYLggJpJFhb3y8/jkypnk+i7S0anOTd8sB1PpszHN5Z/n4jvlT5Krbh3J3f4QAgAAAAAAAAAAAAAAAAAARiYv/c65eL4wtZY31lYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyryf//X2EwLJOXCE7j5PSBtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wB8BAAD//+88YLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000100b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8408ce, &(0x7f0000000880)={[{@mblk_io_submit}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@dax_never}, {@resuid={'resuid', 0x3d, r8}}, {@dax_always}, {@quota}, {@nogrpid}]}, 0x3, 0x453, &(0x7f0000000ec0)="$eJzs3MtvG8UfAPDv2k7f/SW/qjz6AAIFEfFImrSUHnoBgcQBJCQ4lGNI0qrUbVATJFpFEBAq3FAl7ogjEn8BJ7gg4ITEFe6oUoVyaUFIGK29m9iOncbBqUv8+UibzOyONfP17tgzO9kE0LeG0x9JxJ6I+CUiBmvZxgLDtV+3lham/lhamEqiUnnt96Ra7ubSwlReNH/d7jxTiih8lMShFvXOXb5yfrJcnrmU5cfmL7w9Nnf5ytPnLkyenTk7c3Hi5Mnjx8afPTHxTFfiTOO6efC92cMHXnrj2itTp6+9+cNXSR5/UxxdMrzWwccqlS5X11t769JJqYcNoSPFWjeNgWr/H4xirJy8wXjxw542DthUlUqlcm/7w4sVYAtLotctAHoj/6JP57/5tvaAoavDj5678VxtApTGfSvbakdKUcjKDDTNb7tpOCJOL/75ebrF5tyHAABo8E06/nmq1fivEPX3hf6XraEMRcT/I2JfRJyIiP0RcU9Etex9EXF/h/U3L5KsHv8Urm8osHVKx3+nsrWtxvFfPvqLoWKW21uNfyA5c648czR7T0ZiYHuaH1+jjm9f+PnTdsfqx3/pltafjwWzdlwvbW98zfTk/OS/ibnejQ8iDpZaxZ8srwQkEXEgIg5usI5zT3x5uN2x28ffWvUt6cI6U+WLiMdr538xmuLPJWuvT47tiPLM0bH8qljtx5+uvtqu/o3G3y3p+d/V8vpfjn8oqV+vneu8jqu/ftx2TrPR639b8nrDvncn5+cvjUdsS16uNbp+/0ReqrScz8un8Y8cad3/98XKO3EoItKL+IGIeDAiHsra/nBEPBIRR9aI//vnH32rYcfIng7i31xp/NMdnf+VxLZo3tM6UTz/3dcNlQ5FB/Gn5/94NTWS7VnP59962rWxqxkAAAD+ewoRsSeSwuhyulAYHa39Df/+2FUoz87NP3lm9p2L07VnBIZioJDf6Rqsux86nk3r8/xEU/5Ydt/4s+LOan50arY83evgoc/tbtP/U78Ve906YNN5Xgv6l/4P/Uv/h/6l/0P/atH/d67e9VfTI4PAVtDq+//9HrQDuPOa+r9lP+gj5v/Qv/R/6F/6P/SlT07F7R+S37KJWOd/MJBYnYjCXdGMzU/suCMXyd/Z6tpdEXKa6PUnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8EwAA//89t/ME") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 2.462704812s ago: executing program 7 (id=9415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwrite64(r6, &(0x7f0000000040)="fe4ff9be2064e12579", 0x4000, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x1c, 0x4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 1.969186699s ago: executing program 3 (id=9416): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82", @ANYRESHEX=r1], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x2, 0x70bd28, 0xd87, {{}, {@void, @val={0xc, 0x99, {0xf, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x885) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc8018100180"], 0x1030}}, 0x4c000) 1.805766942s ago: executing program 3 (id=9417): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x2000000}}}}}, 0x0) r2 = creat(0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) linkat(0xffffffffffffffff, &(0x7f0000002d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x1800) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1140, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x2000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e7465720004000280"], 0x118}}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1709000000000000000001000000050007004200000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) 1.756167993s ago: executing program 3 (id=9418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) syz_read_part_table(0x1063, &(0x7f0000002100)="$eJzsz7FtAkEQBdC/ujv7LrI7sMtw6MyBY1fgQq4fWiBApJRARh9Ii/ZOUAIQvBfMSjPztZrwUFNJ0vVfJalza7y/roM+0/J2Sx2yPfT7U/KRObUuO+O6uPsdxtS3bkxKjj9TC3y3wUsr5/p//aqsnc9yi+Zvc8dTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBpXQIAAP//DFsO/A==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x1, 0x5}, 0x6}, 0x20, 0x0, 0x0) 1.689851404s ago: executing program 4 (id=9419): socket$kcm(0x23, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000004240)=0x7fff, 0x4) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0xffff2bdd}], 0x1, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) sync() sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 1.613909185s ago: executing program 1 (id=9421): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0xa}], 0x10}, 0x20008844) unshare(0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@fallback, 0xffffffffffffffff, 0x36, 0xde90a9d92953eea0, 0xffffffffffffffff, @void, @void, @value}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006f40)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="ae", 0x1, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1320, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) dup(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x68e}, 0x18) 1.515665097s ago: executing program 1 (id=9422): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0xd1) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast2}, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d3982f712c7", 0x13}, {&(0x7f00000009c0)="5203308c3622dd99262e2d7930f79aa89a30daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb47290843493713f3e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb62ba6d8f08", 0x80}], 0x2, &(0x7f0000000ac0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000d949f86eb3a10f9f025458"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x20000000000000f8, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb9}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffff50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xc, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x6, 0x4, 0x1, 0x81, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0x4db9]}}, {{0x1c, 0x1, {0x40, 0x30, 0x57, 0x2, 0x1, 0x8000000, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0xa7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x8000, 0xff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x7, 0x2, 0x2, 0xf7, 0xf105, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x3, 0x4]}}, {{0x1c, 0x1, {0x80, 0x97, 0x7, 0x7fffffff, 0x1, 0x3, 0x810000, 0x3}}, {0xa, 0x2, [0xb000, 0x5, 0x6bd]}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0xf28e, 0x2, 0x80000001, 0x1, 0x6}}, {0x10, 0x2, [0x1, 0x2, 0xfffe, 0x6, 0x4, 0xf]}}, {{0x1c, 0x1, {0x7f, 0x7, 0x2, 0xee, 0x2, 0xff, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5, 0xff, 0x8, 0x7, 0x2, 0x40, 0xe53, 0x8}}, {0x14, 0x2, [0x5, 0x7, 0x1, 0x3ff, 0x1e, 0x3, 0x9, 0x81]}}, {{0x1c, 0x1, {0x5, 0x7, 0x9, 0xf, 0x0, 0xffffffff, 0xa, 0x3}}, {0xa, 0x2, [0x0, 0x3, 0x8]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48801}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ff8}]}) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023896) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r9, 0x5459, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) 1.395094168s ago: executing program 0 (id=9424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x112}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'ipvlan1\x00'}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.28379162s ago: executing program 7 (id=9425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000130000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000029c0)={'ip6tnl0\x00', &(0x7f0000002940)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x40, 0x0, 0xff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000053c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24020081}, 0x54) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0x8}, 0x18) clock_getres(0x5, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2f}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001780)}, {&(0x7f00000017c0)="fadb123b6ee93f389b6266a4ba7c6b42496c6401dfbce0c7fe64507572022333ed5cce7f8899b0e454d645255b5c72d296b9fdaaf5542150ac1cbb0cba5d7b23c09b716cc48a", 0x46}, {&(0x7f0000001840)="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", 0x1000}], 0x3, &(0x7f0000002a00)=[@hopopts={{0x20, 0x29, 0x36, {0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0xdc9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd1a}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}], 0x60}}, {{&(0x7f0000002a80)={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, 0x1c, &(0x7f0000004f00)=[{&(0x7f0000002ac0)="db213fda708166e37c8144e6e61500a0b957b7741b76b67a46d28c1f290fa05b2235e3244079c854e4cdecf08b895638fda9d1d828283622f3e7052c959d94469e59ea9e0f4a6c0109", 0x49}, {&(0x7f0000003b40)="18e767a6d86a60a871f313081a4cbb3067ada6687b98e2760fe51acd6279ea4e6305943dfdc88b4322081c82c1ea8ae13a8e39c20f459c676c09ef5fa7c23d21975ca0fc6885247ed33a812a8f156e74d832ae83c4512bbbb31f03ac6fc1b5750e991deabb52c308f83d92c5e2499f1331c8221da5726ff1ff7c34a36f2231b4107748cb6712d820c8d22e663421277c9870679cb61687fe1968d67a5aa092e61ce2e52001c8309bdcf4810b57143ab7198d2eae276122ad7069f417c6d09bbcec0143ded5045db31bf379644e71798698f4a0931ebadfed67e495d0e0d14f2b3c8c116c32542ca97c02cbc81b71c654887ec9f6b26c7609be51ba745dcdf5ca0f9ecffa00abf31d0f6bd9a1a706ee25c286d3474aafc8be78150ae14640e4e44363e11d93b1f2973b754ff2d87afde2197ccc1dd745d844e89529c1690c3e7219280a2ce5ff1a4c31bf71d49779ce7350707605b399da2aea8e7a98855b93bee690c35e0ecf5fb7380074a699dd269bf97dc491942d8adea77432d57635fb1cb22b0a0b514ca5bd5a9c2fe5a2b1d500c5dafe415bc0eada5b3f9ff7fbd639a7dbee5fd6c0d25dac04633d0b2ed203954c161684ba69407bef267d21352e7e5bde4f9e1ffe1ab22a4ddd77302f2be7a85ac3de06b05211d57da70a1af0ed82edd30ab6dfed502af86372b5896fcdb5924cb5941c127f44dc8fa4c2ea3626ca2c929b429a211838953607f6a727470a4a796e5e4a80a7dff151fd67e97819b24b8367bc2d50fe502b5f1afb6557f28a9d0571e21e47cedd7bec9a318626643fa6b6d7ea8aab2912467ae93296fead3da6a97efdf57779dd0e897a22a6506a08e65bb8174e7014414c1efe9794e4418cfb6b8cf93ef7f0456f9d53cdd720832c89a18dbbc1592070ade6c4f6f3c0011735aaebee1950eeb312c64afcd7a7e0d26c5d65d767c6803ebe15dd6a2f0c6a4b12da89712428ec8e10cb0810adcde448122e6901d2d77d7238b882eb5f6bd542b023006d44926d0bb1a78181e65360e0f720a38e46198972d9a8ac0e3e3c176a1a5d3ba76cf6754f43603aed102901b4d17431d595e4421a20d111af1aff70dee4bac14969fb44c5a8fe2b1fbc78c303f64cbc4c344ede5afae5cb62b65af2a04b4024fadbe830ecb710f5ebdb36a71ec72a17de147374775a7db8624df8ecb8c72480ce9cf62133d197355e8f64f4774d447979fea16b96ec79621bcaad3f8fca6c2eff62fd39d2ba6128dfddd5c926cf5e4daa8cefe98880e5ed46a5511e6646056eab92073264584210856000fe73305eb518d3196b3ae5d2381e9350755323ddd36b8b00a1aa294d8f75ef8ba02831a39de87ff388a3c71040afaa8bf37f4190f3fa95ff625b19adeb57629467f1f4db2d0cbe90372b664ed76723982861a5d21ee5ea060363ce1947a30a1475bf4509bd11673f532253a79e451be22d9600e78bb68fff25be0a464e33e5497ecbbc3459e14784ad6f1286765c4ee85f6b5eb92ac2fd865fb4d8a2efe552a3dddf7456f604e82c12294f2ac67e5aa9eb396a7cbe33f094b75107fe40a29974c2194b62661befb42eb66ad88ddc86d76f3ff1bba3c3faa5805ce8eae14b94e45f8a1332285c50604e6532d55d8d36d060662b41406cf15acd65751a16736c0a90c41d1deff856bc1a78df4275a7840d3ea51daf5bab904cf67ac35ff4de6ffd585baedcf422dba041edc927e4245a30179b94be9cdbe07039f7411ade17cf2eb77d21ce4bb554b66f0f42dea4df1863ab9c9ce0ca475dad444af1b04bae0e036b94bf0aa986ab6a45c279ab8377af745f879acf7be13953cd64ee5bb84c13ff2a3fc569e95e8d0d715e768c32ad9ebb8b2eefbda19d73b58f5f1694075cafaec8568b014871dc86f8395c84b12e216a0df83daffd63fa5e7b56898917d6a85c5dbdae9c52541833aed82218ae5aa20952a7d40cacd017347ad7b595f74a5549db668bad08d712d8ff7b41b44c98a68684abcb382c0444814c067528c039c4deef2790421f55df66d227e32d7d646b59c357e89eeb8cef78efeb1014a1050c78858bea96285a4cfbe3e3f3257bbe8bae8d22c7dddc57201572fc4ff107c2fa2357e6fae16828cacaf8badc2e608368ee95fd838f79ddbc861bc852536304df17d6dbfb52f99d60c9e82a1c2acedffe84578f72937535864c156f0f09217302509d912a37b7fbd4c2f795752e0b63d7077f6ccfb8647e5df0698b0b62e4944205ac7f0a1dc9602dabe0f6aeedfc2bf5d70f6d29aae73277dfeac752a427bc43972a5302fbc164a24e80cffe28cf33b9d5f25ea53a52e2533df1b91e714b94a320d50edc2deef454c4a38d5d2bf14532b5b43920b670055d718dd71d31999e3c8466f902c13c153057aa9c303ba61be2af1759a44f750fe997b7d92523d016d92e720eba4fb9db411d2e59c39ef127dc7bb876468e5a22ffcd57cccdd5710fa3eb39a155f03a2db76e7aa5d1ac7f3e935a8982283a4e5a83972f6ed5f3a1cc8ef9b2b21b7388d099d6fffb0ac8fae7121dbcf48a57fd89ea5743ab8a10083ddd56e0066b66b551d5c73ade96f42d7ba419eb314fc713986b0eb938af5346da918f85a03b1b6db835cdffac69af41fdf8eda24960d464260e72f5d2a6f99b0a2e616ccf78d330929dbda26372d61cd730a31ec4227ddcfbb870b26e2bb774e333e415b7c78e98e0efc49b6846511fea4f2e4ec5cc7eca61a9e424ba226488a1f4fb0c403b68274c8c56abea5ccf5fbb084a7ca4a9ff243673acad342648124e77406dc6f5f6a38d42986fdaf2d47d72202bd5461b661fd00fbcf4e4efbae94770b8e244234e656cfafe489980196e1896289704d981f57eae0475efcd91e5431c82821ac4478f2dc055bf129b52580d2651519b510600774889c20f0fabcd066097a8a78ab2b14a85ce3a37d105cf94ec6a79a8e348bed66748c38acf9eb7289efb00e513b7efde6264c8966610d7aec8268d0830b5f82a3f519552ffcdb42114cfc99d9c5971c5f0f69d11fc75d99a8f86f0de62ee08b6dfb22cb26c94491e27ce3449fcda78b1bdaf06279d361a4beab250e5702b0df6d0594fa7ca2be661f0fcae58e295def80d8adad3a81e8f7e78046935eb229b9f2c771efd8e838ba253339d7e9f6a64c784f37cac5cf57ccb24699e130148d8f7cb34518e4c3e682093f63ab2730a5a7395b2495210e1001bfc25f102fa9454c3de88d665ca1ab8aa9cfc2199c6159726d658a0a52b74acc8f334db26693a5679c5782fe5356c69313b98600bea0be2429477e285ae01d3aa82180def35e5d5b017dd9a080d4315727f250cce991d757545e1ed95364fdc4a82287d28206111737591d39d8a08dd65a87bd9a87cb88592003e4ca01afab5c63ed1c354f499e35c1c33a2272205b3b6f16f8c5c451740dd7e1a91c3a69a0fed38130083100f72e4bf76e8b57ae311abdb70538b00dde443c4d005b8570c28de4f93460f2c47bcec6a025d80cd4329bedfe5d3e1081cb5385dcedb90d3aa5bbb4671f7c0fc7c651c373762a763d0d9afaf392166a19a28c8bb679c97df6b29b84fe1bb06303e6b0457ba6c6bb79882f41708662d6b22e0e01a897232352ad5c1f419a1ca98eb4c0ad3838dc6ee3dc3230860fad11c0dc89911345222b9b2df8a5d11df7c7209dcf1fe895bd14097484362645c313e9b52cfaf60761a227b5bab9a172ae5508e9c237abad1bb261c92f9cd04424270b08fd2c935a46ef0e31603b7f9162aaf7c2fcd1bc24e5c4ce800155de7784e07a6e4682a576a732df2999f216a186fa403eda72642a461615dc2ade938f8133b00edd449870d4fc65292dad168788340f9072395592204860b2d3cad1831e2689e0dace308145af6a6deb845d0c435d010d294eb898048241cc9828a7abbf39a742d22cc3d5effde7d1cc462ff1f9192af90f9210b0f67c3c6cd19b4fd3a9d9c0e36798e328e14894717fbf8803d514f07c20c57388700b6c0cd28f492984134fdb2d1fe4f30e9bc6a09e88da774fc19f40594ce63c39e6022d3728098c35386cc7d72a447dc6cb240b34469546757c5935e315885c64134da26f8a8bcb0f1fbe7b4727c1a5ffd30d3e4852da92aac7dc629544af91adadb5a14519c1804003591bec444fe48fc5d1f92832e6bd7ad33dc56fc45c45f77b7426419c52d39b18d1979338914d7dbb03ea845d5666119754d7363661c259858a3b83a55ab10f43bc58b0862e1fa3dfe3bd26c0d716d267c4cfb29df852f375fa95ccf28d12c094c10ee51ae7c4c27e2340a01958afecc020c59ec99b4f3d9e2ef28f734b68b1f6e76f354c926c46673eba41dadfa0c67e558fba17becb35b58b206f6e0cb62456d05401fda33c95bab117c139aec5294bd991aea0860f793ba9619b821ae0d169642bcc0fb6bfba20a8ada22543c9ef391f2d1d52c11b393053534ca4dcf81d37aa67379bbcab8fb6c0a9c1a114a8649dc48f287f609e14e3bf3f7ede6287a47ba46603b899d1bd38cbbe471637b95760a1283bc4ea0cf8894a563f5e88b9d164886ac055cbcdf81f213eeff30f0138a402a3df3ed5acffef74237754a18a9d1c9041f3d980a8b157b6ea76f336bd5c0706b93a7cbb13d4726ff51305386bf74cc60b426814af95c29f9497d3a4140d10d3ab7149453deae84a5e1f33a8e9e39ccf0e1a274a703ba2c74cafa60ac39cb18769a88aeec2b4a72a1285236dedc7505f205dfa99046a901376b4bc6a500325640992ba95b7bee777494068d56dfed09eabce6286760d510d65a7cb8413fa0c5263bdecc0ad2be68d8a48f208eda3b02c76b6007ba263cda1c302c4a8b20d1da3db2cbb243ca6ebb393391ada98bbb468e19f0d726f39eb844db84955a24943cbfda2e9e4c3b7cf5602e650927ce1c43878427032a0c82c847eacc4a50e363a9a7b8048a22fe145c190b97bce1e10e71f49cba0e4d57ffd2dcc7651e74c42698f3596a36b2e4676f90c04388376c0b512f2fd8a513ae9b66b8837f9c2b34f350225cfaebe1c2b09f8e120faa73f2ceea876e40286c2e8eec2debb75a9ba71386405347bf993f5b5ee4ae1fa571a17591a47efd69a92a2a86440d36c4a30458c1011ce564d8c7a5535e06941cf3ae4d42459148a8f5825e22827529918b22e2f962d7559b1c4142c539ce8e324360ae17b87b0504907146a90df5518a2cf5bf94fe69e74cba167fefe11311f8acd08ed71a5d8dfe7b9e7680374cce7d003d485560792151cebaad34d2fdfd33a370bad6f87fd59a9aef4606d08282a1a81b600f145cb139b7be11b8fd12379bcc235d091d2173ce431d6a1ef9331ce1422abd56647c93c4f09b93f3cacaae8d99bc7e6cf92fe20751857122540123be1eae761dd5eb7d78759c4241caae6b0b39427c7afc27b8b7ca62b5c38e8e43ffbdfd32f8287b5b9bf86b26d024a335cf036d7118a67deb524aafbbca0554e28a7b3112e0244c4aaea7f0502ad77561bc8317d0b976279d2f5d35f09e9cdb40d55dc4bc88fa59269c86a407040476b0b82fc5efd3db054cfc9fd66db78f342e3b6c0e7925b2402af230dbe3e7d2602b2f66a1fbb199dd1278926317b65b2cdab6f9df27ce704606e87a6a16eb143dda245ded46331147a189b1a4cb848e4eb53f734336e112d74ce06c58581eaa60a2107be31d287b74636c5ff3982de82a5dc2bc9efd9bbce9d3b699b1d8a4518ae1c56cfe704c705453bab78e53d7cf4f5f08b22df83d4728ce2f43ce7bd250b90b4a8d3af1fd", 0x1000}, {&(0x7f0000004b40)="a885f8648a2b96f9bbee9deb243201b2dbb5debfcece254a24e1cc6f2795e289a9f3f83d029889c2aa942a05657110b39e37b11f4b8a48dc19f686834110fcf15d5d425709ad57118cf07768f31670127ef20dd57fb1ac86b4c82baf44f63b8292ca159034efbcd04b60434b2f2622c4e63bfb345166afd9a0dde1a01ea3afaad31d5b6128f40824ce34bf63fcce7e41eb3f38b675bdef48cd6547226c60b9eefc6bd88d98603ece664740e7a90a66e3bdcaf46a04521d80f89f215aee5d17dcdd51b3026513fceacf053a781c9163c01d82dfe37a40fa220a934a7517f849e84e540f320ff11f08e103b553d1c592", 0xef}, {&(0x7f0000004c40)="64c325d4cd8202786d03f1bd1dc2681e89d44c55d25bb465ee4a065a5336a66696b0629c6331c5df4ca70945a6cff5f820fcb802eb068c4e9f23d4a428a67a4486ec07cc47175b661397ff9454170524a9d4734dad07fbc86da4582d8e7567fa9f8421b819624bcf6df1651bcf27dde1a7d1630d", 0x74}, {&(0x7f0000004cc0)="b2fb24d7bf52d77afdf0e6b5d7248cd4b8d15bf2ad12750f95f7c53aa5483955d1efc2c46aed5e51c46d85399e55c4a8e50579d9246bae9f2030d75351fdc5a69222d01c", 0x44}, {&(0x7f0000004d40)="75a072dc910f10f7fe2c3613c2ae5662829437acfa398158ec0719460d2f880a0cb8359bd4c63e2b507101ec11faa3db53819a953ea61bb11ce9bb18e65dfe3262b96afa464ccc4466cf49e86418671b57c73fe851", 0x55}, {&(0x7f0000004dc0)="f546ae4f15c80afd2fc176a8", 0xc}, {&(0x7f0000004e00)="e3d6988316c67bbdbf969affc4998cf926ed64dce763f3185c68a7d0c44e43e3b1738bbfeb9329f8e35e08985ebb572c4fc9885e50de2762835bd4a07c252d59f89536ba6a47561d36fa5f5f29afb8b1d551e8bb922366cdaaddbba075a08857198d102123b9ba49fbca733bf37f3e99ce20ffbe37cd0261b0acc1b5424f83826230dc5531d2c15c4bbb941c773390afe2b51f4ef88f4a37eaa0adf5af88ffd7b28dd24166c6584818208a31a6cb4edf5c574178663ae5723d9e7dc98912a9132135cea738eabcd95b27681a5e8fdceb0d6010d4feba903c8e1b8b3810532eefe817630b28799f4cfb9d3b46035b851b32", 0xf1}], 0x8, &(0x7f0000004fc0)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @enc_lim={0x4, 0x1, 0x3}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1fffe00}}, @flowinfo={{0x14, 0x29, 0xb, 0xf}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x32, 0x13, '\x00', [@generic={0x1, 0x6d, "e0b66e4bc5b429de90b125cf1b57c3cbbe3289d92fc8378c4f0efce9cba2e5a9ecd1f8880d5d8480c1c59a8dc39c910fc1c613e977b49d90c4d7c935c3a2fdb859778b8fe4682c34f6c7e261c340515f43bfc655f5343396bdcb221a66d55695298ffd8b7d2b9d80ae5e6037c3"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x120}}], 0x4, 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 1.213088091s ago: executing program 1 (id=9426): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8042) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xd, r5, 0x2}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rpcgss_unwrap_failed\x00', r6, 0x0, 0x1}, 0xfffffffffffffc86) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r7, &(0x7f0000000780)={'#! ', './file0'}, 0xb) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.140460082s ago: executing program 1 (id=9428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unshare(0x64000600) 647.64305ms ago: executing program 3 (id=9429): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="85100000f9ffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000c50000000000000d00"/55], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000190001002bbd70000000000080200009000400050000000008002500af2b03ebebb3736bd2ae958187ed79c7eb2fd8cc34e956bc1040786b9cafee4d7c5b0100000000000000625e7d1c3bc5a64e3488ed00002df2573280c63722b2bd5c1156ac4cec6189d4195975f39702e5", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x13040, &(0x7f0000000180), 0x0, 0x253, &(0x7f00000010c0)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000000)=0xa4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x3, r4, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvTLtFBGxF/MEPtYrGxh8tBVQOHtBo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1sztDd5fdpV12u9X9fJKB92be9L3vvnnbN/N2G8DQmsz+SSK2R8QfETFeyzYWmKz9d+Pahfmb1y7MJ1GpvPN3Ui13/dqF+aJocd62PDOVRqSfJ7G3Rb3L586fmiuXF8/m+ZmV0x/OLJ87/8LJ03MnFk8snjl45MjhQ7Mvv3TwxZ7EmbXp+p5PlvbtfvP9r9869mVD/E1x9Mhkp4NPVyo9rm6wdtSlk9EBNoR1GYmIrLtK1fE/HiOx2nnj8cZnA20c0FeVSqWyrf3hixXgfyyJxrwhD8Oi+EWf3f8WW/Mk4Gj/ph8Dd/XV2g1QFveNfKsdGY00L1Nqur/tpcmIeO/iP99mW/TnOQQAQIMfs/nP863mf2k8VFfuvnxtaCIi7o+InRHxQETsiogHI6plH46IR9ZZf/Miye3zn/RKV4GtUTb/eyVf22qc/xWzv5gYyXM7qvGXkuMny4sH8tdkKkpbsvxshzp+ev33r9odq5//ZVtWfzEXzNtxZXRL4zkLcytzdxNzvauXIvaMtoo/ubUSkETE7ojY02UdJ5/9fl+7Y3eOv4MerDNVvot4ptb/F6Mp/kLSeX1y5p4oLx6YKa6K2/362+W329V/V/H3QNb/97a8/m/FP5HUr9cur7+Oy39+0faeptvrfyx5t5oey/d9PLeycnY2Yiw5Vmt0/f6Dq+cW+aJ8Fv/U/tbjf2esvhJ7IyK7iB+NiMci4vG87U9ExJMRsb9D/L+89tQH3cffX1n8C6v9f/TO/b+aGIvmPa0TI6d+/qGh0onb4r/Zuf8PV1NT+Z61vP+tpV3dXc0AAADw35NGxPZI0ulb6TSdnq59Xn5XRFpeWl557vjSR2cWat8RmIhIiydd43XPQ2fz2/pa/lJE1D5aUBw/lD83/mZkazU/Pb9UXhh08DDktrUZ/5m/RgbdOqDvfF8LhpfxD8PL+IfhZfzD8Gox/rcOoh3Axmv1+//TAbQD2HhN49+yHwwR9/8wvIx/GF7GPwyl5a1x5y/Jd0wUP6nL0wecKN76ev+To7Sus7ZshldjXf2ebopmbNpEaROOi+JvGq2l8Ma/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTDvwEAAP//7hXV/g==") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000280)={[{@memory_hugetlb_accounting}, {@subsystem='cpu'}, {@subsystem='memory'}, {@pids_localevents}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}, {@pids_localevents}]}) sendfile(r8, r8, 0x0, 0x800000009) 502.676422ms ago: executing program 0 (id=9430): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/3, 0x3}], 0x3) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYBLOB="2e9fcbe5d3555d1a6fa3f7ba78abdf5dd8750318928dd67f6073d891f7228b9b8234397b116af1703a7a93e9c19d806bd5bebbcc9949a1e9ff2f5a20600e90c9cd6401d1a3dbf35034a497ce5c0dad1bf6fd7ab77b0ccecdfc426c88ce545817563a5fef21a6fcac84a961856d788a0d11859fc6b9c8b648ef52ef43c873b1961b1e3eccaf2797ba9afb29977bdf7db6ac", @ANYRESHEX=r0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000000101010400000000000000000a00000a4400028006000340000300002c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c000280d6216b9184"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mknod(0x0, 0x0, 0x0) 407.655154ms ago: executing program 4 (id=9431): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x28, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC=r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x2c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) getpeername$l2tp(r2, &(0x7f00000004c0), &(0x7f0000000580)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000007e08f8650c25c8317684000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="0b002abd7000fcdbdf", @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 306.451025ms ago: executing program 7 (id=9432): lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x2, 0xd0, 0x6, "8e5d4cd98017f8e8bc83f15ec65617961c0efc47c7f00aa6fb2f88b85252abca343bdcca4d57b4adedacefd0b7a5a7e0c9a9529b871b144b6d305b0bf99154", 0x3b}, 0x80, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000009300000037000000e7000000000000008649604c2b69bf57a12c12d47421eef8b3cbee4c03b0d62bf204aba817d85710ef2f9b67cf8ada4e3c704119ab5485bef707cc4b5d0b8787"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0xaf, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x3, 0xfff8, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}}, 0x40880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000d49000/0x1000)=nil, 0x1000, 0x2, 0x12, r2, 0x4f24d000) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000005c0), &(0x7f0000000640)=ANY=[@ANYBLOB="00fbf705fbf4d86717481651c17dfe6c6c6be6338b142eed77694be8d6e780619429831c112848300962f8427dbf90c25b6fd891690cbdf4cc3807ab5cb7f457e02ae4d6d66f8453644b5f7ae76bc7bafcd412225355378aa01de52cd35ff14698b57a5b2a14693469430509b8e90b083998abbbab97d52d72af8983bf27ffec7440fa9af306acc98ac91b47b0eb8b40261aa90fe169317cccb30a298f49313ded6403bdb4c9b42fd10def342efc12ca7a6125b93303b173f0f55c75cb9e61eb6a7f3d9e05b8ace02a516730372b7f641b1fac5c5ff25a753d95f5374763d626a91f9b8decaab8af63f9186a52c379d92c91bdb3184c7b"], 0xf7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) 226.608856ms ago: executing program 1 (id=9433): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='net_dev_xmit\x00', r0, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x1c) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 42.248369ms ago: executing program 7 (id=9434): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='xdp_cpumap_kthread\x00'}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x2, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r3}, 0x10) munlockall() r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b40000000000000000000000000040000080000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 7 (id=9435): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x12a6, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb010511000b0003000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0xb8, 0x81, @scatter={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)="b81382462f10be197ab11310b25ac26fdf4f233cd1adb928e84a5d9a22ebe2e87217fd2ee0354ca438ccacae61cd694bd6e1d84865e7683e7269ccebb8d719c7f5d887e47241072c65dfc1f7622e7276648a04e6ecf3f7ce814436497deefa8a404f25ff810440a01ee720648e0ee402a7dea56961b5b1747d1dbcf26ecce1288c7e35eca95dc7b72120099728e7b74db6afc4769a5aefb5125089c2098702f6cecb56086d6a6f4eedb286e1401d58c7b99a6703a618cd1d", &(0x7f0000000200)=""/95, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0), 0x0, r6) setsockopt$sock_attach_bpf(r3, 0x1, 0x49, &(0x7f0000009000), 0x4) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0xa80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): 3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 414.600909][T25953] loop1: detected capacity change from 0 to 8192 [ 414.671152][T19216] loop1: p1 p2 p3 [ 414.676596][T19216] loop1: p1 start 51379968 is beyond EOD, truncated [ 414.755540][T19216] loop1: p3 size 100663552 extends beyond EOD, truncated [ 414.774767][T25953] loop1: p1 p2 p3 [ 414.781308][T25953] loop1: p1 start 51379968 is beyond EOD, truncated [ 414.794491][T25953] loop1: p3 size 100663552 extends beyond EOD, truncated [ 414.817106][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8912'. [ 414.841452][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8912'. [ 415.086783][T25971] loop1: detected capacity change from 0 to 2048 [ 415.435923][T25972] lo speed is unknown, defaulting to 1000 [ 415.506135][T25960] lo speed is unknown, defaulting to 1000 [ 415.524797][T20447] udevd[20447]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 415.524911][T19216] udevd[19216]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 415.631990][T25977] 9pnet_virtio: no channels available for device 127.0.0.1 [ 415.702127][T25983] loop1: detected capacity change from 0 to 1024 [ 415.717685][T25977] lo speed is unknown, defaulting to 1000 [ 415.737199][T25983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.742378][T25984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.782703][T25984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.802795][T25984] loop0: detected capacity change from 0 to 256 [ 415.809527][T25984] vfat: Unknown parameter 'mm_page_alloc' [ 415.840403][T25991] loop3: detected capacity change from 0 to 1024 [ 415.871234][T25991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.901995][T25991] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 415.916571][T25991] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 415.926207][T25991] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.8919: lblock 2 mapped to illegal pblock 2 (length 1) [ 415.941061][T25991] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.8919: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.955850][T25991] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8919: Failed to acquire dquot type 0 [ 415.967999][T25991] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 415.985213][T25991] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.8919: mark_inode_dirty error [ 415.998274][T25991] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 416.009460][T25991] EXT4-fs (loop3): 1 orphan inode deleted [ 416.017126][T25991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.030392][T22813] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 416.046676][T22813] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:39: Failed to release dquot type 0 [ 416.060532][T25991] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.075145][T25991] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.8919: Invalid inode table block 1 in block_group 0 [ 416.088324][T25991] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 416.098300][T25991] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.8919: mark_inode_dirty error [ 416.520364][T26003] syz.1.8922 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 416.534572][T26003] CPU: 1 UID: 0 PID: 26003 Comm: syz.1.8922 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 416.534589][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.534656][T26003] Call Trace: [ 416.534664][T26003] [ 416.534670][T26003] __dump_stack+0x1d/0x30 [ 416.534733][T26003] dump_stack_lvl+0xe8/0x140 [ 416.534744][T26003] dump_stack+0x15/0x1b [ 416.534754][T26003] dump_header+0x81/0x220 [ 416.534772][T26003] oom_kill_process+0x334/0x3f0 [ 416.534797][T26003] out_of_memory+0x979/0xb80 [ 416.534860][T26003] try_charge_memcg+0x5e6/0x9e0 [ 416.534877][T26003] obj_cgroup_charge_pages+0xa6/0x150 [ 416.534961][T26003] __memcg_kmem_charge_page+0x9f/0x170 [ 416.534978][T26003] __alloc_frozen_pages_noprof+0x188/0x360 [ 416.534999][T26003] alloc_pages_mpol+0xb3/0x250 [ 416.535016][T26003] alloc_pages_noprof+0x90/0x130 [ 416.535058][T26003] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 416.535082][T26003] __kvmalloc_node_noprof+0x30f/0x4e0 [ 416.535162][T26003] ? ip_set_alloc+0x1f/0x30 [ 416.535180][T26003] ? ip_set_alloc+0x1f/0x30 [ 416.535195][T26003] ? __kmalloc_cache_noprof+0x189/0x320 [ 416.535253][T26003] ip_set_alloc+0x1f/0x30 [ 416.535269][T26003] hash_netiface_create+0x282/0x740 [ 416.535287][T26003] ? __pfx_hash_netiface_create+0x10/0x10 [ 416.535304][T26003] ip_set_create+0x3c9/0x960 [ 416.535411][T26003] ? __nla_parse+0x40/0x60 [ 416.535432][T26003] nfnetlink_rcv_msg+0x4c3/0x590 [ 416.535465][T26003] ? selinux_capable+0x1f9/0x270 [ 416.535527][T26003] netlink_rcv_skb+0x120/0x220 [ 416.535570][T26003] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 416.535590][T26003] nfnetlink_rcv+0x16b/0x1690 [ 416.535604][T26003] ? __kfree_skb+0x109/0x150 [ 416.535689][T26003] ? nlmon_xmit+0x4f/0x60 [ 416.535700][T26003] ? consume_skb+0x49/0x150 [ 416.535716][T26003] ? nlmon_xmit+0x4f/0x60 [ 416.535727][T26003] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 416.535756][T26003] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 416.535774][T26003] ? __dev_queue_xmit+0x182/0x1fb0 [ 416.535793][T26003] ? ref_tracker_free+0x37d/0x3e0 [ 416.535844][T26003] ? __netlink_deliver_tap+0x4dc/0x500 [ 416.535864][T26003] netlink_unicast+0x59e/0x670 [ 416.535881][T26003] netlink_sendmsg+0x58b/0x6b0 [ 416.536061][T26003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.536072][T26003] __sock_sendmsg+0x142/0x180 [ 416.536086][T26003] ____sys_sendmsg+0x31e/0x4e0 [ 416.536106][T26003] ___sys_sendmsg+0x17b/0x1d0 [ 416.536162][T26003] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 416.536187][T26003] __x64_sys_sendmsg+0xd4/0x160 [ 416.536275][T26003] x64_sys_call+0x2999/0x2fb0 [ 416.536289][T26003] do_syscall_64+0xd2/0x200 [ 416.536300][T26003] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 416.536315][T26003] ? clear_bhb_loop+0x40/0x90 [ 416.536327][T26003] ? clear_bhb_loop+0x40/0x90 [ 416.536431][T26003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.536443][T26003] RIP: 0033:0x7fb9efd7e929 [ 416.536453][T26003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.536468][T26003] RSP: 002b:00007fb9ee3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.536487][T26003] RAX: ffffffffffffffda RBX: 00007fb9effa6080 RCX: 00007fb9efd7e929 [ 416.536500][T26003] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 416.536513][T26003] RBP: 00007fb9efe00b39 R08: 0000000000000000 R09: 0000000000000000 [ 416.536587][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.536600][T26003] R13: 0000000000000000 R14: 00007fb9effa6080 R15: 00007fff8becf268 [ 416.536621][T26003] [ 416.536628][T26003] memory: usage 307200kB, limit 307200kB, failcnt 2546 [ 416.894944][T26003] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 416.902929][T26003] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 416.910337][T26003] Memory cgroup stats for /syz1: [ 416.930042][T26003] cache 4096 [ 416.938508][T26003] rss 0 [ 416.941338][T26003] shmem 0 [ 416.944304][T26003] mapped_file 397312 [ 416.948240][T26003] dirty 0 [ 416.951289][T26003] writeback 28672 [ 416.955083][T26003] workingset_refault_anon 1487 [ 416.959880][T26003] workingset_refault_file 2838 [ 416.964799][T26003] swap 712704 [ 416.968144][T26003] swapcached 28672 [ 416.971894][T26003] pgpgin 580435 [ 416.975362][T26003] pgpgout 580427 [ 416.978963][T26003] pgfault 599157 [ 416.982549][T26003] pgmajfault 348 [ 416.983583][T26018] futex_wake_op: syz.7.8927 tries to shift op by -1; fix this program [ 416.986091][T26003] inactive_anon 28672 [ 416.986101][T26003] active_anon 0 [ 417.001848][T26003] inactive_file 0 [ 417.005490][T26003] active_file 4096 [ 417.009247][T26003] unevictable 0 [ 417.012817][T26003] hierarchical_memory_limit 314572800 [ 417.018362][T26003] hierarchical_memsw_limit 9223372036854771712 [ 417.024559][T26003] total_cache 4096 [ 417.028282][T26003] total_rss 0 [ 417.031602][T26003] total_shmem 0 [ 417.035125][T26003] total_mapped_file 397312 [ 417.039592][T26003] total_dirty 0 [ 417.043135][T26003] total_writeback 28672 [ 417.047318][T26003] total_workingset_refault_anon 1487 [ 417.052628][T26003] total_workingset_refault_file 2838 [ 417.057942][T26003] total_swap 712704 [ 417.061801][T26003] total_swapcached 28672 [ 417.066042][T26003] total_pgpgin 580435 [ 417.070014][T26003] total_pgpgout 580427 [ 417.074191][T26003] total_pgfault 599157 [ 417.078254][T26003] total_pgmajfault 348 [ 417.082402][T26003] total_inactive_anon 28672 [ 417.086900][T26003] total_active_anon 0 [ 417.090892][T26003] total_inactive_file 0 [ 417.095126][T26003] total_active_file 4096 [ 417.099372][T26003] total_unevictable 0 [ 417.103375][T26003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8922,pid=25999,uid=0 [ 417.118527][T26003] Memory cgroup out of memory: Killed process 25999 (syz.1.8922) total-vm:94140kB, anon-rss:936kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 417.271697][T26020] lo speed is unknown, defaulting to 1000 [ 417.528486][T26026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8929'. [ 418.182100][T26031] loop3: detected capacity change from 0 to 736 [ 418.217209][T26031] rock: directory entry would overflow storage [ 418.223492][T26031] rock: sig=0x3b10, size=4, remaining=3 [ 418.347582][T26035] lo speed is unknown, defaulting to 1000 [ 418.376470][T26040] loop7: detected capacity change from 0 to 1024 [ 418.484550][T26045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8935'. [ 418.809671][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 418.809686][ T29] audit: type=1326 audit(1750678694.261:930238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87925158e7 code=0x7ffc0000 [ 419.231705][ T29] audit: type=1400 audit(1750678694.381:930240): avc: denied { setopt } for pid=26055 comm="syz.0.8940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.251827][ T29] audit: type=1400 audit(1750678694.391:930241): avc: denied { write } for pid=26055 comm="syz.0.8940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 419.271708][ T29] audit: type=1326 audit(1750678694.291:930239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87924bab19 code=0x7ffc0000 [ 419.295801][ T29] audit: type=1326 audit(1750678694.401:930242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87925158e7 code=0x7ffc0000 [ 419.319406][ T29] audit: type=1326 audit(1750678694.401:930243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87924bab19 code=0x7ffc0000 [ 419.343143][ T29] audit: type=1326 audit(1750678694.401:930244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 419.366953][ T29] audit: type=1326 audit(1750678694.401:930245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87925158e7 code=0x7ffc0000 [ 419.378870][T26048] syz.4.8937 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 419.390697][ T29] audit: type=1326 audit(1750678694.401:930246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87924bab19 code=0x7ffc0000 [ 419.401312][T26048] CPU: 1 UID: 0 PID: 26048 Comm: syz.4.8937 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 419.401374][T26048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.401441][T26048] Call Trace: [ 419.401449][T26048] [ 419.401518][T26048] __dump_stack+0x1d/0x30 [ 419.401540][T26048] dump_stack_lvl+0xe8/0x140 [ 419.401560][T26048] dump_stack+0x15/0x1b [ 419.401577][T26048] dump_header+0x81/0x220 [ 419.401675][T26048] oom_kill_process+0x334/0x3f0 [ 419.401723][T26048] out_of_memory+0x979/0xb80 [ 419.401752][T26048] try_charge_memcg+0x5e6/0x9e0 [ 419.401777][T26048] charge_memcg+0x51/0xc0 [ 419.401817][T26048] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 419.401984][T26048] __read_swap_cache_async+0x1df/0x350 [ 419.402016][T26048] swap_cluster_readahead+0x277/0x3e0 [ 419.402109][T26048] swapin_readahead+0xde/0x6f0 [ 419.402155][T26048] ? __filemap_get_folio+0x4f7/0x6b0 [ 419.402186][T26048] ? swap_cache_get_folio+0x77/0x200 [ 419.402270][T26048] do_swap_page+0x301/0x2430 [ 419.402290][T26048] ? finish_task_switch+0xad/0x2b0 [ 419.402311][T26048] ? mas_state_walk+0x141/0x650 [ 419.402340][T26048] ? __pfx_default_wake_function+0x10/0x10 [ 419.402364][T26048] handle_mm_fault+0x9a5/0x2be0 [ 419.402447][T26048] ? mas_walk+0xf2/0x120 [ 419.402513][T26048] do_user_addr_fault+0x636/0x1090 [ 419.402622][T26048] ? fpregs_restore_userregs+0xe2/0x1d0 [ 419.402651][T26048] ? switch_fpu_return+0xe/0x20 [ 419.402676][T26048] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.402781][T26048] exc_page_fault+0x62/0xa0 [ 419.402808][T26048] asm_exc_page_fault+0x26/0x30 [ 419.402897][T26048] RIP: 0033:0x7fb63bc60c5e [ 419.402914][T26048] Code: e9 57 c7 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 9b 13 35 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 419.402936][T26048] RSP: 002b:00007ffe1398fe10 EFLAGS: 00010202 [ 419.402980][T26048] RAX: 00007fb63bfb5fa0 RBX: 00007fb63bfb5fa0 RCX: 0000000000000026 [ 419.402993][T26048] RDX: 0000000000000001 RSI: 00007fb63bfb6038 RDI: 0000000000000003 [ 419.403005][T26048] RBP: 00007fb63bfb7ba0 R08: 0000000000000001 R09: 0000000000000026 [ 419.403066][T26048] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000006661a [ 419.403078][T26048] R13: 00007fb63bfb6080 R14: ffffffffffffffff R15: 00007ffe1398ff90 [ 419.403096][T26048] [ 419.403103][T26048] memory: usage 307200kB, limit 307200kB, failcnt 3274 [ 419.425244][ T29] audit: type=1326 audit(1750678694.401:930247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26032 comm="syz.3.8933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 419.435719][T26048] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 419.435734][T26048] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 419.435745][T26048] Memory cgroup stats for /syz4: [ 419.703896][T26062] loop7: detected capacity change from 0 to 512 [ 419.715685][T26062] EXT4-fs: Ignoring removed nobh option [ 419.739367][T26048] cache 8192 [ 419.742659][T26048] rss 28672 [ 419.745780][T26048] shmem 0 [ 419.748734][T26048] mapped_file 0 [ 419.752263][T26048] dirty 0 [ 419.755199][T26048] writeback 0 [ 419.758594][T26048] workingset_refault_anon 1350 [ 419.763363][T26048] workingset_refault_file 1884 [ 419.768117][T26048] swap 520192 [ 419.771419][T26048] swapcached 28672 [ 419.775137][T26048] pgpgin 776139 [ 419.778810][T26048] pgpgout 776130 [ 419.782620][T26048] pgfault 700823 [ 419.786173][T26048] pgmajfault 518 [ 419.789887][T26048] inactive_anon 28672 [ 419.794075][T26048] active_anon 0 [ 419.797721][T26048] inactive_file 8192 [ 419.801675][T26048] active_file 0 [ 419.805143][T26048] unevictable 0 [ 419.808627][T26048] hierarchical_memory_limit 314572800 [ 419.810384][T26067] loop3: detected capacity change from 0 to 128 [ 419.814105][T26048] hierarchical_memsw_limit 9223372036854771712 [ 419.814116][T26048] total_cache 8192 [ 419.814123][T26048] total_rss 28672 [ 419.814130][T26048] total_shmem 0 [ 419.837354][T26048] total_mapped_file 0 [ 419.841400][T26048] total_dirty 0 [ 419.844862][T26048] total_writeback 0 [ 419.848765][T26048] total_workingset_refault_anon 1354 [ 419.854085][T26048] total_workingset_refault_file 1884 [ 419.859372][T26048] total_swap 520192 [ 419.859950][T26067] 9pnet_fd: Insufficient options for proto=fd [ 419.863274][T26048] total_swapcached 28672 [ 419.863284][T26048] total_pgpgin 783148 [ 419.863291][T26048] total_pgpgout 783139 [ 419.871915][T26062] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 419.873589][T26048] total_pgfault 705412 [ 419.877534][T26062] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 419.881610][T26048] total_pgmajfault 519 [ 419.893066][T26062] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8941: Corrupt directory, running e2fsck is recommended [ 419.897128][T26048] total_inactive_anon 28672 [ 419.897138][T26048] total_active_anon 0 [ 419.912303][T26062] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 419.924199][T26048] total_inactive_file 8192 [ 419.924211][T26048] total_active_file 0 [ 419.924218][T26048] total_unevictable 0 [ 419.929052][T26062] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.8941: corrupted in-inode xattr: invalid ea_ino [ 419.932683][T26048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 419.941751][T26062] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.8941: couldn't read orphan inode 15 (err -117) [ 419.945222][T26048] ,cpuset= [ 419.949771][T26062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.953144][T26048] syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8937,pid=26048,uid=0 [ 420.010877][T26048] Memory cgroup out of memory: Killed process 26048 (syz.4.8937) total-vm:95800kB, anon-rss:1064kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 420.114165][T26071] loop3: detected capacity change from 0 to 1024 [ 420.142018][T26071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.162465][T26061] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 420.174091][T26061] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 420.184295][T26061] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.8941: Corrupt directory, running e2fsck is recommended [ 420.271409][T26062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8941'. [ 420.399739][T26061] usb usb1: usbfs: process 26061 (syz.7.8941) did not claim interface 0 before use [ 420.427772][T26061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8941'. [ 420.527822][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.821769][T26088] siw: device registration error -23 [ 420.832692][T26087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8947'. [ 420.861238][T26087] x_tables: ip_tables: udp match: only valid for protocol 17 [ 420.964707][ T1047] IPVS: starting estimator thread 0... [ 421.050950][T26095] IPVS: using max 2640 ests per chain, 132000 per kthread [ 421.074966][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.362349][T26104] loop3: detected capacity change from 0 to 512 [ 421.397037][T26104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.410050][T26104] ext4 filesystem being mounted at /1803/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.410320][T26109] netlink: 'syz.4.8953': attribute type 1 has an invalid length. [ 421.435049][T26109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.443292][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.467708][T26109] bond3: (slave gretap1): making interface the new active one [ 421.471279][T26114] loop3: detected capacity change from 0 to 512 [ 421.482705][T26114] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.495330][T26109] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 421.505275][T26115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8952'. [ 421.515482][T26114] EXT4-fs (loop3): 1 truncate cleaned up [ 421.535318][T26114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.652906][T26124] 9pnet_fd: Insufficient options for proto=fd [ 421.730424][T26124] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.313072][T26121] syz.3.8954 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 422.327257][T26121] CPU: 0 UID: 0 PID: 26121 Comm: syz.3.8954 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 422.327284][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.327318][T26121] Call Trace: [ 422.327325][T26121] [ 422.327332][T26121] __dump_stack+0x1d/0x30 [ 422.327353][T26121] dump_stack_lvl+0xe8/0x140 [ 422.327409][T26121] dump_stack+0x15/0x1b [ 422.327423][T26121] dump_header+0x81/0x220 [ 422.327451][T26121] oom_kill_process+0x334/0x3f0 [ 422.327481][T26121] out_of_memory+0x979/0xb80 [ 422.327552][T26121] try_charge_memcg+0x5e6/0x9e0 [ 422.327629][T26121] obj_cgroup_charge_pages+0xa6/0x150 [ 422.327655][T26121] __memcg_kmem_charge_page+0x9f/0x170 [ 422.327701][T26121] __alloc_frozen_pages_noprof+0x188/0x360 [ 422.327739][T26121] alloc_pages_mpol+0xb3/0x250 [ 422.327831][T26121] alloc_pages_noprof+0x90/0x130 [ 422.327861][T26121] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 422.327904][T26121] __kvmalloc_node_noprof+0x30f/0x4e0 [ 422.327958][T26121] ? ip_set_alloc+0x1f/0x30 [ 422.328042][T26121] ? ip_set_alloc+0x1f/0x30 [ 422.328066][T26121] ? __kmalloc_cache_noprof+0x189/0x320 [ 422.328161][T26121] ip_set_alloc+0x1f/0x30 [ 422.328187][T26121] hash_netiface_create+0x282/0x740 [ 422.328221][T26121] ? __pfx_hash_netiface_create+0x10/0x10 [ 422.328286][T26121] ip_set_create+0x3c9/0x960 [ 422.328340][T26121] ? __nla_parse+0x40/0x60 [ 422.328411][T26121] nfnetlink_rcv_msg+0x4c3/0x590 [ 422.328525][T26121] ? selinux_capable+0x1f9/0x270 [ 422.328650][T26121] netlink_rcv_skb+0x120/0x220 [ 422.328679][T26121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 422.328718][T26121] nfnetlink_rcv+0x16b/0x1690 [ 422.328742][T26121] ? __folio_put+0x11e/0x150 [ 422.328775][T26121] ? bpf_check+0xbe55/0xced0 [ 422.328803][T26121] ? __rcu_read_unlock+0x4f/0x70 [ 422.328847][T26121] ? obj_cgroup_charge_pages+0xf7/0x150 [ 422.328873][T26121] ? __rcu_read_unlock+0x4f/0x70 [ 422.328893][T26121] ? cmp_ex_search+0x25/0x40 [ 422.328913][T26121] ? bsearch+0x95/0xc0 [ 422.328970][T26121] ? __pfx_cmp_ex_search+0x10/0x10 [ 422.328988][T26121] ? __get_user_nocheck_8+0x6/0x20 [ 422.329051][T26121] ? search_extable+0x53/0x80 [ 422.329068][T26121] ? __get_user_nocheck_8+0x6/0x20 [ 422.329096][T26121] ? __get_user_nocheck_8+0x6/0x20 [ 422.329138][T26121] ? fixup_exception+0x72e/0xd00 [ 422.329156][T26121] ? css_rstat_updated+0xcd/0x5b0 [ 422.329187][T26121] ? should_fail_ex+0x30/0x280 [ 422.329260][T26121] ? selinux_nlmsg_lookup+0x99/0x890 [ 422.329372][T26121] ? selinux_netlink_send+0x59f/0x5f0 [ 422.329404][T26121] ? __rcu_read_unlock+0x34/0x70 [ 422.329482][T26121] ? __netlink_lookup+0x266/0x2a0 [ 422.329637][T26121] netlink_unicast+0x59e/0x670 [ 422.329655][T26121] netlink_sendmsg+0x58b/0x6b0 [ 422.329666][T26121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.329681][T26121] __sock_sendmsg+0x142/0x180 [ 422.329696][T26121] ____sys_sendmsg+0x31e/0x4e0 [ 422.329733][T26121] ___sys_sendmsg+0x17b/0x1d0 [ 422.329760][T26121] __x64_sys_sendmsg+0xd4/0x160 [ 422.329816][T26121] x64_sys_call+0x2999/0x2fb0 [ 422.329919][T26121] do_syscall_64+0xd2/0x200 [ 422.329929][T26121] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 422.329986][T26121] ? clear_bhb_loop+0x40/0x90 [ 422.329998][T26121] ? clear_bhb_loop+0x40/0x90 [ 422.330011][T26121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.330023][T26121] RIP: 0033:0x7f879251e929 [ 422.330033][T26121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.330119][T26121] RSP: 002b:00007f8790b66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.330138][T26121] RAX: ffffffffffffffda RBX: 00007f8792746080 RCX: 00007f879251e929 [ 422.330151][T26121] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 422.330159][T26121] RBP: 00007f87925a0b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.330166][T26121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.330173][T26121] R13: 0000000000000000 R14: 00007f8792746080 R15: 00007ffc7958b748 [ 422.330183][T26121] [ 422.330187][T26121] memory: usage 307176kB, limit 307200kB, failcnt 4377 [ 422.675856][ T1047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1047 comm=kworker/1:2 [ 422.682710][T26121] memory+swap: usage 373564kB, limit 9007199254740988kB, failcnt 0 [ 422.682725][T26121] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 422.682738][T26121] Memory cgroup stats for /syz3: [ 422.683219][T26121] cache 36864 [ 422.694607][T26138] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 422.698901][T26121] rss 4096 [ 422.698910][T26121] shmem 0 [ 422.783538][T26121] mapped_file 421888 [ 422.787522][T26121] dirty 0 [ 422.790570][T26121] writeback 0 [ 422.793880][T26121] workingset_refault_anon 259 [ 422.798594][T26121] workingset_refault_file 2654 [ 422.803388][T26121] swap 67956736 [ 422.806841][T26121] swapcached 0 [ 422.810287][T26121] pgpgin 661609 [ 422.813759][T26121] pgpgout 661599 [ 422.817299][T26121] pgfault 591799 [ 422.820902][T26121] pgmajfault 108 [ 422.824442][T26121] inactive_anon 4096 [ 422.828322][T26121] active_anon 0 [ 422.831795][T26121] inactive_file 36864 [ 422.835794][T26121] active_file 0 [ 422.839257][T26121] unevictable 0 [ 422.842788][T26121] hierarchical_memory_limit 314572800 [ 422.848277][T26121] hierarchical_memsw_limit 9223372036854771712 [ 422.854470][T26121] total_cache 36864 [ 422.858276][T26121] total_rss 4096 [ 422.861841][T26121] total_shmem 0 [ 422.865307][T26121] total_mapped_file 421888 [ 422.869780][T26121] total_dirty 0 [ 422.873371][T26121] total_writeback 0 [ 422.877176][T26121] total_workingset_refault_anon 259 [ 422.882394][T26121] total_workingset_refault_file 2654 [ 422.887682][T26121] total_swap 67956736 [ 422.891675][T26121] total_swapcached 0 [ 422.895561][T26121] total_pgpgin 661609 [ 422.899537][T26121] total_pgpgout 661599 [ 422.903692][T26121] total_pgfault 591799 [ 422.907752][T26121] total_pgmajfault 108 [ 422.912009][T26121] total_inactive_anon 4096 [ 422.916473][T26121] total_active_anon 0 [ 422.920442][T26121] total_inactive_file 36864 [ 422.924954][T26121] total_active_file 0 [ 422.928946][T26121] total_unevictable 0 [ 422.932937][T26121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8954,pid=26113,uid=0 [ 422.947971][T26121] Memory cgroup out of memory: Killed process 26113 (syz.3.8954) total-vm:94140kB, anon-rss:1064kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 423.135985][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.862344][T26172] lo speed is unknown, defaulting to 1000 [ 424.045535][T26179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8967'. [ 424.078287][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8968'. [ 424.104219][T26178] IPVS: Unknown mcast interface: vcan0 [ 424.201787][T26180] loop3: detected capacity change from 0 to 8192 [ 424.238480][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 424.238498][ T29] audit: type=1400 audit(1750678699.671:930452): avc: denied { read write } for pid=26183 comm="syz.0.8971" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.268362][ T29] audit: type=1400 audit(1750678699.671:930453): avc: denied { open } for pid=26183 comm="syz.0.8971" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.291876][ T29] audit: type=1400 audit(1750678699.671:930454): avc: denied { ioctl } for pid=26183 comm="syz.0.8971" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.316897][ T29] audit: type=1400 audit(1750678699.681:930455): avc: denied { mount } for pid=26183 comm="syz.0.8971" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 424.339724][ T29] audit: type=1400 audit(1750678699.681:930456): avc: denied { mac_admin } for pid=26183 comm="syz.0.8971" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.361208][ T29] audit: type=1400 audit(1750678699.681:930457): avc: denied { relabelto } for pid=26183 comm="syz.0.8971" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 424.387516][ T29] audit: type=1400 audit(1750678699.681:930458): avc: denied { associate } for pid=26183 comm="syz.0.8971" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 424.412363][T26190] lo speed is unknown, defaulting to 1000 [ 424.414850][ T29] audit: type=1400 audit(1750678699.681:930459): avc: denied { create } for pid=26183 comm="syz.0.8971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 424.440330][ T29] audit: type=1400 audit(1750678699.681:930460): avc: denied { connect } for pid=26183 comm="syz.0.8971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 424.460175][ T29] audit: type=1400 audit(1750678699.691:930461): avc: denied { bind } for pid=26185 comm="syz.7.8972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.497705][T19216] loop3: p1 p2 p3 [ 424.501802][T19216] loop3: p1 start 51379968 is beyond EOD, truncated [ 424.551422][T19216] loop3: p3 size 100663552 extends beyond EOD, truncated [ 424.575228][T26180] loop3: p1 p2 p3 [ 424.579172][T26180] loop3: p1 start 51379968 is beyond EOD, truncated [ 424.590366][T26180] loop3: p3 size 100663552 extends beyond EOD, truncated [ 424.674217][T26195] 9pnet_fd: Insufficient options for proto=fd [ 424.954168][T26205] loop3: detected capacity change from 0 to 1024 [ 424.973913][T26205] EXT4-fs: Ignoring removed nobh option [ 424.979620][T26205] EXT4-fs: Ignoring removed nobh option [ 425.001734][T26205] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 425.021550][T26205] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.8978: inode #4294967295: comm syz.3.8978: iget: illegal inode # [ 425.083488][T26205] EXT4-fs (loop3): no journal found [ 425.088822][T26205] EXT4-fs (loop3): can't get journal size [ 425.101182][ T3399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3399 comm=kworker/1:4 [ 425.125456][T26205] EXT4-fs (loop3): failed to initialize system zone (-22) [ 425.133809][T26209] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 425.150875][T26205] EXT4-fs (loop3): mount failed [ 425.561971][T26202] syz.3.8978 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 425.576220][T26202] CPU: 1 UID: 0 PID: 26202 Comm: syz.3.8978 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 425.576277][T26202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.576291][T26202] Call Trace: [ 425.576298][T26202] [ 425.576307][T26202] __dump_stack+0x1d/0x30 [ 425.576377][T26202] dump_stack_lvl+0xe8/0x140 [ 425.576399][T26202] dump_stack+0x15/0x1b [ 425.576417][T26202] dump_header+0x81/0x220 [ 425.576450][T26202] oom_kill_process+0x334/0x3f0 [ 425.576501][T26202] out_of_memory+0x979/0xb80 [ 425.576577][T26202] try_charge_memcg+0x5e6/0x9e0 [ 425.576604][T26202] obj_cgroup_charge_pages+0xa6/0x150 [ 425.576638][T26202] __memcg_kmem_charge_page+0x9f/0x170 [ 425.576668][T26202] __alloc_frozen_pages_noprof+0x188/0x360 [ 425.576751][T26202] alloc_pages_mpol+0xb3/0x250 [ 425.576836][T26202] alloc_pages_noprof+0x90/0x130 [ 425.576868][T26202] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 425.576961][T26202] __kvmalloc_node_noprof+0x30f/0x4e0 [ 425.577033][T26202] ? ip_set_alloc+0x1f/0x30 [ 425.577063][T26202] ? ip_set_alloc+0x1f/0x30 [ 425.577106][T26202] ? __kmalloc_cache_noprof+0x189/0x320 [ 425.577139][T26202] ip_set_alloc+0x1f/0x30 [ 425.577167][T26202] hash_netiface_create+0x282/0x740 [ 425.577261][T26202] ? __pfx_hash_netiface_create+0x10/0x10 [ 425.577288][T26202] ip_set_create+0x3c9/0x960 [ 425.577329][T26202] ? __nla_parse+0x40/0x60 [ 425.577350][T26202] nfnetlink_rcv_msg+0x4c3/0x590 [ 425.577452][T26202] ? selinux_capable+0x1f9/0x270 [ 425.577483][T26202] netlink_rcv_skb+0x120/0x220 [ 425.577511][T26202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 425.577575][T26202] nfnetlink_rcv+0x16b/0x1690 [ 425.577595][T26202] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 425.577626][T26202] ? 0xffffffffa02016e8 [ 425.577641][T26202] ? __get_user_nocheck_8+0x20/0x20 [ 425.577741][T26202] ? perf_callchain_user+0xae0/0xb50 [ 425.577773][T26202] ? fixup_exception+0x72e/0xd00 [ 425.577790][T26202] ? get_perf_callchain+0x456/0x530 [ 425.577878][T26202] ? __bpf_get_stack+0x5ff/0x630 [ 425.577906][T26202] ? should_fail_ex+0x30/0x280 [ 425.577954][T26202] ? selinux_nlmsg_lookup+0x99/0x890 [ 425.577984][T26202] ? selinux_netlink_send+0x59f/0x5f0 [ 425.578074][T26202] ? __rcu_read_unlock+0x34/0x70 [ 425.578098][T26202] ? __netlink_lookup+0x266/0x2a0 [ 425.578122][T26202] netlink_unicast+0x59e/0x670 [ 425.578154][T26202] netlink_sendmsg+0x58b/0x6b0 [ 425.578240][T26202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.578363][T26202] __sock_sendmsg+0x142/0x180 [ 425.578443][T26202] ____sys_sendmsg+0x31e/0x4e0 [ 425.578484][T26202] ___sys_sendmsg+0x17b/0x1d0 [ 425.578610][T26202] __x64_sys_sendmsg+0xd4/0x160 [ 425.578644][T26202] x64_sys_call+0x2999/0x2fb0 [ 425.578662][T26202] do_syscall_64+0xd2/0x200 [ 425.578680][T26202] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 425.578708][T26202] ? clear_bhb_loop+0x40/0x90 [ 425.578750][T26202] ? clear_bhb_loop+0x40/0x90 [ 425.578769][T26202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.578787][T26202] RIP: 0033:0x7f879251e929 [ 425.578800][T26202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.578819][T26202] RSP: 002b:00007f8790b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.578839][T26202] RAX: ffffffffffffffda RBX: 00007f8792745fa0 RCX: 00007f879251e929 [ 425.578909][T26202] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 425.578923][T26202] RBP: 00007f87925a0b39 R08: 0000000000000000 R09: 0000000000000000 [ 425.578935][T26202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.578947][T26202] R13: 0000000000000000 R14: 00007f8792745fa0 R15: 00007ffc7958b748 [ 425.578965][T26202] [ 425.578972][T26202] memory: usage 307144kB, limit 307200kB, failcnt 4554 [ 425.948880][T26202] memory+swap: usage 373200kB, limit 9007199254740988kB, failcnt 0 [ 425.948894][T26202] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 425.948905][T26202] Memory cgroup stats for /syz3: [ 425.949368][T26202] cache 36864 [ 425.972387][T26202] rss 77824 [ 425.975496][T26202] shmem 0 [ 425.978541][T26202] mapped_file 4096 [ 425.982282][T26202] dirty 4096 [ 425.985475][T26202] writeback 12288 [ 425.989101][T26202] workingset_refault_anon 353 [ 425.993784][T26202] workingset_refault_file 2760 [ 425.998624][T26202] swap 67584000 [ 426.002126][T26202] swapcached 36864 [ 426.005843][T26202] pgpgin 663098 [ 426.009295][T26202] pgpgout 663062 [ 426.012919][T26202] pgfault 593380 [ 426.016481][T26202] pgmajfault 171 [ 426.020026][T26202] inactive_anon 49152 [ 426.024031][T26202] active_anon 0 [ 426.027544][T26202] inactive_file 0 [ 426.031183][T26202] active_file 36864 [ 426.034986][T26202] unevictable 0 [ 426.038444][T26202] hierarchical_memory_limit 314572800 [ 426.043864][T26202] hierarchical_memsw_limit 9223372036854771712 [ 426.050047][T26202] total_cache 36864 [ 426.053906][T26202] total_rss 77824 [ 426.057666][T26202] total_shmem 0 [ 426.061153][T26202] total_mapped_file 4096 [ 426.065556][T26202] total_dirty 4096 [ 426.069272][T26202] total_writeback 12288 [ 426.073445][T26202] total_workingset_refault_anon 353 [ 426.078760][T26202] total_workingset_refault_file 2760 [ 426.084064][T26202] total_swap 67584000 [ 426.088116][T26202] total_swapcached 36864 [ 426.092436][T26202] total_pgpgin 663098 [ 426.096414][T26202] total_pgpgout 663062 [ 426.100485][T26202] total_pgfault 593380 [ 426.104579][T26202] total_pgmajfault 171 [ 426.108644][T26202] total_inactive_anon 49152 [ 426.113249][T26202] total_active_anon 0 [ 426.117295][T26202] total_inactive_file 0 [ 426.121487][T26202] total_active_file 36864 [ 426.125882][T26202] total_unevictable 0 [ 426.129866][T26202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8978,pid=26201,uid=0 [ 426.144856][T26202] Memory cgroup out of memory: Killed process 26201 (syz.3.8978) total-vm:95800kB, anon-rss:1064kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 426.202344][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8983'. [ 426.241765][T26226] IPVS: Unknown mcast interface: vcan0 [ 426.329340][T26229] lo speed is unknown, defaulting to 1000 [ 426.490544][T26229] lo speed is unknown, defaulting to 1000 [ 426.988744][T26246] lo speed is unknown, defaulting to 1000 [ 427.248454][T26249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8984'. [ 427.405191][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8987'. [ 427.421310][T26253] loop3: detected capacity change from 0 to 1024 [ 427.490032][T26253] EXT4-fs: Ignoring removed oldalloc option [ 427.534778][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8987'. [ 427.748004][T26253] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 427.836654][T26253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.239303][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.280905][T26274] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8992'. [ 428.290429][T26274] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8992'. [ 428.302895][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8992'. [ 428.383429][T26282] loop3: detected capacity change from 0 to 8192 [ 428.431518][T19216] loop3: p1 p2 p3 [ 428.436032][T19216] loop3: p1 start 51379968 is beyond EOD, truncated [ 428.443452][T26288] loop7: detected capacity change from 0 to 512 [ 428.443874][T19216] loop3: p3 size 100663552 extends beyond EOD, truncated [ 428.466819][T26288] EXT4-fs (loop7): 1 orphan inode deleted [ 428.477187][T26282] loop3: p1 p2 p3 [ 428.481894][ T2175] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 428.486772][T26282] loop3: p1 start 51379968 is beyond EOD, truncated [ 428.494056][T26288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.515695][T26282] loop3: p3 size 100663552 extends beyond EOD, truncated [ 428.540263][T26288] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.318756][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.351940][T26314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9001'. [ 429.434687][T26311] loop3: detected capacity change from 0 to 512 [ 429.484299][T26311] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.9001: Parent and EA inode have the same ino 15 [ 429.507104][T26311] EXT4-fs (loop3): Remounting filesystem read-only [ 429.513690][T26311] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 429.676866][T26322] lo speed is unknown, defaulting to 1000 [ 429.794026][T26322] loop0: detected capacity change from 0 to 512 [ 429.800768][T26322] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.807348][T26322] EXT4-fs: Ignoring removed bh option [ 429.821312][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 429.821325][ T29] audit: type=1400 audit(1750678705.251:930726): avc: denied { read write } for pid=26315 comm="syz.0.9004" name="loop0" dev="devtmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 429.851234][ T29] audit: type=1400 audit(1750678705.251:930727): avc: denied { open } for pid=26315 comm="syz.0.9004" path="/dev/loop0" dev="devtmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 429.870903][T26311] EXT4-fs (loop3): 1 orphan inode deleted [ 429.874622][ T29] audit: type=1400 audit(1750678705.251:930728): avc: denied { ioctl } for pid=26315 comm="syz.0.9004" path="/dev/loop0" dev="devtmpfs" ino=1461 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 429.880723][T26311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.918530][T26322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 429.961985][T26322] EXT4-fs (loop0): 1 truncate cleaned up [ 429.968221][T26322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.012544][ T29] audit: type=1400 audit(1750678705.471:930729): avc: denied { read append } for pid=26315 comm="syz.0.9004" path="/1745/bus/memory.stat" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 430.104141][ T29] audit: type=1326 audit(1750678705.531:930730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.128168][ T29] audit: type=1326 audit(1750678705.531:930731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.151909][ T29] audit: type=1326 audit(1750678705.531:930732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.175495][ T29] audit: type=1326 audit(1750678705.531:930733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.199260][ T29] audit: type=1326 audit(1750678705.531:930734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.223105][ T29] audit: type=1326 audit(1750678705.531:930735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26324 comm="syz.1.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 430.236415][T26319] lo speed is unknown, defaulting to 1000 [ 430.254374][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.460760][T26331] ip6gretap0: entered promiscuous mode [ 430.467359][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.589608][T26335] lo speed is unknown, defaulting to 1000 [ 430.966868][T26336] SELinux: syz.1.9016 (26336) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 431.989678][T26348] lo speed is unknown, defaulting to 1000 [ 432.104450][T26348] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9006'. [ 432.283875][T26350] netlink: 'syz.4.9011': attribute type 3 has an invalid length. [ 432.284592][T26355] random: crng reseeded on system resumption [ 432.555615][T26368] loop3: detected capacity change from 0 to 8192 [ 432.616834][T26372] netlink: 'syz.0.9018': attribute type 1 has an invalid length. [ 432.624643][T26372] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.9018'. [ 432.635091][T26368] loop3: p1 p2 p3 [ 432.647495][T26368] loop3: p1 start 51379968 is beyond EOD, truncated [ 432.663882][T26368] loop3: p3 size 100663552 extends beyond EOD, truncated [ 432.667671][T26372] loop0: detected capacity change from 0 to 8192 [ 433.430313][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9022'. [ 433.471935][T26386] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9023'. [ 433.491083][T26386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9023'. [ 433.513336][T26386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9023'. [ 433.653426][T26392] random: crng reseeded on system resumption [ 433.683242][T26397] netlink: 'syz.0.9025': attribute type 3 has an invalid length. [ 434.047486][T26376] syz.4.9019 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 434.061751][T26376] CPU: 0 UID: 0 PID: 26376 Comm: syz.4.9019 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 434.061776][T26376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.061788][T26376] Call Trace: [ 434.061795][T26376] [ 434.061802][T26376] __dump_stack+0x1d/0x30 [ 434.061884][T26376] dump_stack_lvl+0xe8/0x140 [ 434.061901][T26376] dump_stack+0x15/0x1b [ 434.061916][T26376] dump_header+0x81/0x220 [ 434.061947][T26376] oom_kill_process+0x334/0x3f0 [ 434.062012][T26376] out_of_memory+0x979/0xb80 [ 434.062032][T26376] try_charge_memcg+0x5e6/0x9e0 [ 434.062048][T26376] obj_cgroup_charge_pages+0xa6/0x150 [ 434.062139][T26376] __memcg_kmem_charge_page+0x9f/0x170 [ 434.062229][T26376] __alloc_frozen_pages_noprof+0x188/0x360 [ 434.062251][T26376] alloc_pages_mpol+0xb3/0x250 [ 434.062269][T26376] alloc_pages_noprof+0x90/0x130 [ 434.062307][T26376] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 434.062339][T26376] __kvmalloc_node_noprof+0x30f/0x4e0 [ 434.062366][T26376] ? ip_set_alloc+0x1f/0x30 [ 434.062454][T26376] ? ip_set_alloc+0x1f/0x30 [ 434.062483][T26376] ? __kmalloc_cache_noprof+0x189/0x320 [ 434.062509][T26376] ip_set_alloc+0x1f/0x30 [ 434.062536][T26376] hash_netiface_create+0x282/0x740 [ 434.062586][T26376] ? __pfx_hash_netiface_create+0x10/0x10 [ 434.062627][T26376] ip_set_create+0x3c9/0x960 [ 434.062664][T26376] ? __nla_parse+0x40/0x60 [ 434.062690][T26376] nfnetlink_rcv_msg+0x4c3/0x590 [ 434.062777][T26376] ? selinux_capable+0x1f9/0x270 [ 434.062804][T26376] netlink_rcv_skb+0x120/0x220 [ 434.062836][T26376] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 434.062918][T26376] nfnetlink_rcv+0x16b/0x1690 [ 434.062939][T26376] ? __folio_put+0x11e/0x150 [ 434.062967][T26376] ? bpf_check+0xbe55/0xced0 [ 434.062995][T26376] ? __rcu_read_unlock+0x4f/0x70 [ 434.063090][T26376] ? obj_cgroup_charge_pages+0xf7/0x150 [ 434.063196][T26376] ? __rcu_read_unlock+0x4f/0x70 [ 434.063244][T26376] ? css_rstat_updated+0xcd/0x5b0 [ 434.063273][T26376] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 434.063308][T26376] ? should_fail_ex+0x30/0x280 [ 434.063381][T26376] ? selinux_nlmsg_lookup+0x99/0x890 [ 434.063483][T26376] ? selinux_netlink_send+0x59f/0x5f0 [ 434.063511][T26376] ? __rcu_read_unlock+0x34/0x70 [ 434.063595][T26376] ? __netlink_lookup+0x266/0x2a0 [ 434.063620][T26376] netlink_unicast+0x59e/0x670 [ 434.063649][T26376] netlink_sendmsg+0x58b/0x6b0 [ 434.063667][T26376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.063751][T26376] __sock_sendmsg+0x142/0x180 [ 434.063829][T26376] ____sys_sendmsg+0x31e/0x4e0 [ 434.063858][T26376] ___sys_sendmsg+0x17b/0x1d0 [ 434.063943][T26376] __x64_sys_sendmsg+0xd4/0x160 [ 434.064056][T26376] x64_sys_call+0x2999/0x2fb0 [ 434.064073][T26376] do_syscall_64+0xd2/0x200 [ 434.064089][T26376] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 434.064113][T26376] ? clear_bhb_loop+0x40/0x90 [ 434.064130][T26376] ? clear_bhb_loop+0x40/0x90 [ 434.064150][T26376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.064167][T26376] RIP: 0033:0x7fb63bd8e929 [ 434.064181][T26376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.064198][T26376] RSP: 002b:00007fb63a3f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.064287][T26376] RAX: ffffffffffffffda RBX: 00007fb63bfb5fa0 RCX: 00007fb63bd8e929 [ 434.064342][T26376] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 434.064353][T26376] RBP: 00007fb63be10b39 R08: 0000000000000000 R09: 0000000000000000 [ 434.064383][T26376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.064393][T26376] R13: 0000000000000000 R14: 00007fb63bfb5fa0 R15: 00007ffe1398fd18 [ 434.064408][T26376] [ 434.064417][T26376] memory: usage 307196kB, limit 307200kB, failcnt 3578 [ 434.434344][T26376] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 434.442320][T26376] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 434.449641][T26376] Memory cgroup stats for /syz4: [ 434.450123][T26376] cache 8192 [ 434.458372][T26376] rss 0 [ 434.461155][T26376] shmem 0 [ 434.464077][T26376] mapped_file 397312 [ 434.467953][T26376] dirty 0 [ 434.470987][T26376] writeback 4096 [ 434.474529][T26376] workingset_refault_anon 1431 [ 434.479352][T26376] workingset_refault_file 2081 [ 434.484171][T26376] swap 552960 [ 434.487454][T26376] swapcached 4096 [ 434.491135][T26376] pgpgin 793768 [ 434.494588][T26376] pgpgout 793765 [ 434.498169][T26376] pgfault 717446 [ 434.501794][T26376] pgmajfault 572 [ 434.505372][T26376] inactive_anon 4096 [ 434.509246][T26376] active_anon 0 [ 434.512727][T26376] inactive_file 8192 [ 434.516646][T26376] active_file 0 [ 434.520255][T26376] unevictable 0 [ 434.523733][T26376] hierarchical_memory_limit 314572800 [ 434.529114][T26376] hierarchical_memsw_limit 9223372036854771712 [ 434.535435][T26376] total_cache 8192 [ 434.539169][T26376] total_rss 0 [ 434.542477][T26376] total_shmem 0 [ 434.546171][T26376] total_mapped_file 397312 [ 434.550725][T26376] total_dirty 0 [ 434.554243][T26376] total_writeback 4096 [ 434.558307][T26376] total_workingset_refault_anon 1435 [ 434.563620][T26376] total_workingset_refault_file 2081 [ 434.568967][T26376] total_swap 552960 [ 434.572854][T26376] total_swapcached 4096 [ 434.577020][T26376] total_pgpgin 800777 [ 434.581098][T26376] total_pgpgout 800774 [ 434.585169][T26376] total_pgfault 722035 [ 434.589228][T26376] total_pgmajfault 573 [ 434.593332][T26376] total_inactive_anon 4096 [ 434.597740][T26376] total_active_anon 0 [ 434.601750][T26376] total_inactive_file 8192 [ 434.606162][T26376] total_active_file 0 [ 434.610233][T26376] total_unevictable 0 [ 434.614265][T26376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9019,pid=26375,uid=0 [ 434.629464][T26376] Memory cgroup out of memory: Killed process 26375 (syz.4.9019) total-vm:94140kB, anon-rss:936kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 434.994128][T26427] lo speed is unknown, defaulting to 1000 [ 435.158232][T26427] loop0: detected capacity change from 0 to 512 [ 435.165305][T26427] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.171771][T26427] EXT4-fs: Ignoring removed bh option [ 435.189756][T26427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.205600][T26427] EXT4-fs (loop0): 1 truncate cleaned up [ 435.212008][T26427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.228309][T26433] loop3: detected capacity change from 0 to 512 [ 435.241662][T26433] journal_path: Non-blockdev passed as './bus' [ 435.247893][T26433] EXT4-fs: error: could not find journal device path [ 435.272171][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 435.272186][ T29] audit: type=1326 audit(1750678710.731:930795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.327929][T26435] loop7: detected capacity change from 0 to 2048 [ 435.351973][ T29] audit: type=1326 audit(1750678710.761:930796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.375748][ T29] audit: type=1326 audit(1750678710.761:930797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.399684][ T29] audit: type=1326 audit(1750678710.761:930798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.423625][ T29] audit: type=1326 audit(1750678710.761:930799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.447259][ T29] audit: type=1326 audit(1750678710.761:930800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.471017][ T29] audit: type=1326 audit(1750678710.761:930801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.494740][ T29] audit: type=1326 audit(1750678710.761:930802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.518349][ T29] audit: type=1326 audit(1750678710.761:930803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.542154][ T29] audit: type=1326 audit(1750678710.761:930804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26430 comm="syz.7.9035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 435.655111][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.694455][T26453] random: crng reseeded on system resumption [ 435.866528][T26471] loop7: detected capacity change from 0 to 128 [ 435.907518][T26474] loop0: detected capacity change from 0 to 512 [ 435.914702][T26474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.926521][T26474] EXT4-fs (loop0): 1 truncate cleaned up [ 435.932781][T26474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.157700][T26471] syz.7.9044: attempt to access beyond end of device [ 436.157700][T26471] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 436.171522][T26471] syz.7.9044: attempt to access beyond end of device [ 436.171522][T26471] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 436.185659][T26471] syz.7.9044: attempt to access beyond end of device [ 436.185659][T26471] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 436.199747][T26471] syz.7.9044: attempt to access beyond end of device [ 436.199747][T26471] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 436.216048][T26471] syz.7.9044: attempt to access beyond end of device [ 436.216048][T26471] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 436.250924][T26471] syz.7.9044: attempt to access beyond end of device [ 436.250924][T26471] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 436.272413][T26471] syz.7.9044: attempt to access beyond end of device [ 436.272413][T26471] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 436.364570][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9048'. [ 436.422228][T26487] loop3: detected capacity change from 0 to 8192 [ 436.452579][T26487] loop3: p1 p2 < > p3 p4 < p5 > [ 436.457915][T26487] loop3: partition table partially beyond EOD, truncated [ 436.479263][T26487] loop3: p1 size 100663296 extends beyond EOD, truncated [ 436.490854][T26487] loop3: p2 start 591104 is beyond EOD, truncated [ 436.497330][T26487] loop3: p3 start 33572980 is beyond EOD, truncated [ 436.505407][T26487] loop3: p5 size 100663296 extends beyond EOD, truncated [ 436.524374][T26487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9049'. [ 436.897471][T26498] lo speed is unknown, defaulting to 1000 [ 437.091019][T26498] loop3: detected capacity change from 0 to 512 [ 437.098059][T26498] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.104547][T26498] EXT4-fs: Ignoring removed bh option [ 437.132543][T26498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 437.149837][T26498] EXT4-fs (loop3): 1 truncate cleaned up [ 437.156016][T26498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.246208][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.493007][ T3399] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 437.505347][ T3399] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.526434][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.537403][T26503] fido_id[26503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 437.557571][T26507] loop0: detected capacity change from 0 to 128 [ 437.569869][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9055'. [ 437.578820][T26505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9055'. [ 437.619075][T26511] random: crng reseeded on system resumption [ 437.649837][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9055'. [ 437.731241][T26528] loop7: detected capacity change from 0 to 512 [ 437.739068][T26528] journal_path: Non-blockdev passed as './bus' [ 437.745519][T26528] EXT4-fs: error: could not find journal device path [ 437.783429][T26528] loop7: detected capacity change from 0 to 128 [ 437.882634][T26507] syz.0.9064: attempt to access beyond end of device [ 437.882634][T26507] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 437.896233][T26507] syz.0.9064: attempt to access beyond end of device [ 437.896233][T26507] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 437.910196][T26507] syz.0.9064: attempt to access beyond end of device [ 437.910196][T26507] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 438.512237][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9069'. [ 438.956449][T26558] lo speed is unknown, defaulting to 1000 [ 439.558825][T26579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9074'. [ 439.605754][ T1047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1047 comm=kworker/1:2 [ 439.619152][T26580] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 439.717399][T26583] netlink: 'syz.0.9075': attribute type 29 has an invalid length. [ 439.725289][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9075'. [ 439.757874][T26583] loop0: detected capacity change from 0 to 8192 [ 439.833634][T26585] loop7: detected capacity change from 0 to 512 [ 439.856385][T26585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.869067][T26585] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.426676][T26598] lo speed is unknown, defaulting to 1000 [ 440.749604][T26599] lo speed is unknown, defaulting to 1000 [ 441.222918][T26602] loop0: detected capacity change from 0 to 1024 [ 441.325255][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.337270][T26602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.410314][T26602] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9078: Allocating blocks 449-513 which overlap fs metadata [ 441.451846][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 441.451861][ T29] audit: type=1326 audit(1750678716.911:931013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.462263][T26602] 9pnet_fd: Insufficient options for proto=fd [ 441.534134][ T29] audit: type=1400 audit(1750678716.921:931014): avc: denied { mounton } for pid=26601 comm="syz.0.9078" path="/1759/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.557880][ T29] audit: type=1326 audit(1750678716.951:931015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.581544][ T29] audit: type=1326 audit(1750678716.961:931016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.605593][ T29] audit: type=1326 audit(1750678716.961:931017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.629271][ T29] audit: type=1326 audit(1750678716.961:931018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.652901][ T29] audit: type=1326 audit(1750678716.961:931019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.676765][ T29] audit: type=1326 audit(1750678716.961:931020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.700781][ T29] audit: type=1326 audit(1750678716.961:931021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.724575][ T29] audit: type=1326 audit(1750678716.961:931022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26608 comm="syz.1.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 441.776286][T26602] SELinux: syz.0.9078 (26602) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 441.791892][T26601] EXT4-fs (loop0): pa ffff888106a549a0: logic 48, phys. 177, len 21 [ 441.799923][T26601] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 441.842125][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.851816][T26617] loop3: detected capacity change from 0 to 128 [ 442.004413][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9084'. [ 442.042718][T26629] loop0: detected capacity change from 0 to 256 [ 442.050043][T26629] msdos: Bad value for 'tz' [ 442.079812][T26629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9086'. [ 442.088843][T26629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9086'. [ 442.131856][T26629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9086'. [ 442.184822][T26617] bio_check_eod: 1752 callbacks suppressed [ 442.184839][T26617] syz.3.9083: attempt to access beyond end of device [ 442.184839][T26617] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 442.204763][T26617] syz.3.9083: attempt to access beyond end of device [ 442.204763][T26617] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 442.280993][T26617] syz.3.9083: attempt to access beyond end of device [ 442.280993][T26617] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 442.313073][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9089'. [ 442.416129][T26639] lo speed is unknown, defaulting to 1000 [ 442.716302][T26643] loop0: detected capacity change from 0 to 512 [ 443.005242][T26646] lo speed is unknown, defaulting to 1000 [ 443.245103][T26643] journal_path: Non-blockdev passed as './bus' [ 443.251355][T26643] EXT4-fs: error: could not find journal device path [ 443.275361][T26643] loop0: detected capacity change from 0 to 128 [ 443.849560][T26675] siw: device registration error -23 [ 444.202418][T26678] loop7: detected capacity change from 0 to 512 [ 444.232234][T26678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.305412][T26678] EXT4-fs error (device loop7): ext4_quota_enable:7120: comm syz.7.9098: Bad quota inum: 29696, type: 1 [ 444.322749][T26678] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 444.338802][T26678] EXT4-fs (loop7): mount failed [ 444.377504][T26686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26686 comm=syz.4.9099 [ 444.736060][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9103'. [ 444.744998][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9103'. [ 444.829460][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9103'. [ 444.835168][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9102'. [ 444.863990][T26707] loop0: detected capacity change from 0 to 512 [ 444.900770][T26711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26711 comm=syz.1.9118 [ 444.916735][T26714] loop7: detected capacity change from 0 to 512 [ 444.939872][T26714] EXT4-fs (loop7): too many log groups per flexible block group [ 444.947668][T26714] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 444.965284][T26707] EXT4-fs (loop0): 1 orphan inode deleted [ 444.983256][T22830] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:56: Failed to release dquot type 1 [ 445.005639][T26707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.018359][T26714] EXT4-fs (loop7): mount failed [ 445.044828][T26714] 9pnet_fd: Insufficient options for proto=fd [ 445.069632][T26707] ext4 filesystem being mounted at /1764/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.215083][T26724] netlink: 'syz.3.9120': attribute type 1 has an invalid length. [ 445.704675][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.867277][T26745] netlink: 'syz.4.9113': attribute type 29 has an invalid length. [ 445.875220][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9113'. [ 446.541554][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 446.541568][ T29] audit: type=1400 audit(1750678722.001:931320): avc: denied { getopt } for pid=26759 comm="syz.1.9117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 447.293090][T26774] lo speed is unknown, defaulting to 1000 [ 447.504856][ T29] audit: type=1400 audit(1750678722.931:931321): avc: denied { create } for pid=26767 comm="syz.0.9132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.525078][ T29] audit: type=1400 audit(1750678722.941:931322): avc: denied { setopt } for pid=26767 comm="syz.0.9132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.603465][T26776] lo speed is unknown, defaulting to 1000 [ 447.646539][T26782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26782 comm=syz.3.9123 [ 447.650247][T26783] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 447.675970][ T29] audit: type=1326 audit(1750678723.131:931323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.733238][ T29] audit: type=1326 audit(1750678723.161:931324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.757017][ T29] audit: type=1326 audit(1750678723.161:931325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.780811][ T29] audit: type=1326 audit(1750678723.161:931326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.804666][ T29] audit: type=1326 audit(1750678723.161:931327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.828338][ T29] audit: type=1326 audit(1750678723.161:931328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.854921][ T29] audit: type=1326 audit(1750678723.161:931329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 447.893193][T26782] loop3: detected capacity change from 0 to 8192 [ 447.947092][T26782] vfat: Unknown parameter ';hg1ˉw, priority 10 [ 451.236249][T26852] loop3: detected capacity change from 0 to 512 [ 451.243031][T26852] EXT4-fs: Ignoring removed orlov option [ 451.262887][T26852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.272533][T26852] EXT4-fs (loop3): orphan cleanup on readonly fs [ 451.286850][T26852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9145: bg 0: block 248: padding at end of block bitmap is not set [ 451.304269][T26852] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9145: Failed to acquire dquot type 1 [ 451.331968][T26852] EXT4-fs (loop3): 1 truncate cleaned up [ 451.366002][T26863] ./file0: Can't open blockdev [ 451.447390][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9147'. [ 451.698748][T26865] lo speed is unknown, defaulting to 1000 [ 451.753272][T26865] loop7: detected capacity change from 0 to 512 [ 451.759823][T26865] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.766422][T26865] EXT4-fs: Ignoring removed bh option [ 451.772301][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 451.772314][ T29] audit: type=1400 audit(1750678726.841:931642): avc: denied { bind } for pid=26857 comm="syz.0.9147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 451.798522][ T29] audit: type=1400 audit(1750678726.841:931643): avc: denied { name_bind } for pid=26857 comm="syz.0.9147" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 451.820534][ T29] audit: type=1400 audit(1750678726.841:931644): avc: denied { node_bind } for pid=26857 comm="syz.0.9147" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 451.842733][T26865] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 451.855868][T26865] EXT4-fs (loop7): 1 truncate cleaned up [ 451.862065][T26865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.952999][T26852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.969825][ T29] audit: type=1400 audit(1750678727.421:931645): avc: denied { remount } for pid=26850 comm="syz.3.9145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 451.990208][T26852] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 452.001477][T26852] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 452.010024][T26852] ext4 filesystem being remounted at /1844/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.037963][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.073168][T26873] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 452.139711][ T29] audit: type=1326 audit(1750678727.591:931646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.163840][ T29] audit: type=1326 audit(1750678727.591:931647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.236120][ T29] audit: type=1326 audit(1750678727.651:931648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.259937][ T29] audit: type=1326 audit(1750678727.651:931649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.283746][ T29] audit: type=1326 audit(1750678727.651:931650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.307392][ T29] audit: type=1326 audit(1750678727.661:931651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.1.9151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 452.362823][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.475489][T26888] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9152'. [ 452.526876][T26890] x_tables: duplicate underflow at hook 2 [ 452.955325][T26894] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9156'. [ 453.377771][T26903] lo speed is unknown, defaulting to 1000 [ 453.486727][T26905] loop7: detected capacity change from 0 to 512 [ 453.515762][T26905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.579252][T26905] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 453.608683][T26905] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 453.624000][T26905] EXT4-fs (loop7): 1 truncate cleaned up [ 453.630233][T26905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.688774][T26909] tipc: Cannot configure node identity twice [ 453.714130][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.799666][T26912] vcan0: entered allmulticast mode [ 453.805401][T26912] vcan0: left allmulticast mode [ 453.825235][T26912] netlink: 'syz.7.9160': attribute type 1 has an invalid length. [ 453.841155][T26912] loop7: detected capacity change from 0 to 512 [ 453.856388][T26912] EXT4-fs: Ignoring removed bh option [ 453.862488][T26912] EXT4-fs: Ignoring removed bh option [ 453.874279][T26912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.883294][T26912] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 453.894264][T26912] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 453.903964][T26912] EXT4-fs (loop7): orphan cleanup on readonly fs [ 453.910471][T26912] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 453.925941][T26912] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 453.932780][T26912] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.9160: Invalid block bitmap block 0 in block_group 0 [ 453.952176][T26912] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 453.961234][T26912] EXT4-fs (loop7): 1 orphan inode deleted [ 453.967410][T26912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.026965][T26912] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.037221][T26919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26919 comm=syz.1.9162 [ 454.052835][T26917] loop3: detected capacity change from 0 to 512 [ 454.219974][T26917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.623262][T26927] ./file0: Can't open blockdev [ 454.628284][T26917] ext4 filesystem being mounted at /1847/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 454.647312][T26930] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9164'. [ 454.682636][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.712041][T26930] SELinux: syz.7.9164 (26930) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 454.751036][T26940] futex_wake_op: syz.1.9167 tries to shift op by -1; fix this program [ 454.766048][T26942] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 455.052485][T26953] lo speed is unknown, defaulting to 1000 [ 455.351290][T26950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 455.814684][T26967] lo speed is unknown, defaulting to 1000 [ 455.999223][T26966] lo speed is unknown, defaulting to 1000 [ 456.132859][T26971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9176'. [ 456.156988][T26974] loop7: detected capacity change from 0 to 512 [ 456.180139][T26974] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 456.222503][T26974] EXT4-fs (loop7): 1 truncate cleaned up [ 456.228762][T26974] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.352798][T26979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9178'. [ 456.455410][T26979] SELinux: syz.0.9178 (26979) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 456.760720][ T1047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1047 comm=kworker/1:2 [ 456.774608][T26988] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 456.892031][T26996] netlink: 'syz.4.9184': attribute type 39 has an invalid length. [ 456.896984][T26998] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.900465][T26996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9184'. [ 456.922835][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 456.922849][ T29] audit: type=1400 audit(1750678732.381:931810): avc: denied { execute_no_trans } for pid=26995 comm="syz.4.9184" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 457.009891][T27003] pim6reg: entered allmulticast mode [ 457.016283][T27003] pim6reg: left allmulticast mode [ 457.057173][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.421190][ T29] audit: type=1326 audit(1750678732.881:931811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.445179][ T29] audit: type=1326 audit(1750678732.881:931812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.469425][ T29] audit: type=1326 audit(1750678732.921:931813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.521088][T27019] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9190'. [ 457.544639][ T29] audit: type=1326 audit(1750678733.001:931814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.568746][ T29] audit: type=1326 audit(1750678733.001:931815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.592954][ T29] audit: type=1326 audit(1750678733.001:931816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.593348][T27019] SELinux: syz.0.9190 (27019) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 457.616970][ T29] audit: type=1326 audit(1750678733.081:931817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.654398][ T29] audit: type=1326 audit(1750678733.081:931818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.678837][ T29] audit: type=1326 audit(1750678733.131:931819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27013 comm="syz.1.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9efd7e929 code=0x7ffc0000 [ 457.688510][T27023] sd 0:0:1:0: device reset [ 457.938636][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9195'. [ 458.192163][T27061] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9203'. [ 458.204228][T27061] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9203'. [ 458.236174][T27061] gretap0: entered promiscuous mode [ 458.255406][T27068] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9203'. [ 458.330109][T27068] 0XD: renamed from gretap0 [ 458.338825][T27068] 0XD: left promiscuous mode [ 458.343795][T27068] 0XD: entered allmulticast mode [ 458.362171][T27068] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 458.852768][T27090] lo speed is unknown, defaulting to 1000 [ 459.648655][T27099] netlink: 'syz.1.9213': attribute type 21 has an invalid length. [ 459.664083][T27099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9213'. [ 459.680797][T27093] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 459.774633][T27105] loop7: detected capacity change from 0 to 1024 [ 459.795140][T27099] lo speed is unknown, defaulting to 1000 [ 459.815272][T27105] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 459.861489][T27105] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.9215: Invalid block bitmap block 0 in block_group 0 [ 459.901327][T27105] EXT4-fs (loop7): Remounting filesystem read-only [ 459.915334][T27105] EXT4-fs (loop7): 1 orphan inode deleted [ 459.944823][T27105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.973815][T27105] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 460.000600][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.585330][T27124] loop7: detected capacity change from 0 to 1024 [ 460.614353][T27124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.614857][T27124] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.707854][T27130] lo speed is unknown, defaulting to 1000 [ 460.802724][T27136] netlink: 'syz.7.9225': attribute type 13 has an invalid length. [ 460.952310][T27143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9226'. [ 461.019856][T27151] tmpfs: Bad value for 'mpol' [ 461.114783][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9227'. [ 461.229927][T27167] IPVS: length: 94 != 8 [ 461.266416][T27168] netlink: 'syz.3.9234': attribute type 13 has an invalid length. [ 461.269914][T27168] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.269977][T27168] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.270001][T27168] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.270027][T27168] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.331951][T27169] GUP no longer grows the stack in syz.1.9235 (27169): 200000004000-200000008000 (200000002000) [ 461.331975][T27169] CPU: 0 UID: 0 PID: 27169 Comm: syz.1.9235 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 461.332044][T27169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.332057][T27169] Call Trace: [ 461.332063][T27169] [ 461.332070][T27169] __dump_stack+0x1d/0x30 [ 461.332089][T27169] dump_stack_lvl+0xe8/0x140 [ 461.332166][T27169] dump_stack+0x15/0x1b [ 461.332184][T27169] __get_user_pages+0x199d/0x1fb0 [ 461.332212][T27169] ? __rcu_read_unlock+0x4f/0x70 [ 461.332314][T27169] get_user_pages_remote+0x1dc/0x7a0 [ 461.332342][T27169] __access_remote_vm+0x156/0x560 [ 461.332370][T27169] access_remote_vm+0x32/0x40 [ 461.332392][T27169] proc_pid_cmdline_read+0x30f/0x6a0 [ 461.332450][T27169] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 461.332484][T27169] vfs_readv+0x3f8/0x690 [ 461.332515][T27169] ? restore_fpregs_from_fpstate+0x61/0x120 [ 461.332640][T27169] __x64_sys_preadv+0xfd/0x1c0 [ 461.332662][T27169] x64_sys_call+0x1503/0x2fb0 [ 461.332681][T27169] do_syscall_64+0xd2/0x200 [ 461.332696][T27169] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.332743][T27169] ? clear_bhb_loop+0x40/0x90 [ 461.332761][T27169] ? clear_bhb_loop+0x40/0x90 [ 461.332779][T27169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.332798][T27169] RIP: 0033:0x7fb9efd7e929 [ 461.332811][T27169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.332904][T27169] RSP: 002b:00007fb9ee3c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 461.332924][T27169] RAX: ffffffffffffffda RBX: 00007fb9effa6080 RCX: 00007fb9efd7e929 [ 461.332935][T27169] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000c [ 461.332945][T27169] RBP: 00007fb9efe00b39 R08: 0000000000000200 R09: 0000000000000000 [ 461.332958][T27169] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 461.332971][T27169] R13: 0000000000000000 R14: 00007fb9effa6080 R15: 00007fff8becf268 [ 461.332991][T27169] [ 461.583050][T27175] vhci_hcd: invalid port number 65 [ 461.588251][T27175] vhci_hcd: invalid port number 65 [ 461.592842][T27172] xt_cgroup: xt_cgroup: no path or classid specified [ 461.969017][T27191] lo speed is unknown, defaulting to 1000 [ 462.119262][T27191] loop7: detected capacity change from 0 to 512 [ 462.148226][T27191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 462.160895][T27191] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.726516][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 462.726529][ T29] audit: type=1326 audit(1750678738.181:932173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.768639][ T29] audit: type=1326 audit(1750678738.221:932174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.792768][ T29] audit: type=1400 audit(1750678738.221:932175): avc: denied { create } for pid=27198 comm="syz.0.9245" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 462.814738][ T29] audit: type=1400 audit(1750678738.221:932176): avc: denied { associate } for pid=27198 comm="syz.0.9245" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 462.837748][ T29] audit: type=1400 audit(1750678738.221:932177): avc: denied { write open } for pid=27198 comm="syz.0.9245" path="/1789/file0" dev="tmpfs" ino=9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 462.862436][ T29] audit: type=1326 audit(1750678738.221:932178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.886280][ T29] audit: type=1326 audit(1750678738.221:932179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.910166][ T29] audit: type=1326 audit(1750678738.221:932180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.933898][ T29] audit: type=1326 audit(1750678738.221:932181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 462.957803][ T29] audit: type=1326 audit(1750678738.221:932182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.0.9245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 463.116527][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9246'. [ 463.185128][T27212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9249'. [ 463.294404][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 463.385662][T27218] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9251'. [ 463.431518][T27221] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 463.614206][T27228] lo speed is unknown, defaulting to 1000 [ 463.646150][T27232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.655005][T27232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.210439][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9260'. [ 464.222445][T27244] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 464.345834][T27250] bond4: entered promiscuous mode [ 464.351058][T27250] bond4: entered allmulticast mode [ 464.356522][T27250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.365116][T27250] bond4 (unregistering): Released all slaves [ 464.478082][T27255] SELinux: ebitmap: truncated map [ 464.483931][T27255] SELinux: failed to load policy [ 464.494195][T27255] smc: net device bond0 applied user defined pnetid SYZ2 [ 465.597581][T27281] loop7: detected capacity change from 0 to 2048 [ 465.617509][T27283] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 465.617509][T27283] program syz.3.9272 not setting count and/or reply_len properly [ 465.665888][T19216] loop7: p1 < > p4 [ 465.678187][T19216] loop7: p4 size 8388608 extends beyond EOD, truncated [ 465.711048][T27281] loop7: p1 < > p4 [ 465.716223][T27281] loop7: p4 size 8388608 extends beyond EOD, truncated [ 465.818777][T20447] udevd[20447]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 465.833036][T19216] udevd[19216]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 465.888326][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9275'. [ 466.134501][T27304] siw: device registration error -23 [ 466.404453][T27312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9280'. [ 467.211561][T27320] lo speed is unknown, defaulting to 1000 [ 467.619537][T27327] loop7: detected capacity change from 0 to 16384 [ 467.629974][T27324] netlink: 'syz.1.9283': attribute type 10 has an invalid length. [ 467.637943][T27324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9283'. [ 467.665378][T27330] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.675263][T27330] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.733341][T27330] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.743223][T27330] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.772865][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 467.772881][ T29] audit: type=1400 audit(1750678743.231:932671): avc: denied { module_load } for pid=27333 comm="syz.1.9287" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 467.805061][T27330] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.815159][T27330] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.850404][T27340] tipc: New replicast peer: 255.255.255.255 [ 467.856706][T27340] tipc: Enabled bearer , priority 10 [ 467.883450][T27330] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.893253][T27330] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.944749][T27347] 9pnet_fd: p9_fd_create_tcp (27347): problem connecting socket to 127.0.0.1 [ 467.947416][T27330] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.962185][T27330] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.973541][T27330] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.981879][T27330] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.993223][T27330] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.001641][T27330] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.013016][T27330] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.021288][T27330] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.039300][ T29] audit: type=1400 audit(1750678743.491:932672): avc: denied { ioctl } for pid=27344 comm="syz.4.9290" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80594 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 468.246059][T27358] SELinux: ebitmap: truncated map [ 468.251882][T27358] SELinux: failed to load policy [ 468.520961][ T29] audit: type=1326 audit(1750678743.961:932673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.544903][ T29] audit: type=1326 audit(1750678743.961:932674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.568647][ T29] audit: type=1326 audit(1750678743.971:932675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.592372][ T29] audit: type=1326 audit(1750678743.971:932676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.616025][ T29] audit: type=1326 audit(1750678743.971:932677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.639749][ T29] audit: type=1326 audit(1750678743.971:932678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.663329][ T29] audit: type=1326 audit(1750678743.971:932679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.687125][ T29] audit: type=1326 audit(1750678743.971:932680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27365 comm="syz.3.9296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 468.767732][T27370] netlink: 'syz.4.9298': attribute type 10 has an invalid length. [ 468.775711][T27370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9298'. [ 468.861356][ T2959] tipc: Node number set to 1 [ 468.967724][T27388] tmpfs: Bad value for 'mpol' [ 468.974894][T27388] $H: entered promiscuous mode [ 468.980072][T27388] !: entered promiscuous mode [ 469.042530][T27393] $H: (slave 0!): Releasing backup interface [ 469.050690][T27393] !: left promiscuous mode [ 469.691458][T27397] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9307'. [ 469.703467][T27397] netlink: 9 bytes leftover after parsing attributes in process `syz.7.9307'. [ 469.713261][T27397] gretap0: entered promiscuous mode [ 469.738187][T27397] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9307'. [ 469.748518][T27397] 0XD: renamed from gretap0 [ 469.756144][T27397] 0XD: left promiscuous mode [ 469.761304][T27397] 0XD: entered allmulticast mode [ 469.767958][T27397] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 469.784046][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9309'. [ 469.787038][T27406] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.810792][T27406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.819548][T27406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.999270][T27418] loop7: detected capacity change from 0 to 512 [ 470.010290][T27418] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 470.015018][T27420] program syz.1.9324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.031080][T27418] EXT4-fs (loop7): 1 truncate cleaned up [ 470.038067][T27418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.053384][T27418] netlink: 'syz.7.9314': attribute type 10 has an invalid length. [ 470.061254][T27418] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9314'. [ 470.088301][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.105930][T27425] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9315'. [ 470.167750][T27425] SELinux: syz.7.9315 (27425) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 470.776545][T27451] futex_wake_op: syz.0.9322 tries to shift op by -1; fix this program [ 471.059705][T27455] lo speed is unknown, defaulting to 1000 [ 471.403322][T27457] loop7: detected capacity change from 0 to 512 [ 471.418866][T27457] EXT4-fs (loop7): orphan cleanup on readonly fs [ 471.425393][T27457] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 471.433914][T27457] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 471.448771][T27457] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.9325: attempt to clear invalid blocks 2 len 1 [ 471.462188][T27457] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9325: invalid indirect mapped block 1819239214 (level 0) [ 471.476794][T27457] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.9325: invalid indirect mapped block 1819239214 (level 1) [ 471.491769][T27457] EXT4-fs (loop7): 1 truncate cleaned up [ 471.497902][T27457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.530251][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.597686][T27465] __nla_validate_parse: 1 callbacks suppressed [ 471.597702][T27465] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9327'. [ 471.725043][T27466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9326'. [ 471.799509][T27468] vhci_hcd: invalid port number 65 [ 471.804776][T27468] vhci_hcd: invalid port number 65 [ 471.835787][T27465] SELinux: syz.7.9327 (27465) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 471.986021][T27473] loop7: detected capacity change from 0 to 256 [ 472.569703][T27486] lo speed is unknown, defaulting to 1000 [ 473.286291][T27483] program syz.3.9335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.311834][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 473.311846][ T29] audit: type=1400 audit(1750678748.771:932901): avc: denied { shutdown } for pid=27474 comm="syz.0.9333" lport=57022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 473.771328][T27488] rdma_rxe: rxe_newlink: failed to add lo [ 474.152854][T27501] SELinux: security_context_str_to_sid () failed with errno=-22 [ 474.171518][ T29] audit: type=1326 audit(1750678749.631:932902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.199030][ T29] audit: type=1326 audit(1750678749.631:932903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.222836][ T29] audit: type=1326 audit(1750678749.661:932904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.246597][ T29] audit: type=1326 audit(1750678749.661:932905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.270249][ T29] audit: type=1326 audit(1750678749.661:932906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.294137][ T29] audit: type=1326 audit(1750678749.661:932907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.317936][ T29] audit: type=1326 audit(1750678749.661:932908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.341728][ T29] audit: type=1326 audit(1750678749.661:932909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.341956][T27505] loop0: detected capacity change from 0 to 128 [ 474.365613][ T29] audit: type=1326 audit(1750678749.661:932910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.0.9339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea6a1fe929 code=0x7ffc0000 [ 474.407027][T27505] cgroup2: Unknown parameter 'cpu' [ 474.744955][T27510] loop7: detected capacity change from 0 to 8192 [ 474.801102][T19216] loop7: p1 p2 p3 [ 474.804975][T19216] loop7: p1 start 51379968 is beyond EOD, truncated [ 474.812488][T19216] loop7: p3 size 100663552 extends beyond EOD, truncated [ 474.822042][T27510] loop7: p1 p2 p3 [ 474.825838][T27510] loop7: p1 start 51379968 is beyond EOD, truncated [ 474.833190][T27510] loop7: p3 size 100663552 extends beyond EOD, truncated [ 474.927012][T20447] udevd[20447]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 474.937443][T19216] udevd[19216]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 474.971243][T19216] udevd[19216]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 475.000327][T19216] udevd[19216]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 475.034275][T27523] loop0: detected capacity change from 0 to 1024 [ 475.037461][T27523] EXT4-fs: dax option not supported [ 475.209868][T27531] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 475.273871][T27533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9349'. [ 475.460705][T27540] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9350'. [ 475.470384][T27540] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9350'. [ 475.470688][T27540] gretap0: entered promiscuous mode [ 475.497428][T27540] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9350'. [ 475.497490][T27540] 0XD: renamed from gretap0 [ 475.499228][T27540] 0XD: left promiscuous mode [ 475.516455][T27540] 0XD: entered allmulticast mode [ 475.517262][T27540] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 475.787564][T27545] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9352'. [ 475.793048][T27543] 9pnet_fd: p9_fd_create_tcp (27543): problem connecting socket to 127.0.0.1 [ 475.827539][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9354'. [ 475.839358][T27549] netlink: 'syz.4.9354': attribute type 10 has an invalid length. [ 475.847434][T27549] netlink: 'syz.4.9354': attribute type 10 has an invalid length. [ 475.855463][T27549] netlink: 'syz.4.9354': attribute type 10 has an invalid length. [ 475.860649][T27545] SELinux: syz.7.9352 (27545) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 475.917172][T27552] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 476.088448][T27562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27562 comm=syz.3.9358 [ 476.103992][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9358'. [ 476.185934][T27567] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9360'. [ 476.767543][T27590] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9366'. [ 476.829643][T27590] SELinux: syz.1.9366 (27590) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 476.884378][T27600] loop7: detected capacity change from 0 to 512 [ 476.896642][T27600] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 476.907558][T27600] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.9368: bad orphan inode 34561 [ 476.918726][T27600] EXT4-fs (loop7): Remounting filesystem read-only [ 476.926412][T27600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.948320][T27600] syzkaller1: entered promiscuous mode [ 476.954233][T27600] syzkaller1: entered allmulticast mode [ 477.020194][T23150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.068464][T27608] loop7: detected capacity change from 0 to 128 [ 477.075575][T27608] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 477.092647][T27608] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 477.752450][T27628] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 477.752450][T27628] program syz.1.9374 not setting count and/or reply_len properly [ 477.824982][T27633] SELinux: failed to load policy [ 477.866426][T27638] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9379'. [ 478.665723][T27659] lo speed is unknown, defaulting to 1000 [ 479.113592][T27663] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.123433][T27663] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.578144][T27666] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.943829][T27670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.959144][T27670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.001394][T27663] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.011396][T27663] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.354539][T27682] atomic_op ffff888102a46128 conn xmit_atomic 0000000000000000 [ 480.397219][T27663] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.407128][T27663] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.483250][T27663] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.493118][T27663] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.555192][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 480.555208][ T29] audit: type=1400 audit(1750678755.821:933441): avc: denied { getopt } for pid=27681 comm="syz.1.9387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 480.608831][T27663] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.617312][T27663] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.633770][T27663] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.642036][T27663] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.656174][T27708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9399'. [ 480.668661][ T29] audit: type=1326 audit(1750678756.121:933442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.4.9388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63bd8e929 code=0x0 [ 480.676136][T27663] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.700036][T27663] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.712611][T27663] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.720894][T27663] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.510909][ T29] audit: type=1326 audit(1750678756.961:933443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.534748][ T29] audit: type=1326 audit(1750678756.961:933444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.558451][ T29] audit: type=1326 audit(1750678756.961:933445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.582218][ T29] audit: type=1326 audit(1750678756.961:933446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.606001][ T29] audit: type=1326 audit(1750678756.961:933447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.629889][ T29] audit: type=1326 audit(1750678756.961:933448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.653622][ T29] audit: type=1326 audit(1750678756.961:933449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.666025][T27828] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 481.666025][T27828] program syz.7.9392 not setting count and/or reply_len properly [ 481.677326][ T29] audit: type=1326 audit(1750678756.961:933450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27826 comm="syz.7.9392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb9fe0e929 code=0x7ffc0000 [ 481.927454][T27834] lo speed is unknown, defaulting to 1000 [ 482.134497][T27836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=27836 comm=syz.1.9397 [ 482.216470][T27839] netlink: 4120 bytes leftover after parsing attributes in process `syz.7.9396'. [ 482.268456][T27844] random: crng reseeded on system resumption [ 482.519297][T27856] xt_hashlimit: max too large, truncated to 1048576 [ 482.529585][T27858] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.543210][T27858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.554450][T27858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.340535][T27868] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9405'. [ 483.362992][ T2996] udevd[2996]: worker [20447] terminated by signal 33 (Unknown signal 33) [ 483.381246][T27868] netlink: 'syz.0.9405': attribute type 5 has an invalid length. [ 483.389226][T27868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9405'. [ 483.508939][T27883] sock: sock_timestamping_bind_phc: sock not bind to device [ 483.525982][T27879] SELinux: security_context_str_to_sid () failed with errno=-22 [ 483.580969][T27886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.589476][T27886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.634220][T27890] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9412'. [ 483.643971][T27890] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9412'. [ 483.653245][T27890] gretap0: entered promiscuous mode [ 483.659379][T27890] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9412'. [ 483.668326][T27890] 0XD: renamed from gretap0 [ 483.675667][T27890] 0XD: left promiscuous mode [ 483.680584][T27890] 0XD: entered allmulticast mode [ 483.687017][T27890] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 483.893442][T27897] lo speed is unknown, defaulting to 1000 [ 484.244887][ T1047] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 484.258724][ T1047] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.277019][T27902] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000004 [ 484.337281][T27900] netlink: 300 bytes leftover after parsing attributes in process `syz.7.9415'. [ 484.409010][T27902] netlink: zone id is out of range [ 484.414171][T27902] netlink: zone id is out of range [ 484.419286][T27902] netlink: zone id is out of range [ 484.583304][T27909] netlink: 'syz.1.9420': attribute type 4 has an invalid length. [ 484.602018][T27909] 9pnet_fd: Insufficient options for proto=fd [ 484.705851][T27920] SELinux: security_context_str_to_sid () failed with errno=-22 [ 484.740068][T27923] netlink: 'syz.1.9423': attribute type 10 has an invalid length. [ 485.085808][T27942] $H: (slave dummy0): Releasing backup interface [ 485.093005][T27942] dummy0: left promiscuous mode [ 485.105569][T27942] bridge_slave_0: left promiscuous mode [ 485.111498][T27942] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.121455][T27942] bridge_slave_1: left allmulticast mode [ 485.127192][T27942] bridge_slave_1: left promiscuous mode [ 485.133167][T27942] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.144127][T27942] $H: (slave bond_slave_0): Releasing backup interface [ 485.151653][T27942] bond_slave_0: left promiscuous mode [ 485.164933][T27942] $H: (slave bond_slave_1): Releasing backup interface [ 485.180095][T27942] bond_slave_1: left promiscuous mode [ 485.402353][T27950] lo speed is unknown, defaulting to 1000 [ 485.631283][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 485.631296][ T29] audit: type=1326 audit(1750678761.081:933628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.661396][ T29] audit: type=1326 audit(1750678761.091:933629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.710235][ T29] audit: type=1326 audit(1750678761.161:933630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.734092][ T29] audit: type=1326 audit(1750678761.161:933631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.757772][ T29] audit: type=1326 audit(1750678761.161:933632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.781747][ T29] audit: type=1326 audit(1750678761.161:933633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.805669][ T29] audit: type=1326 audit(1750678761.161:933634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.829369][ T29] audit: type=1326 audit(1750678761.161:933635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.853028][ T29] audit: type=1326 audit(1750678761.161:933636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.876769][ T29] audit: type=1326 audit(1750678761.161:933637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27951 comm="syz.3.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879251e929 code=0x7ffc0000 [ 485.909242][T27956] cgroup2: Unknown parameter 'cpu' [ 485.911134][T27959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9430'. [ 485.928620][T27960] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.216508][T27973] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 486.242648][T27975] netlink: 2 bytes leftover after parsing attributes in process `syz.7.9435'. [ 486.251725][ T2959] ================================================================== [ 486.259879][ T2959] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 486.266881][ T2959] [ 486.269197][ T2959] read-write to 0xffff888237d29d24 of 4 bytes by task 1047 on cpu 1: [ 486.277247][ T2959] wq_worker_running+0x95/0x120 [ 486.282105][ T2959] synchronize_rcu_expedited+0x611/0x790 [ 486.287754][ T2959] unregister_netdevice_many_notify+0x7cb/0x1690 [ 486.294061][ T2959] unregister_netdevice_queue+0x1f5/0x220 [ 486.299762][ T2959] ser_release+0x123/0x170 [ 486.304159][ T2959] process_scheduled_works+0x4ce/0x9d0 [ 486.309686][ T2959] worker_thread+0x582/0x770 [ 486.314282][ T2959] kthread+0x486/0x510 [ 486.318327][ T2959] ret_from_fork+0xda/0x150 [ 486.322808][ T2959] ret_from_fork_asm+0x1a/0x30 [ 486.327561][ T2959] [ 486.329871][ T2959] read to 0xffff888237d29d24 of 4 bytes by task 2959 on cpu 0: [ 486.337388][ T2959] kick_pool+0x49/0x2d0 [ 486.341517][ T2959] __queue_work+0x8d6/0xb60 [ 486.345993][ T2959] queue_work_on+0xd1/0x160 [ 486.350469][ T2959] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 486.356343][ T2959] wg_packet_encrypt_worker+0x9e1/0xb80 [ 486.361870][ T2959] process_scheduled_works+0x4ce/0x9d0 [ 486.367309][ T2959] worker_thread+0x582/0x770 [ 486.371880][ T2959] kthread+0x486/0x510 [ 486.375925][ T2959] ret_from_fork+0xda/0x150 [ 486.380404][ T2959] ret_from_fork_asm+0x1a/0x30 [ 486.385155][ T2959] [ 486.387454][ T2959] value changed: 0x00000000 -> 0x00000001 [ 486.393149][ T2959] [ 486.395446][ T2959] Reported by Kernel Concurrency Sanitizer on: [ 486.401660][ T2959] CPU: 0 UID: 0 PID: 2959 Comm: kworker/0:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 486.412401][ T2959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.422437][ T2959] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 486.429032][ T2959] ==================================================================