last executing test programs: 1m0.342817666s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m0.26483112s ago: executing program 4 (id=9): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r3, 0x0, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 59.978865142s ago: executing program 1 (id=14): futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x22, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query, @alu={0x4, 0x0, 0x9, 0x4, 0x9, 0x1, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x7f, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x3, 0x5}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x61, 0x2e, 0x5f]}}, 0x0, 0x42, 0x0, 0x1}, 0xffffffffffffff8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000403f00000a0800002020782500000000002020207b1a00fe000000007b0a0000000000000701b092f8ffffffb702000008000000b70300000a000000a500feff06000000d30d5d73c16b289c2f534e16d6cf0244c7bc8eda91ef2268877518a499202b655f5cc7beb92047f36c51adfbfce62ff62119587a0059a95d94b239339ce42e5005"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400000005000000"], 0x18, 0x4855}, 0x4008850) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x5, 0x0, 0xfc, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x112, 0x10000000010000, 0x8328, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x79}, r3, 0x9, 0xffffffffffffffff, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESOCT=r2, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='rss_stat\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 59.908833915s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x77f7, 0x317442) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000004c0)=0xff) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10, 0x80000) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) r5 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x20e43, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x891d, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc') ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xbd, 0x7fff, 0x16, "0062ba7d82000000004012000000f7ffffff00"}) r9 = syz_open_pts(r7, 0x0) dup3(r9, r7, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) ioctl$TCSETS(r7, 0x5402, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 59.484474923s ago: executing program 1 (id=24): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) unshare(0x22020400) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) kexec_load(0x3e00, 0x0, 0x0, 0x0) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xf1c38fa000000000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 59.09794799s ago: executing program 1 (id=26): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x688200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fchdir(r2) 59.044979912s ago: executing program 1 (id=27): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000489c3ce3666d85b8980faa726a184306a178ad74bb8fe8d68089f1c5ffb0f65fe44ad3f5dfdb9cb8ad3ce44cd892a5869df67f73daa713bda6321d6d8c0a5e9b6d45680e3e389c75e39fd645f01c9b3f4e"], 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) kcmp(0x0, 0x0, 0x6efabeaea90cffbd, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '*'}}, {@access_any}], [], 0x6b}}) getrlimit(0x2, &(0x7f0000000040)) 58.153087581s ago: executing program 1 (id=33): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 58.134551222s ago: executing program 32 (id=33): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 58.129418652s ago: executing program 4 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)) 58.063396214s ago: executing program 4 (id=39): socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000001000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setgroups(0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 56.932388833s ago: executing program 4 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800491f0068006400008a2f9078ac1e0101ac1e0001830b990d6ac3656474d4bc83032400000420880b0000000001000800010086dd080088be0000000113b7e67f0100000000000037080022eb00000000250c6c0402000000000080000005790d0800655800000003b6ed8b4f9c33753307b583dda64525105be47e"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mq_open(&(0x7f0000000180)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x0, &(0x7f0000000200)={0x7, 0x0, 0x59f, 0x5}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = dup2(r2, 0xffffffffffffffff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='fsi_master_acf_cmd_rel_addr\x00', r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000200005509017700000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x800) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x8004, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszzGKwkAYBeC3JDubsEXAS9jYiqWnsPcoXsFrWHk+QSKTsfAEkuL7iv/9MzwGJqzCtcX2nv1j83E/vPO5zK6OcuzrOmRO8p+pFfqMNX7y287zX3JYtnN9oyu7JJcxmfqUVik53b7yOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYuVcAAAD//3TbCLM=") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000400)={0x7fff, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r9 = syz_open_pts(r8, 0x20800) dup3(r9, r8, 0x0) 56.630558826s ago: executing program 4 (id=51): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x7c, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000000240)=""/164, 0x41, 0xa4, 0xb, 0x7}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 56.602327228s ago: executing program 33 (id=51): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x7c, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30]}}, &(0x7f0000000240)=""/164, 0x41, 0xa4, 0xb, 0x7}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 2.614285947s ago: executing program 3 (id=1170): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0xd8, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2b90}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15a}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xd8}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000ffdbdf25200000000c2099000008000050000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000841) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f0000000040)=0x339241b, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r4}, 0x38) 2.614024907s ago: executing program 3 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mq_open(&(0x7f0000000180)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x0, &(0x7f0000000200)={0x7, 0x0, 0x59f, 0x5}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = dup2(r2, 0xffffffffffffffff) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='fsi_master_acf_cmd_rel_addr\x00', r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000200005509017700000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x800) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x8004, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszzGKwkAYBeC3JDubsEXAS9jYiqWnsPcoXsFrWHk+QSKTsfAEkuL7iv/9MzwGJqzCtcX2nv1j83E/vPO5zK6OcuzrOmRO8p+pFfqMNX7y287zX3JYtnN9oyu7JJcxmfqUVik53b7yOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYuVcAAAD//3TbCLM=") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000400)={0x7fff, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r9 = syz_open_pts(r8, 0x20800) dup3(r9, r8, 0x0) 1.755972024s ago: executing program 3 (id=1194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="fcffffff00000000000000000000000000000000dc84c9efdd54cb763e8bcb581ae14b10765f5c281c528eca23d5fa2632b0b8109d46557a3fd8d3285e2371cb12f57cee156ecb4d1b403179be863d4874e00245d4dc2c226b481ebcf8db6863b24e008d30a5d0fa3707bf857c3be2df82ec0c4a3321754a8c3d6ae3b6443dcc942e43b4ceb3609116d12ec1011405cac7c0db97d2eb7f2e86f379458da4798b991e6b84a0abf45b5d1f447c8e82ab8ca4bdf8ebe483cf6672eb3d496d817647e60b8a01ec122e67b77813fcafd7b1ca737d393a995654f26d8e77e1ef3cae39c6728002c1a38cb2f90349c84524", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800d700000700000000000000007e0c0018120000", @ANYRES32=r4, @ANYRES32, @ANYRES64=r3, @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcf7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9, 0x0, 0x8000000000}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff18000000bfa200000000000007020000f8ffffffb713000008000000c904000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYRES64=r8, @ANYRES32=r1], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000100)=0xb) 1.492347515s ago: executing program 2 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800491f0068006400008a2f9078ac1e0101ac1e0001830b990d6ac3656474d4bc83032400000420880b0000000001000800010086dd080088"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mq_open(&(0x7f0000000180)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x0, &(0x7f0000000200)={0x7, 0x0, 0x59f, 0x5}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = dup2(r2, 0xffffffffffffffff) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='fsi_master_acf_cmd_rel_addr\x00', r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000200005509017700000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x800) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x8004, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszzGKwkAYBeC3JDubsEXAS9jYiqWnsPcoXsFrWHk+QSKTsfAEkuL7iv/9MzwGJqzCtcX2nv1j83E/vPO5zK6OcuzrOmRO8p+pFfqMNX7y287zX3JYtnN9oyu7JJcxmfqUVik53b7yOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYuVcAAAD//3TbCLM=") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000400)={0x7fff, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r9 = syz_open_pts(r8, 0x20800) dup3(r9, r8, 0x0) 1.220630587s ago: executing program 6 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000580)={0x2, 0x4e22, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 1.148505051s ago: executing program 3 (id=1216): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x70e9, 0xffffffff, 0x8000, 0x3e, 0x1, 0x3e, 0xdc, {0x0, @in6={{0xa, 0x4e23, 0xfffff801, @mcast1, 0xcb5}}, 0x7f, 0xfffff801, 0x80, 0x1, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r8, 0x3, 0x0, 0x6, 0x1e90000000000000}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000005c0)={r9, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000640)='xen_mmu_set_p4d\x00', r3, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r6}, 0x20) unshare(0x64000600) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2084}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed61"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 1.14760186s ago: executing program 6 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r3, 0xfffffffc}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0xbb7, 0x6, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) syz_io_uring_setup(0x2bfd, &(0x7f0000000280)={0x0, 0x61e3, 0x200, 0x0, 0x1d}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f00000004c0)=0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000180d26a4715088f3255c96f3e50ace1f8000000000000000c00000003000000000000000000000d00000000005f00"], 0x0, 0x27, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = io_uring_setup(0x50b4, &(0x7f0000002240)={0x0, 0xf7a5, 0x0, 0x1, 0x20000000}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) 1.085081713s ago: executing program 6 (id=1219): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x70e9, 0xffffffff, 0x8000, 0x3e, 0x1, 0x3e, 0xdc, {0x0, @in6={{0xa, 0x4e23, 0xfffff801, @mcast1, 0xcb5}}, 0x7f, 0xfffff801, 0x80, 0x1, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r8, 0x3, 0x0, 0x6, 0x1e90000000000000}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000005c0)={r9, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000640)='xen_mmu_set_p4d\x00', r3, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r6}, 0x20) unshare(0x64000600) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r10, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2084}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed61"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 1.063550874s ago: executing program 3 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501400, 0xc1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r0}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = mq_open(&(0x7f0000000040)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', 0x2, 0x50, &(0x7f0000000200)={0x94, 0x6, 0x10, 0x9}) mq_timedsend(r3, &(0x7f0000000600)="fc0ced9ee60147f8e33f7107ddd87de9344b62329c644781863ec71cc852df045ce60de9ab1890bd2aedf4d7e2aab634bbe9fa9d1169c986d0699034f6b4126b06e15f0ece91e6d95e320c59c0b566dfd3a7392dcee48ff4e86ff6766abe74e5c0016bb5a724d67e9b8bf7fb7575a9eaaafaa2a28ce8d50f4236860620adf4564a3b1ffa7d463f4e31f199bf19774f28605c042eceee23403ef6f385f3de0e32b768d92472c7262f772bb660e13890674f0a6350c8708f74", 0xb8, 0x6, &(0x7f0000000340)={0x0, 0x989680}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000feffffff000000000b060000711001000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r1, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "1d649ddf3952fd64efc77419cb66a8e925cf09966ce1d49e4e34ec76386278ae529a4b948dbbb033ecc0d9"}, 0x3b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000a80)="790a1da72f0cd2ff03580bdc86dd30ca768f72fd13e7620bc8f550de26bdf642e185d7ae377c7f9862a5b067f724e3693ef41e107ef5", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.008734737s ago: executing program 5 (id=1222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x11ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48885}, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100)=0xc9, 0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000002100)=""/4116, &(0x7f0000000000)=0x1014) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000"], 0x50) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) (fail_nth: 4) 949.117199ms ago: executing program 6 (id=1223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r4, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000340)={@broadcast, @loopback, @loopback}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x0, 0x11, 0x148, 0x340, 0x0, 0x478, 0x2a8, 0x2a8, 0x478, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x7, 0x9, 0x6, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(r2) 858.169833ms ago: executing program 6 (id=1224): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004"], 0xfdef) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00R'], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 857.445273ms ago: executing program 6 (id=1225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = memfd_secret(0x80000) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) write$UHID_CREATE(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0xff40) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29c, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x5d, 0x6, "81d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab8401243117ad3"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 841.818183ms ago: executing program 3 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = memfd_secret(0x80000) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) write$UHID_CREATE(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0xff40) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29c, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x5d, 0x6, "81d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab8401243117ad3"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 593.071364ms ago: executing program 2 (id=1228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 584.428885ms ago: executing program 5 (id=1229): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 555.019866ms ago: executing program 2 (id=1231): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@jqfmt_vfsv0}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) chown(&(0x7f0000000300)='./file0\x00', 0x0, r1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, r3, 0x0) setresgid(r1, r2, r3) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) fallocate(r4, 0x10, 0x3ffd, 0x8000) 483.517899ms ago: executing program 2 (id=1232): fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000300000014000100fc"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0xa800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffefffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 482.584039ms ago: executing program 2 (id=1233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc003, &(0x7f0000000500)=0xffffffffffffffff, 0x400, 0x1) sendmmsg$sock(r1, &(0x7f000001e400)=[{{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x74}}}, 0x80, &(0x7f000001a3c0)=[{&(0x7f00000005c0)="8de2cde098b8f6ad4a4ca95551238b4af5a971a7be4c787f7ec96448e6b6d72903108d152f290a2213295c27e00c52f6f3f866500e0176a46be84b26706ccac685143768ea63bc3327fb4548d21c80668afa5bca29076d111959f50fd1e991e4264f1be28740d7da01a80f7f68747d9aac703c90a4600dfe30554ec49edbef1d1516e42e483731330e65b654e504891e3ceee8288fa7497ac242a04a288d97edc1ad", 0xa2}, {&(0x7f0000000680)="27563d897b90a37f4b5bdb5f0b448ece6324eb4fc9bb7449ce171263afef44df15c23d0d9cc93e927c5f67c5c1296da568c79e8ad6eb4e0bcbc2b7af4d2ed72a63a34034fd44", 0x46}, {&(0x7f0000000700)="6e62033176664fdc292c63963e5ac6eaf83a8213fee1ffd6bc1e5ec8862bfd203be4b7b609cb2d664804ad5ffe8e332644ee24d99bb54b74e751d752f6f5ffbe411e2c2d15cc859f665ca1d54fab6882971919a9926d0c5d3a26c2c7358ff9ccb9e8e98a8cb2dcb90c0e10931ccd0ee8a2a85e425fb34d28fac450275a9b2b0dba36bf429e182a6c254ce7a7f59bbd1da13d241fe467217e7d096249cf9838e5d0cbe66bc656091a0c70386344b77f28b1c1863a1aea2189a326b7cdb11cc3e24b5e1f027132eddaf865e4", 0xcb}, {&(0x7f0000000800)="2481b102f0ca188bbc22486ed508fe583fca3c560c8f14a5dcc710336e94902ce32dde3cc4b7e0da59ac3aa9c3c80b34c04ce0ae3b9a768c5417d096f6dfddf6028dffa7b7c2389cc707fa065b203f7d5551f97b25d23edb02de139f4e932f3cdcbb28700cb31ff3c5b3fdacb294b807c9200c7bb616f3d74e5e6e0a5f314c246e6a77b846fbf6d293fb2ff3c0b4c0d978b6133730e97626cccc9a5eab0d5e21", 0xa0}, {&(0x7f00000008c0)="46cbb76b256bd266575bb9e86df099329751cfe91dffc6a8798db46f41520336bd464d58ce41348f387544ced6a7101395358a6ff2699823e9f2ae70400403ab55e01ed3b0bac64e336c7dab16d4008f3bbce10544f18f9bbc7faddd820555c771ae3be5f973c5b4fa0ef4683514", 0x6e}, {&(0x7f0000000940)="722d5abdecca2179c423cc9d332ee7526df0be5ddd0efb1e9924e875306d4b1a2aacdf7082a227fdeb641234c1573aa15ccd02bcb3ab55591186825d425d695fb2fb510600ecf249d01795884b6c635d2b15161df1c41b203c18d1c1b9", 0x5d}, {&(0x7f000001a240)="313621c45c8d5187829ee3c4d38bd8bcc9e4ed1e3bf29ea208a44ee7efdccd7ae9bd6245afbd279389ff0e86c371f0954a2ecb75fd89eaf92632385c41865d25fcd483988bb4d714b759481c9434875671ed853591e7187fcb84a96eff942163ea5c19dd6ea891300ec4ef37593f2a2c3ec8f87b50a3bee6b1273d690cbdec95e06dd1b069c6d45ec7884abafe76a8ed7e1b94536dec54ebe4da48088fbf8b87b44c540f6598119ca1048f2652b6df407c57947c3c6ad483c393bb058204facebd3347c777e97e3381dddc689de12ed255459601fa25c9decb9c80d6170cb65aa4cd00ef96ac113942de27a7dff3", 0xee}, {&(0x7f000001a340)="cb870d29495bc852ce6fd45288c370ec3fbbf3e501f789b5cc44b5ee9777e7a512117a71963615508e", 0x29}, {&(0x7f000001a380)="b33a13563f7042350c899582e59b5075", 0x10}], 0x9, &(0x7f000001a480)=[@mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x9b33}}, @timestamping={{0x14}}], 0x48}}, {{&(0x7f000001a500)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @private=0xa010102}}, 0x80, &(0x7f000001b780)=[{&(0x7f000001a580)="3e6c65c5d39300f278b118a917d9764c685fe12eadd89d9c52e4ce9d68ed6c775a16b4eec548eb026af30f4888e27a04b74d4b923c83d01e3018b0f63b53300efabd683994191666e2a0541b9b0cc67dd1d40c1b9544f4d186e070da3736664c15caec49fd155f53c63133d3c0082e5adaec91e3018ec51debb12df3b0682d1deab35a89889195e1498ba81f862bde7e649589c774b44ba61f2eaa133c49fb51d287848973d84ac21feb1e6ba3023adb", 0xb0}, {&(0x7f000001a640)="9c9801e02090ae9d4274223ab1a1938582931d9894227963c394fb4b5597e158fb24ed8b659b1b0543ddaede4f36808e285a163ff393994951c8d03b1a182b7ea6fa926e3165515d1627503a58299ffae024d59d11e3288c33349d145c79225a8300c632a3fa1cffff99f4a6f03526c126de6aff302551f35561d9de01c188e12aeb4f32e4299c2c6b8a0e3fa0008cd0e41ef15ae4d58a61cc8a70da877fe7429dcb7c3295326649c21a2f", 0xab}, {&(0x7f000001a700)="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", 0x1000}, {&(0x7f000001b700)="2678bc072735f0475ec600a305769327f8bde52f655c903be8dec0e4b733560031dddca3240f11a8732ba292046fd42385439aa9af83a834a501413eb9679f0e2ef0db3a3735043f51dfda02ebfaa7a4a7df0f4b313d863c3f298222abbbe741d9bd24bbc408dd", 0x67}], 0x4}}, {{0x0, 0x0, &(0x7f000001bac0)=[{&(0x7f000001b7c0)="1c084316f1c16e5469933c89cf9153e03ff77a5d8d5486e2b62ada4ad6907801e678fd0f86101c48d2bc543451ebd90fa2227c72e652d299a1faf98edff4b606a5f0cfa432751a9301bb033da571d7a1c637371915b14436bebe8c7f78f18676b8b7f79d92cf48fa1120daee3c3e8b42a12faae1f1c14975e2c7088f96fecb7bbc3b2179452bcf35b01f16c88bbda39ceca919d30c0d3db7c55257dc59d1c6bc01600def0f43e4f8191300509106a7960b06b2981e1a5f1e9fe004d6f9113471652d9a296b19c3e50ba656c5390909dd3a182d01d685749d93725c2a", 0xdc}, {&(0x7f000001b8c0)="f9b08359b995c453e377f9ddca9544cc72789c1d5f1f4f62d5c59fd1d30ba8f63894c07a3df8c17a89512d4be20c522119b8e0c81b58a82bf6df119de09016988cf6a4b6d5430ba2f5a413d252abe5a8b1b1f240d7", 0x55}, {&(0x7f000001b940)="28376c064dac7fa76a79fd0903ee7e20b0c5e202174ba5ea74b6e0e34696a2e220f28c96ed5dca3661ac5ccdaaf87fd1afebc91bce19ca913f43f1", 0x3b}, {&(0x7f000001b980)="cbb0280ee4c4e85cf721a92b26ec98a14d66c05b0800509695cf470a91c24d57d9c0254315cff61192881303c73d3077ac364d704bc613e92bd02e2ca9688775fdfd78286d0761cf9da783c410b9fd51c0164e6e0d1024865a2726dbcf05c6efc98410d8890f0dc52b9435e938e70a7135ff0c07", 0x74}, {&(0x7f000001ba00)="4518194a60d6fc16c1bcfa442bd5bfde6d9aba", 0x13}, {&(0x7f000001ba40)="5a028e85acf210ad7d92b8c3db4d39c59d57e01dd08b31c558ed7510c1f63d3e2363c4072cd42a8413df1f497d389b2495920f7b41a734f5f3ad5496df505559d14f237205c16476958970573a8eac52bb2ebeb386fe967200d328d681067cf9f7d40704f64bb32e16657eb0aa765926", 0x70}], 0x6, &(0x7f000001bb40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x58}}], 0x30}}, {{0x0, 0x0, &(0x7f000001ccc0)=[{&(0x7f000001bb80)="901482e4621816d33606c4cca798d2ea74e607ba5596df444c9c7537da35f4c2716cc1e147527468e8344e4b3be053e1bce2f50bfdca3e056fa288e62347fa57bef80e99025c43a05ae049b36ff2abbf9b35f815779ca62252d5e461fd484bf2bfff3430ef519bcb68c780df020bf317afedc45e5e13d0e50cd51aab6dc60b59a6b413582b2651e41430c5654c08791ceea44cd3158477a3ec34417ad3ef0970a402db32888a91f77eeefb0e6b40f9e938a5bf4687afcfb774422ebbf4de2b56635fb8a012bf88f1200958ec72b9f19f8548ca61364aa1316690ce4f268fb4f0393cd82be1550c254af03ae74514507d33fad55c510fa77b173ca01b0ffbfd67a173069bac18bfd706437c6af818438fa2b94beeebafc4957aa080c2d5aa87510a24ace9bd6de2852fc052551b21cb97a4925f4e7734b03e9f4ae0ab19e5d8d2b26ccebe27cbe30896afe67a2779bbc607e706f25eeab93bc2040b6f9f0794f8255b900016c7323cf299e075244aa024b3e4424affe6632d537cca481d3383a04efc5e102472fdfbb53b01c313f53c08571edd815f8df5ef8c97f5d61f495a39333d1259e3390bd1cb121010809aded2f5b5db64419650bc8bb4d733f676b12fe844acf6bd9af4e7d1bfa304b80b9fe850a88a8e60f02c22ac7fa2c9467448774c775878dec902640db3c994ed7d70d1c1c46e9e83cfca1de7402d780aa8d958a907255a6f302ff0f950d7c5b0a20b79a848a7fb8e5a6c55b65798d63b483bb594641dc18474201ccf094dd37d04693ad808ba1eea9095b907363d4c4df029d08df0468d64dcb360e915a3066574e456353a4594d2182975d30e68277befe04bda8acb680b74beef4286d0b20872f208df2c16e697f50c7fd867d1baaa190d129174c68a9d744e4b62a2c706297015408343085bda63776d9e3d21240a0e4dfa0165b8dfdea32d50cfd54b65c9ca08f56e2c5389f6895c5da7b0740d59cb8c9ed129e5cab6dc61b9840c94da3fea8e601cada30b0a8d7f00bdeb6a11cbc465459d6400b5b4b1d5415371e5eed1bf91361b984b6efc566dee994e2d9d84f6ee14d39df7f72815c6490ce34e99b8049111fd684eac093fe8a433270ccca4dcf86fd861e9baba174c8c5e0f430a8f2de7c1fe5ec5540b25a686ac9e58746231f4a277b1349c73f7b6e0a9411d82609d6d5cca634d979d0b58cb9d8a30b30263dc85ca3bd6f2ad91ef30b950786040be7e83052578b718cf093990c249a65c90c4fc2c8b15d354797a3b402abdecdb76b0b2a4f0c33dbe4db3ee95424ee0eb0143c7ac51022f27be6b0d1c84b7499ec5d455e1075816ca97def054da45ea6c5dc32e51ff2c695129c54ef687259958faef3f821474e5b0190ab5354f54b10dc28adc5d7bbec87d0789353cbeaf7e0707ccbc647ae55f43aaa062d9494805382cf8c5742ef22fa708273801a95fad3763c8e3c9ae02398d79d252fee317450f6a337a56a95f0b47fe27b964d62cc4d744c4491762ef49aae73af80c01d88a7fd7a4333956d7a41d0d8ab43a763345f1d303b567e54fb76b3e159e20d7ba272a3af51664f0bebcc7ccfc511b7550e1550ddc84ce7236654c19e7a6875126b4a97c7413e722e7fd2c39ecd943dd95c7aac6cb9c05e7a90064ea3282727e770add04463ea2ea7e281972ae9c033949b455cf587802f2e6d44751343f1b84ab33387e11afdfad70638a89872077258d4e5d5e66a25a67e6c45f5ea99eb5c842d0b2650c81b4499f1159ff656c58fc557e2222020e2066d7992bf57427725de2ba8c5402ce221d5ac30270fa6f3724ae11cf412167f1c7b7e8b90465cee976b7b979c4019a0daf79b816ee32575e92be562f9dcb5028f9b56999c7ffe4a4cee8f7883c8a61ad1718a4fa80288d6af2f0aa4a100ebfcc84c5d3fa8afc23036713b73be0e7d7525edc77cd328721816f70732bbc4bf27fb39dc8fbaf7030792741f4bd4e7cb4e5b72cf17c98a646b5cb5bb6e1913d7271ad77f223d2bf98789b51f8f89e68424d39841df71acadcc38f00d8a84a6111a1ef811b34723d4b2634ec4c18315523b3d8e493663782ed9094e5ebf1b70216d45865893394c218e3c0cbe9de215b922e703b3a3dda9ae9c972b51d476317b07177865d5f0cedfbafa7dd407f65eaae5f2396fe57970291ab2aa6807f61aae3d57b33245be1614f4a7d0f1b6f926f72661d3109117f525c560e0f0fb3690484af81942ad220a467a6b344cc18ba7a29cbe6c1327122fc3ba2544deffe55f9eedb92775b4f9be202d7b2f728d643d583edbeb36ddc22c3fdcd63154b1a04c4b18654976af1a084850598b47fdd5e36a19cdebfe4c62268d406a5eb193881979416d501d7d8b690b3478d56da8e85c576c948519400ad87f90fabe143cbfc54cf289cf1f05b0cb8eab37db62b129d60c6015fac48e730c358c077164259f4b52395ea3e30ad4ddd0a3fb7488f6766caea39bb5591c21f6e05f5798776b0a9be607ad8709f24705c0c67407d92228da1ba9bef9fa0d00da9f134f95b3210d8deeda146f8de4f8cd61e16575ddfff9110899146debeade302d874d7cb6c7ad535cada4ce29167bb1d082498dfc175c0eab8cd4e93ee2a378dfc64fb3167ef1bc89b8fa27fed27e64a6f99840eda4401231b0c355679cc490a1a2786c4c76af7aac64ba5a76d7141f1ac73851c8f0f1c9fd260ff0dad5923f7e318c3eee41ca9af5e9b524858acc6070da3ef9d7455c2e344ab2f7afb570144faa53838a0eb9c4591fb8e1c4c1efdd18a6122631c24b3d3a62e0514bf22e32d3a5a23f1e2e75d90df799e27a8f758603c7f026bd490d6a99bdbc2dcbac8549492d59a6d2920a5d83c98b0ae796382b8e6a14772801518eb0c9afef568baef4c209b681825dc849e42aa1c0ad3120d58d0262145746366fb91c685da5e15d27a67b2fc424f9702a8e5e2f6d0125270fbe59840c1aa8ed568633a15861f6b02a4e67bdab626248d705b3053acf2fb18333da3413cb1ccd9ca28be25a0d7842a77f69940058e3beee4f9963f5ab25b2d98559736a1335ad96a11e47cafb9ecc49e47bb8394d0f813a04e53f52adfcefd8a9d965d8f079e96d27a455d85b97ba801a961f1de9cc94fb1bed7228ac9963a041cad9d600ee3c11f3350affbf86ee2fb9eed776e7e21e86459fac66f055fa76832d20ea3cf411eff2dbe3883eecb602d67e26b1ba455276bc071dc99b4715907dc202b75fbafe51ca184e945af26ea7bc792828b3d7c69e814a98bef507573d9ff9e52932ac33d4aa0a25665f204d66519473d649f68198a917c04b687abf2dcb91efa8baab561ece2a137879232c176f05f1fb671534d36e23babb4ab8fc80e0c27f96cd9b3c5470b4bd0f47cffa40a6836ff734d8aaac66b6eb604f0635b498e4df71f041f4c77764075fe07955d050d2c63a31b098fa3445dc60e177409ccc3df9a450a90e2cc6d9ce7e354175cfaef99c8c47e226632621cc44aad9fc6179b2e6fcb229ded6abdf42e9c5613a1542ba27164ca068e886ad9f71c6c3a608e6e230a067d9ac0bac5590773c829568a81f6c1f2c078f07d9a7f06902fb4d26dd15680df7166386c16efecd8f1b6b654ad1458cc6098f4771730a13664acf775ddeaf69faff1500f1719be4a1233a3ad33238f347b88531dc33fc9fe5d4b6513e51bb311f47612b5655358bf7fdc4084b1548c24ab508d9d849250b1eb15eaa81738d19fcc8a3f5ad1e131146e9adbe8a975401e495d5208f22856a40689587530897c73d7b3853c8df0481419c2dec2fb8a9046b607c832596d1088517890439d4eee0e32f171f3de59e4e67a1919f0489d96c06a97013efdc149dadf6d4a999e30d67a9158ed8ef088bd9bcfd717bcb1db33fd071082e701fd4ee0f784acf7ec6143a5bea4719f6de788b10830d8a749f2b8dafe913b0e0eba84e742c6b4f421df85c890574b6ac2f704c00cd8b67bcec2351ca9c017f743397ab66f2bbad2014a7567af21b828c7c72c9aa546a79662545875c09756a90add88c4aab99cd57f42c65e769a8781dbfbc3b8c9bd78cdf5503657661ce1d22742ed0d30d8e31ca5ddc988d3916c2f226ed8ffd7d690b23a9ac30f1c357254035dd18289e274db86fb096be186a8f3aa488d48a9ddef72bc6ded1bdcf13d17b891a6d0c00b9f97e0f6153afc18f3aad391f5a3ba12ee81a2bd045f627f28542e8a0e907642272518410a6f7430df0d89cdb5c5d98477b2d09ea424043c1f58fda68caeff2a21a609a8fa381d5388f82776fb55765589ba234f055faf4e48b5fd34f59f2512fd9b87e337c36be15da8abf59ed9fe9ec0a38eeaa404ebf789ae878742b15fd2ef51a93e8d57b9962ad5eb72d6d0c9117fe67473af406e3eaa2301bfe399d405d416ba6c5bd51080521c03125151ed00441ecc413586d666172201e18cf26c9b2a49237530a7bd9f89f8c2141bdec4e62c9130fea92a20c8088460c3a53caccf4c6e9c313972006c448a6dc1a8e3b62c8fa8fe163084f335a36b337447ea930ef0d58d707ee292efa7a36a115025ac009050ec6d1ac18b89b5783c2342e1b8a5ba06ba745cd1e9a1d9f936609e7c2b512bd09b585f53cdc738d135df72bc4f32f9a83c4c127cd78a79ac4946bba571dded1c3099efb13fe585e26637ff4cce07992708115e37512141260fe21a6fb83e0245391da4a15a6d1f5a69f4d07e4649385ed36564355cd885793644231189778ea12cdd3c94673c7d2cd23952ce5476086b47b8196de4e0dd170b8970eccaadac1d08734759664b8e60d688f99317a1f565fd5109c5de22d1da1a06a199ca2317f90c5892da67d597cd313cca8a097eb92edba565594cd9f0cf4b8c5e4a825466aec3f4a6f90a57164f67f685529c52020feac574a61f7bb77f67f62c11a70cdbe625c4c7e5ff73c1cee6571e80fe901c352eb5f5ee52f7b9d7e714231ab84957f5a07d8378065cf6dd5707e2285f9f2db2cca4c341d975bae31ac3281b993ea4b6162a68ee6d15a1323def167cb11075ce1346d4ebc9338f59735bdbb95ebd883ce40d71c0b67a7670b01d7290b2e0641b86438d19d13a7aa9281ebaa902befc09fc788968727c308320c3f2223baa1d9749271559e8f035a5a3cd8fc823de302cbb4c17c9bc2c95da4b002996fec74934014036b33bc4f33a567561f832d744834fa156f4bd67d058625cb7016cba74c0389ab04c7092ab823f080d949c89652da28be5d497f6fcf28f2f25324f566b211b1ecab67a5c731961b8477352e171ce50204c4b0c379eb861f4e999acd255ff5b566c8485886b84e20136e2672b214d33d7e015b65a7c199b8c51d0e904b7f326daf084e44be7639effea9854ee482bc8fc28b7777de0ee5761adbb2989133226950dfadd14b80c438d15c37d4160613b2e075f757faccc7cb63c935e18c443b041de5b629074acd04f9a9de2ddb1ff73e6965ae10a0cb0899ada09dcfb6639560ef461f2eb2879c9dc69630028c74e3139d9553f6ed29bdda2195ecfbd06383e198469eafd53a5bd6570e2d5010d8251a6e191205a1f5c2e26f3a8426b3618e8b4d7b3cd42e1079d856d4179fa5ba19e742e1888eebf7dbc92d6620aa4f4ade5bbf9c9b4750d077bff1befe0fc7474946378310109bd4aa25b4c5f1448466e205ae62a6ede11b8be038eb4bcc4cc6258ee30d45a1c559dc0ad8c3f612159fdf299302ceea72ac7a6fad6d32450b37ae7ccd4fadbfb9a4e5a245187eb57fe33f13da347332efc48e4", 0x1000}, {&(0x7f000001cb80)="c7056f39f6ed7b0c6e9fe39e64620e14549a778f17301c5a572f5793e1a0d1f5dcb50d65c034bae4b8586dcbb4b277f93d0f907da3362870cf9ced2773b1b5734881b17d63befd6176941e6669e0591a7475f6db94", 0x55}, {&(0x7f000001cc00)="88cfc745f7b85c781b58f9eb45afd93be3606d04c22ff623c23a1c93c5debfb3cc9b04477be8d0f6663f743390711c4a2ffdc501ca8fa7a9ec9792a5c8b3ce1708bd94624a4b5af9413bd1b0fafd84b5f64a505808a5961ab7293075b4cb17b3f5f44314c003547e3658cb9610774ea3913e3674147605fa6e318504fc083aa167059f95a5ce4128c8c64efc88d86ec822eb99b9f6cb2d262a8f71ce99b2834e574e14", 0xa3}], 0x3, &(0x7f000001cd00)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{&(0x7f000001cd40)=@in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x80, &(0x7f000001e280)=[{&(0x7f000001cdc0)="3f75e7ab66f745d3b5d349f3203270bbf994a8343fb1b89f2f9fbb0cca9f4acce8863b587accee9fedb08a4589216ddffd5bb4d81271b9db762fa061f47fa3d65cd5d632099c649a22359b44fc344bba90df9baa2d230b3bcb570d3e535dcdd901733a907a5c38a0bdd94b8de156f2adf1cc78ca4284", 0x76}, {&(0x7f000001ce40)="57778fde33f3a8d2b4e5c3dea1090d85da58710564a92ab747730fc97e666fb349ef0dbe79876b1bc4ab821b965d370e1451723bb3ab", 0x36}, {&(0x7f000001ce80)="70b44be82a1be67245d3f982b87ef5cad223792b20c29026835b277b304ccdbd7334b782a2223d30f215b911bb0d229e04063211e384571599b7575300abecafcb46a93967f78e9089a561cb81d9e4f4805db9c036cd1deb77e5732cdaa6979973da459723347adf9aefedf606", 0x6d}, {&(0x7f000001cf00)="0f900013ab939ac9ed15311c273523e6b92c961e1421ceeaf86ec9fc7635e56c95aac58d7d277b59ce05c30293f770d464ed6226f6bbc979c87de4cd2927709e445cdee707c3943922c1f0cb570be891f1ddc6a2cc083caa00bf3e97ca3a2fa34adc893fe549a454bde16f374e671dc9907ac9034492dc4c204f2961dcc583b032b9bea3b949d0214db23cb49c49a538587160db4929d3125ccd5a0ca912d65ea0012568325919ac741063a1", 0xac}, {&(0x7f000001cfc0)="886f9bd74742287f2489cda7827571879e6d6d313c37", 0x16}, {&(0x7f000001d000)="88faba4f2c72365314b8d149c5d9799a2a59baacd23704b846dcbdf7dcf935c4049e1c66c5f00b69f87c65f3629ed2bc801db3b455a36ce695fcb2b35f461f149991bb1a1d30247c7ba842846103e2afc5f5b7c8c18f9249350d691ece93f2b548363be61c9e52ea37250d388e13019f1f6e9f0879d26d587fcae5a8f9ab8f126de8b0548822bc19d2840d9687", 0x8d}, {&(0x7f000001d0c0)="46ed613b973f9124ea6baab542bab8c6ef89e0ab76c795e37b5c4d421b5c7845b6b161120eab3cf4fb99162d9d67c778901c84741b6da41f5a60dccadf85a1dd5fa1100a8d9dbddfc8d2ce997c06021f", 0x50}, {&(0x7f000001d140)="4dba9bdf4e28e385f87869b1913b53445749fd59fb4c4e3ce055c802d8968e3250ad2d", 0x23}, {&(0x7f000001d180)="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", 0x1000}, {&(0x7f000001e180)="8c79af93bdbcf9524d33fc29899e32913abfd5f5231ed348b60b6841f5f3ee0dbc49dafb4ad33d0e764acf2e6c54f3ef80a6a2b6532a17faac8aa301cd2e15edf4632135d93ecfaa5739f616878448aca5ef02ea2c784d1918ff1e59822ff2f7cf8ada35e9d501ed5304ec7553ba857635ec293694cb4639b514d58534faeb966405e0c76a471b11c357410c13ea021a7abd4c60e6fa879d690e014e779085f41ef5a50f755aa6a47ee35e66e418fdd90aba6de1de320dc1b65dd47fb6966f7ad210264f872859f38765", 0xca}], 0xa, &(0x7f000001e540)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x800}}], 0xa8}}], 0x5, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000130029", @ANYBLOB], 0x44}}, 0x0) socket$inet6(0xa, 0x3, 0x3c) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080007000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000081000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000001500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609bc020073797a31000000000900011173797a310000000014000380100000800c0001800600013ed103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 476.693589ms ago: executing program 5 (id=1234): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000580)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, 'kmem_cache_free\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, &(0x7f0000000340), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 460.64047ms ago: executing program 0 (id=1235): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004"], 0xfdef) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00R'], 0x54}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 435.794821ms ago: executing program 5 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) (fail_nth: 6) 383.104183ms ago: executing program 0 (id=1237): fsmount(0xffffffffffffffff, 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230200000000000000000300000014000100fc"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0xa800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffefffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190da) 174.344573ms ago: executing program 2 (id=1238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800491f0068006400008a2f9078ac1e0101ac1e0001830b990d6ac3656474d4bc83032400000420880b0000000001000800010086dd080088"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mq_open(&(0x7f0000000180)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x0, &(0x7f0000000200)={0x7, 0x0, 0x59f, 0x5}) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = dup2(r2, 0xffffffffffffffff) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000600)='fsi_master_acf_cmd_rel_addr\x00', r0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000200005509017700000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x800) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x8004, 0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzszzGKwkAYBeC3JDubsEXAS9jYiqWnsPcoXsFrWHk+QSKTsfAEkuL7iv/9MzwGJqzCtcX2nv1j83E/vPO5zK6OcuzrOmRO8p+pFfqMNX7y287zX3JYtnN9oyu7JJcxmfqUVik53b7yOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYuVcAAAD//3TbCLM=") r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000400)={0x7fff, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r9 = syz_open_pts(r8, 0x20800) dup3(r9, r8, 0x0) 125.037425ms ago: executing program 5 (id=1239): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) time(&(0x7f00000002c0)) mprotect(&(0x7f00005b5000/0x2000)=nil, 0x2000, 0x8) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x40ac}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x0, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff5}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xab6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x9a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0xb2, &(0x7f0000000800)=""/178, 0x40f00, 0x6a, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000000600)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xa, 0xc5d4, 0x80}, 0x10, 0x27023, r4, 0x0, &(0x7f00000008c0)=[r7, r9, r3, 0xffffffffffffffff, r9, r9, r9], 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000a80)={0x0, r11}, 0x10) 124.727555ms ago: executing program 5 (id=1240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast1}, 0x20c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x400000006, 0xbc2f0b7, 0x7}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x7, 0xfc, 0x4, 0xfffffffe}]}) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) sync() (async, rerun: 32) sync() (rerun: 32) 102.655755ms ago: executing program 0 (id=1241): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000001400)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3aa7}, @ib={0x1b, 0x549e, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r1, 0x2}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 78.897456ms ago: executing program 0 (id=1242): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000580)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000340), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 41.678588ms ago: executing program 0 (id=1243): fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230200000000000000000300000014000100fc"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0xa800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffefffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 0s ago: executing program 0 (id=1244): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x114, 0x8}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x2, '\x00', @d}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes128, 0x2, '\x00', @d}) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x134) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x910, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008c90}, 0x800) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x910, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008c90}, 0x800) r2 = socket(0x22, 0x6, 0x5) msgget$private(0x0, 0xd1f4d1492e9f4529) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000280)={{0x5c, @local, 0x4e24, 0x3, 'wrr\x00', 0x12, 0x9, 0x69}, {@private=0xa010102, 0x4e21, 0x0, 0x5, 0xfffffffe, 0x9}}, 0x44) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000300)=0x6, 0x4) r5 = gettid() syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r4}, 0x18) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r4}, 0x18) r7 = fcntl$dupfd(r6, 0x0, r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4044010}, 0x4040081) sched_getattr(r5, &(0x7f0000000580)={0x38}, 0x38, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000005c0)={@desc={0x1, 0x0, @desc4}}) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f00000005c0)={@desc={0x1, 0x0, @desc4}}) creat(&(0x7f0000000600)='./file0\x00', 0x31) (async) creat(&(0x7f0000000600)='./file0\x00', 0x31) close(r3) fdatasync(r7) (async) fdatasync(r7) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000640)=r5) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='io_uring_submit_sqe\x00', r7, 0x0, 0x21e}, 0x18) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x140, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc922}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe9}}]}, 0x140}, 0x1, 0x0, 0x0, 0x48044}, 0xd3327b9ee6d1354a) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x140, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc922}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe9}}]}, 0x140}, 0x1, 0x0, 0x0, 0x48044}, 0xd3327b9ee6d1354a) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1d}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4800}, 0x24000005) kernel console output (not intermixed with test programs): (error -117) [ 60.884642][ T4441] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 60.893942][ T4441] EXT4-fs (loop3): 1 orphan inode deleted [ 60.904889][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.932765][ T4441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.954807][ T4454] SELinux: failed to load policy [ 60.973886][ T4456] __nla_validate_parse: 10 callbacks suppressed [ 60.973902][ T4456] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.267'. [ 61.023434][ T4459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.075093][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 61.075178][ T29] audit: type=1326 audit(1764183956.797:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.096897][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 61.116305][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 61.126756][ T29] audit: type=1326 audit(1764183956.797:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.150158][ T29] audit: type=1326 audit(1764183956.797:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.173580][ T29] audit: type=1326 audit(1764183956.797:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.197159][ T29] audit: type=1326 audit(1764183956.797:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.220805][ T29] audit: type=1326 audit(1764183956.797:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.244158][ T29] audit: type=1326 audit(1764183956.797:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.267962][ T29] audit: type=1326 audit(1764183956.797:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.292030][ T29] audit: type=1326 audit(1764183956.797:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.315475][ T29] audit: type=1326 audit(1764183956.797:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f916920f749 code=0x7ffc0000 [ 61.352080][ T4482] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.352468][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.374330][ T4482] SELinux: failed to load policy [ 61.397824][ T4487] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.281'. [ 61.464909][ T4495] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.474997][ T4495] SELinux: failed to load policy [ 61.498976][ T4497] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 61.521854][ T4490] SELinux: failed to load policy [ 61.541096][ T4497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4497 comm=+}[@ [ 61.613412][ T4506] loop2: detected capacity change from 0 to 512 [ 61.632296][ T4506] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.287: EA inode hash validation failed [ 61.645443][ T4506] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.287: corrupted inode contents [ 61.678556][ T4506] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.287: mark_inode_dirty error [ 61.718361][ T4506] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.287: corrupted inode contents [ 61.745125][ T4519] loop3: detected capacity change from 0 to 512 [ 61.751699][ T4506] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.287: mark_inode_dirty error [ 61.772276][ T4506] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.287: mark inode dirty (error -117) [ 61.786710][ T4519] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.293: EA inode hash validation failed [ 61.799350][ T4506] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 61.815761][ T4506] EXT4-fs (loop2): 1 orphan inode deleted [ 61.825005][ T4506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.837535][ T4519] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.293: corrupted inode contents [ 61.889956][ T4519] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.293: mark_inode_dirty error [ 61.909217][ T4524] SELinux: failed to load policy [ 61.928651][ T4506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.949537][ T4519] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.293: corrupted inode contents [ 61.983929][ T4519] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.293: mark_inode_dirty error [ 62.016794][ T4519] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.293: mark inode dirty (error -117) [ 62.030113][ T4535] netlink: 19 bytes leftover after parsing attributes in process `syz.2.300'. [ 62.041581][ T4535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4535 comm=syz.2.300 [ 62.054645][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.303'. [ 62.055983][ T4519] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 62.078577][ T4537] loop5: detected capacity change from 0 to 1024 [ 62.087240][ T4519] EXT4-fs (loop3): 1 orphan inode deleted [ 62.093827][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.107396][ T4537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.120771][ T4519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.130688][ T4537] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.168081][ T4537] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.302: lblock 3 mapped to illegal pblock 3 (length 3) [ 62.195783][ T4547] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.306'. [ 62.210184][ T4537] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 62.222651][ T4537] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.222651][ T4537] [ 62.281895][ T4537] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.302: lblock 3 mapped to illegal pblock 3 (length 1) [ 62.327955][ T4556] loop2: detected capacity change from 0 to 128 [ 62.352771][ T37] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 62.367728][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 62.372722][ T4554] SELinux: failed to load policy [ 62.380050][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.380050][ T37] [ 62.391958][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.426867][ T4562] loop6: detected capacity change from 0 to 512 [ 62.468403][ T4564] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 62.511814][ T4562] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.312: EA inode hash validation failed [ 62.544831][ T4562] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.312: corrupted inode contents [ 62.580119][ T4562] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.312: mark_inode_dirty error [ 62.598348][ T4562] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.312: corrupted inode contents [ 62.616585][ T4575] loop5: detected capacity change from 0 to 512 [ 62.630830][ T4575] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.316: EA inode hash validation failed [ 62.649564][ T4562] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.312: mark_inode_dirty error [ 62.663054][ T4574] lo speed is unknown, defaulting to 1000 [ 62.669183][ T4575] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.316: corrupted inode contents [ 62.684786][ T4562] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.312: mark inode dirty (error -117) [ 62.702262][ T4575] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.316: mark_inode_dirty error [ 62.726062][ T4575] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.316: corrupted inode contents [ 62.743423][ T4562] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 62.762960][ T4562] EXT4-fs (loop6): 1 orphan inode deleted [ 62.771158][ T4575] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.316: mark_inode_dirty error [ 62.788361][ T4562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.810331][ T4575] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.316: mark inode dirty (error -117) [ 62.828449][ T4562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.840700][ T4575] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 62.850185][ T4575] EXT4-fs (loop5): 1 orphan inode deleted [ 62.856646][ T4575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.882221][ T4575] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.010185][ T4593] netlink: 12 bytes leftover after parsing attributes in process `syz.6.323'. [ 63.044494][ T4593] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 63.064281][ T4592] loop5: detected capacity change from 0 to 8192 [ 63.101624][ T4592] loop5: p1 < > p2 < > p3 p4 < > [ 63.106723][ T4592] loop5: partition table partially beyond EOD, truncated [ 63.118448][ T4592] loop5: p1 start 67108864 is beyond EOD, truncated [ 63.125182][ T4592] loop5: p2 start 4278190080 is beyond EOD, truncated [ 63.132254][ T4592] loop5: p3 start 100859904 is beyond EOD, truncated [ 63.143393][ T4597] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.327'. [ 63.263551][ T4604] loop2: detected capacity change from 0 to 512 [ 63.271930][ T4604] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.330: EA inode hash validation failed [ 63.284958][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.330: corrupted inode contents [ 63.298283][ T4604] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.330: mark_inode_dirty error [ 63.310428][ T4604] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.330: corrupted inode contents [ 63.323986][ T4604] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.330: mark_inode_dirty error [ 63.336184][ T4604] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.330: mark inode dirty (error -117) [ 63.349068][ T4604] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 63.358273][ T4604] EXT4-fs (loop2): 1 orphan inode deleted [ 63.364605][ T4604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.378314][ T4604] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.425045][ T4615] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 63.458921][ T4619] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.541740][ T4618] sel_write_load: 1 callbacks suppressed [ 63.541760][ T4618] SELinux: failed to load policy [ 63.640611][ T4635] loop2: detected capacity change from 0 to 256 [ 63.657337][ T4635] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 63.680571][ T4635] lo speed is unknown, defaulting to 1000 [ 63.856288][ T4644] loop0: detected capacity change from 0 to 512 [ 63.897784][ T4654] loop5: detected capacity change from 0 to 1024 [ 63.898977][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.904763][ T4654] EXT4-fs: test_dummy_encryption option not supported [ 63.918917][ T4646] team0 (unregistering): Port device team_slave_0 removed [ 63.941266][ T4644] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.961503][ T4646] team0 (unregistering): Port device team_slave_1 removed [ 63.968548][ T4644] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 64.060634][ T4666] loop2: detected capacity change from 0 to 128 [ 64.069616][ T4666] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 64.069662][ T4666] EXT4-fs: failed to create workqueue [ 64.084879][ T4666] EXT4-fs (loop2): mount failed [ 64.253632][ T4675] loop6: detected capacity change from 0 to 128 [ 64.379084][ T4686] loop2: detected capacity change from 0 to 512 [ 64.386444][ T4686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.399139][ T4686] EXT4-fs (loop2): 1 truncate cleaned up [ 64.405328][ T4686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.666314][ T4693] loop5: detected capacity change from 0 to 8192 [ 64.687121][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.700437][ T4693] loop5: p1 < > p2 < > p3 p4 < > [ 64.705605][ T4693] loop5: partition table partially beyond EOD, truncated [ 64.717217][ T4693] loop5: p1 start 67108864 is beyond EOD, truncated [ 64.723942][ T4693] loop5: p2 start 4278190080 is beyond EOD, truncated [ 64.730822][ T4693] loop5: p3 start 100859904 is beyond EOD, truncated [ 64.750545][ T4699] lo speed is unknown, defaulting to 1000 [ 64.855765][ T4697] SELinux: failed to load policy [ 65.011630][ T4699] loop0: detected capacity change from 0 to 128 [ 65.018569][ T4699] EXT4-fs: Ignoring removed nobh option [ 65.025660][ T4699] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.038021][ T4699] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.293182][ T4722] lo speed is unknown, defaulting to 1000 [ 66.181395][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 66.181412][ T29] audit: type=1400 audit(1764189081.901:2019): avc: denied { connect } for pid=4740 comm="syz.2.377" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.309022][ T4748] __nla_validate_parse: 13 callbacks suppressed [ 66.309040][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.380'. [ 66.466951][ T4757] loop5: detected capacity change from 0 to 512 [ 66.506046][ T4757] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.382: EA inode hash validation failed [ 66.556025][ T4757] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.382: corrupted inode contents [ 66.576187][ T4759] loop6: detected capacity change from 0 to 8192 [ 66.596425][ T4757] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.382: mark_inode_dirty error [ 66.618529][ T4757] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.382: corrupted inode contents [ 66.642123][ T4757] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.382: mark_inode_dirty error [ 66.659924][ T4759] loop6: p1 < > p2 < > p3 p4 < > [ 66.664989][ T4759] loop6: partition table partially beyond EOD, truncated [ 66.676074][ T4757] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.382: mark inode dirty (error -117) [ 66.698987][ T4759] loop6: p1 start 67108864 is beyond EOD, truncated [ 66.705685][ T4759] loop6: p2 start 4278190080 is beyond EOD, truncated [ 66.712624][ T4759] loop6: p3 start 100859904 is beyond EOD, truncated [ 66.724085][ T4757] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 66.765264][ T4757] EXT4-fs (loop5): 1 orphan inode deleted [ 66.849781][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.385'. [ 66.871471][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.385'. [ 66.905705][ T29] audit: type=1400 audit(1764191642.625:2020): avc: denied { getopt } for pid=4767 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.985016][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.389'. [ 66.993988][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.389'. [ 67.089549][ T4774] SELinux: failed to load policy [ 67.096852][ T29] audit: type=1400 audit(1764191642.815:2021): avc: denied { read } for pid=4777 comm="syz.3.392" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.120239][ T29] audit: type=1400 audit(1764191642.815:2022): avc: denied { open } for pid=4777 comm="syz.3.392" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.145581][ T29] audit: type=1400 audit(1764191642.865:2023): avc: denied { ioctl } for pid=4777 comm="syz.3.392" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.193534][ T4781] loop2: detected capacity change from 0 to 512 [ 67.224669][ T4779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=4779 comm=syz.5.391 [ 67.242730][ T4781] ext4: Unknown parameter 'hash' [ 67.321107][ T4790] loop3: detected capacity change from 0 to 512 [ 67.413966][ T29] audit: type=1326 audit(1764191643.135:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.6.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 67.437548][ T29] audit: type=1326 audit(1764191643.135:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.6.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 67.485946][ T4790] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.500028][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 67.568192][ T4804] SELinux: failed to load policy [ 67.624717][ T4790] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 67.835416][ T29] audit: type=1326 audit(1764191643.135:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.6.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 67.858963][ T29] audit: type=1326 audit(1764191643.135:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.6.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 67.882302][ T29] audit: type=1326 audit(1764191643.135:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.6.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 67.919346][ T4811] lo speed is unknown, defaulting to 1000 [ 68.039415][ T4820] netlink: 19 bytes leftover after parsing attributes in process `syz.3.403'. [ 68.082476][ T4822] SELinux: failed to load policy [ 68.140367][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'. [ 68.230924][ T4844] loop0: detected capacity change from 0 to 512 [ 68.240351][ T4831] netlink: 96 bytes leftover after parsing attributes in process `syz.6.409'. [ 68.301481][ T4844] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.345411][ T4844] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 68.386643][ T4854] lo speed is unknown, defaulting to 1000 [ 68.498207][ T4858] loop3: detected capacity change from 0 to 512 [ 68.573129][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 68.669381][ T4858] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.417: EA inode hash validation failed [ 68.683328][ T4858] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.417: corrupted inode contents [ 68.719022][ T4858] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.417: mark_inode_dirty error [ 68.740315][ T4858] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.417: corrupted inode contents [ 68.772130][ T4858] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.417: mark_inode_dirty error [ 68.793963][ T4858] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.417: mark inode dirty (error -117) [ 68.816723][ T4858] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 68.826196][ T4858] EXT4-fs (loop3): 1 orphan inode deleted [ 68.863513][ T4881] loop0: detected capacity change from 0 to 512 [ 68.902720][ T4879] loop2: detected capacity change from 0 to 8192 [ 68.909443][ T4881] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.918226][ T4881] EXT4-fs (loop0): failed to initialize system zone (-117) [ 68.928123][ T4881] EXT4-fs (loop0): mount failed [ 68.933243][ T4879] loop2: p1 < > p2 < > p3 p4 < > [ 68.938324][ T4879] loop2: partition table partially beyond EOD, truncated [ 68.950850][ T4879] loop2: p1 start 67108864 is beyond EOD, truncated [ 68.957514][ T4879] loop2: p2 start 4278190080 is beyond EOD, truncated [ 68.964724][ T4879] loop2: p3 start 100859904 is beyond EOD, truncated [ 69.098338][ T4889] lo speed is unknown, defaulting to 1000 [ 69.260467][ T4899] loop3: detected capacity change from 0 to 512 [ 69.305797][ T4899] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.408112][ T4899] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 69.457058][ T4904] SELinux: failed to load policy [ 69.587800][ T4914] loop3: detected capacity change from 0 to 512 [ 69.615407][ T4914] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.437: EA inode hash validation failed [ 69.629903][ T4914] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.437: corrupted inode contents [ 69.664828][ T4914] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.437: mark_inode_dirty error [ 69.709880][ T4914] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.437: corrupted inode contents [ 69.722558][ T4914] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.437: mark_inode_dirty error [ 69.739734][ T4914] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.437: mark inode dirty (error -117) [ 69.762468][ T4914] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 69.781988][ T4914] EXT4-fs (loop3): 1 orphan inode deleted [ 69.846492][ T4922] loop5: detected capacity change from 0 to 128 [ 69.932371][ T4918] SELinux: failed to load policy [ 70.026385][ T4935] loop2: detected capacity change from 0 to 128 [ 70.089909][ T4935] FAULT_INJECTION: forcing a failure. [ 70.089909][ T4935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.103078][ T4935] CPU: 0 UID: 0 PID: 4935 Comm: syz.2.445 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.103117][ T4935] Tainted: [W]=WARN [ 70.103124][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.103216][ T4935] Call Trace: [ 70.103224][ T4935] [ 70.103302][ T4935] __dump_stack+0x1d/0x30 [ 70.103324][ T4935] dump_stack_lvl+0xe8/0x140 [ 70.103361][ T4935] dump_stack+0x15/0x1b [ 70.103380][ T4935] should_fail_ex+0x265/0x280 [ 70.103414][ T4935] should_fail+0xb/0x20 [ 70.103429][ T4935] should_fail_usercopy+0x1a/0x20 [ 70.103499][ T4935] strncpy_from_user+0x25/0x230 [ 70.103604][ T4935] ? kmem_cache_alloc_noprof+0x242/0x480 [ 70.103637][ T4935] ? getname_flags+0x80/0x3b0 [ 70.103743][ T4935] getname_flags+0xae/0x3b0 [ 70.103782][ T4935] __x64_sys_mknodat+0x4f/0x70 [ 70.103811][ T4935] x64_sys_call+0x2ed7/0x3000 [ 70.103834][ T4935] do_syscall_64+0xd2/0x200 [ 70.103858][ T4935] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.103893][ T4935] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.103954][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.104042][ T4935] RIP: 0033:0x7f4ec444f749 [ 70.104057][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.104078][ T4935] RSP: 002b:00007f4ec2eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 70.104116][ T4935] RAX: ffffffffffffffda RBX: 00007f4ec46a5fa0 RCX: 00007f4ec444f749 [ 70.104132][ T4935] RDX: 0000000000001000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 70.104147][ T4935] RBP: 00007f4ec2eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 70.104162][ T4935] R10: 0000000000000704 R11: 0000000000000246 R12: 0000000000000001 [ 70.104175][ T4935] R13: 00007f4ec46a6038 R14: 00007f4ec46a5fa0 R15: 00007ffe14046d08 [ 70.104192][ T4935] [ 70.418382][ T4942] loop6: detected capacity change from 0 to 8192 [ 70.469999][ T4945] loop6: p1 < > p2 < > p3 p4 < > [ 70.475125][ T4945] loop6: partition table partially beyond EOD, truncated [ 70.484646][ T4947] loop5: detected capacity change from 0 to 512 [ 70.500831][ T4945] loop6: p1 start 67108864 is beyond EOD, truncated [ 70.507604][ T4945] loop6: p2 start 4278190080 is beyond EOD, truncated [ 70.514479][ T4945] loop6: p3 start 100859904 is beyond EOD, truncated [ 70.532355][ T4942] loop6: p1 < > p2 < > p3 p4 < > [ 70.537423][ T4942] loop6: partition table partially beyond EOD, truncated [ 70.545328][ T4947] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.449: EA inode hash validation failed [ 70.558228][ T4947] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.449: corrupted inode contents [ 70.574877][ T4942] loop6: p1 start 67108864 is beyond EOD, truncated [ 70.581620][ T4942] loop6: p2 start 4278190080 is beyond EOD, truncated [ 70.588447][ T4942] loop6: p3 start 100859904 is beyond EOD, truncated [ 70.605795][ T4947] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.449: mark_inode_dirty error [ 70.627721][ T4947] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.449: corrupted inode contents [ 70.683878][ T4947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.449: mark_inode_dirty error [ 70.709999][ T4947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.449: mark inode dirty (error -117) [ 70.740213][ T4947] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 70.749322][ T4947] EXT4-fs (loop5): 1 orphan inode deleted [ 70.800192][ T4947] EXT4-fs mount: 14 callbacks suppressed [ 70.800215][ T4947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.856787][ T4956] SELinux: failed to load policy [ 70.863381][ T4947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.060584][ T4964] SELinux: failed to load policy [ 71.244949][ T4974] loop2: detected capacity change from 0 to 512 [ 71.270326][ T4974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.289952][ T4974] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.457: couldn't read orphan inode 26 (err -116) [ 71.328923][ T4974] EXT4-fs (loop2): Remounting filesystem read-only [ 71.343161][ T4974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.380562][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 71.380578][ T29] audit: type=1400 audit(1764196767.089:2094): avc: denied { ioctl } for pid=4969 comm="syz.2.457" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.468577][ T29] audit: type=1400 audit(1764196767.179:2095): avc: denied { mounton } for pid=4969 comm="syz.2.457" path="/114/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.479545][ T4959] syz.3.453 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 71.502975][ T4959] CPU: 1 UID: 0 PID: 4959 Comm: syz.3.453 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.503018][ T4959] Tainted: [W]=WARN [ 71.503025][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.503038][ T4959] Call Trace: [ 71.503047][ T4959] [ 71.503057][ T4959] __dump_stack+0x1d/0x30 [ 71.503080][ T4959] dump_stack_lvl+0xe8/0x140 [ 71.503100][ T4959] dump_stack+0x15/0x1b [ 71.503150][ T4959] dump_header+0x81/0x220 [ 71.503174][ T4959] oom_kill_process+0x342/0x400 [ 71.503216][ T4959] out_of_memory+0x979/0xb80 [ 71.503258][ T4959] try_charge_memcg+0x610/0xa10 [ 71.503349][ T4959] charge_memcg+0x51/0xc0 [ 71.503379][ T4959] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 71.503436][ T4959] __read_swap_cache_async+0x17b/0x2d0 [ 71.503459][ T4959] swap_cluster_readahead+0x262/0x3c0 [ 71.503495][ T4959] swapin_readahead+0xde/0x800 [ 71.503521][ T4959] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 71.503589][ T4959] ? css_rstat_updated+0xb7/0x240 [ 71.503614][ T4959] ? bpf_perf_event_read+0x137/0x150 [ 71.503653][ T4959] ? __rcu_read_unlock+0x4f/0x70 [ 71.503764][ T4959] ? swap_cache_get_folio+0x277/0x280 [ 71.503792][ T4959] do_swap_page+0x2ae/0x2370 [ 71.503825][ T4959] ? _raw_spin_unlock+0x26/0x50 [ 71.503923][ T4959] ? finish_task_switch+0xad/0x2b0 [ 71.503957][ T4959] ? __pfx_default_wake_function+0x10/0x10 [ 71.503994][ T4959] handle_mm_fault+0x9a5/0x2be0 [ 71.504024][ T4959] ? vma_start_read+0x141/0x1f0 [ 71.504160][ T4959] do_user_addr_fault+0x630/0x1080 [ 71.504181][ T4959] ? fpregs_restore_userregs+0xe2/0x1d0 [ 71.504216][ T4959] ? switch_fpu_return+0xe/0x20 [ 71.504316][ T4959] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.504342][ T4959] exc_page_fault+0x62/0xa0 [ 71.504376][ T4959] asm_exc_page_fault+0x26/0x30 [ 71.504423][ T4959] RIP: 0033:0x7f91690e59ec [ 71.504443][ T4959] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 71.504465][ T4959] RSP: 002b:00007ffce1835cc0 EFLAGS: 00010206 [ 71.504484][ T4959] RAX: 0000000000000000 RBX: 00007f9169465fa0 RCX: 0000000000000000 [ 71.504500][ T4959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a206808 [ 71.504515][ T4959] RBP: 00007f9169467da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 71.504530][ T4959] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000117c8 [ 71.504541][ T4959] R13: 00007f9169466090 R14: ffffffffffffffff R15: 00007ffce1835dd0 [ 71.504627][ T4959] [ 71.504635][ T4959] memory: usage 307200kB, limit 307200kB, failcnt 205 [ 71.599777][ T29] audit: type=1326 audit(1764196767.309:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f056edb65e7 code=0x7ffc0000 [ 71.600082][ T4959] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 71.605537][ T29] audit: type=1326 audit(1764196767.319:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f056ed5b829 code=0x7ffc0000 [ 71.610428][ T4959] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 71.610442][ T4959] Memory cgroup stats for /syz3: [ 71.610836][ T4959] cache 0 [ 71.618412][ T29] audit: type=1326 audit(1764196767.339:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f056edb65e7 code=0x7ffc0000 [ 71.620837][ T4959] rss 0 [ 71.625472][ T29] audit: type=1326 audit(1764196767.339:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f056ed5b829 code=0x7ffc0000 [ 71.630405][ T4959] shmem 0 [ 71.635516][ T29] audit: type=1326 audit(1764196767.339:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 71.641378][ T4959] mapped_file 0 [ 71.646185][ T29] audit: type=1326 audit(1764196767.339:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 71.651105][ T4959] dirty 0 [ 71.651118][ T4959] writeback 8192 [ 71.651125][ T4959] workingset_refault_anon 8 [ 71.651135][ T4959] workingset_refault_file 128 [ 71.656268][ T29] audit: type=1326 audit(1764196767.339:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 71.656297][ T29] audit: type=1326 audit(1764196767.339:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f056edb65e7 code=0x7ffc0000 [ 71.998407][ T4959] swap 192512 [ 72.001793][ T4959] swapcached 8192 [ 72.005441][ T4959] pgpgin 26948 [ 72.008813][ T4959] pgpgout 26941 [ 72.012312][ T4959] pgfault 36524 [ 72.015790][ T4959] pgmajfault 7 [ 72.019173][ T4959] inactive_anon 8192 [ 72.023100][ T4959] active_anon 0 [ 72.026602][ T4959] inactive_file 20480 [ 72.030673][ T4959] active_file 0 [ 72.034141][ T4959] unevictable 0 [ 72.037751][ T4959] hierarchical_memory_limit 314572800 [ 72.043174][ T4959] hierarchical_memsw_limit 9223372036854771712 [ 72.049415][ T4959] total_cache 0 [ 72.052905][ T4959] total_rss 0 [ 72.056207][ T4959] total_shmem 0 [ 72.059768][ T4959] total_mapped_file 0 [ 72.063754][ T4959] total_dirty 0 [ 72.067239][ T4959] total_writeback 8192 [ 72.071870][ T4959] total_workingset_refault_anon 8 [ 72.076904][ T4959] total_workingset_refault_file 128 [ 72.082261][ T4959] total_swap 192512 [ 72.086075][ T4959] total_swapcached 8192 [ 72.090284][ T4959] total_pgpgin 26948 [ 72.094253][ T4959] total_pgpgout 26941 [ 72.098250][ T4959] total_pgfault 36524 [ 72.102389][ T4959] total_pgmajfault 7 [ 72.106319][ T4959] total_inactive_anon 8192 [ 72.110818][ T4959] total_active_anon 0 [ 72.114826][ T4959] total_inactive_file 20480 [ 72.119344][ T4959] total_active_file 0 [ 72.123382][ T4959] total_unevictable 0 [ 72.127369][ T4959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.453,pid=4959,uid=0 [ 72.141971][ T4959] Memory cgroup out of memory: Killed process 4959 (syz.3.453) total-vm:93968kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 72.193520][ T4962] syz.3.453 (4962) used greatest stack depth: 9952 bytes left [ 72.253439][ T4992] FAULT_INJECTION: forcing a failure. [ 72.253439][ T4992] name failslab, interval 1, probability 0, space 0, times 0 [ 72.266242][ T4992] CPU: 1 UID: 0 PID: 4992 Comm: syz.6.464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.266286][ T4992] Tainted: [W]=WARN [ 72.266293][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.266306][ T4992] Call Trace: [ 72.266316][ T4992] [ 72.266326][ T4992] __dump_stack+0x1d/0x30 [ 72.266354][ T4992] dump_stack_lvl+0xe8/0x140 [ 72.266378][ T4992] dump_stack+0x15/0x1b [ 72.266481][ T4992] should_fail_ex+0x265/0x280 [ 72.266517][ T4992] ? nd_alloc_stack+0x50/0xa0 [ 72.266598][ T4992] should_failslab+0x8c/0xb0 [ 72.266633][ T4992] __kmalloc_cache_noprof+0x4c/0x4a0 [ 72.266665][ T4992] ? __pfx_shmem_get_link+0x10/0x10 [ 72.266768][ T4992] nd_alloc_stack+0x50/0xa0 [ 72.266808][ T4992] pick_link+0x78e/0x830 [ 72.266842][ T4992] ? __d_lookup_rcu+0x248/0x2a0 [ 72.266866][ T4992] step_into+0x790/0x7f0 [ 72.266899][ T4992] ? inode_permission+0x106/0x310 [ 72.266991][ T4992] link_path_walk+0x571/0x900 [ 72.267032][ T4992] path_lookupat+0x63/0x2a0 [ 72.267070][ T4992] filename_lookup+0x147/0x340 [ 72.267112][ T4992] ? __pfx_shmem_put_link+0x10/0x10 [ 72.267144][ T4992] ? __pfx_shmem_put_link+0x10/0x10 [ 72.267176][ T4992] filename_setxattr+0x56/0x400 [ 72.267258][ T4992] path_setxattrat+0x2c9/0x310 [ 72.267356][ T4992] __x64_sys_setxattr+0x6e/0x90 [ 72.267390][ T4992] x64_sys_call+0xad2/0x3000 [ 72.267413][ T4992] do_syscall_64+0xd2/0x200 [ 72.267480][ T4992] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.267514][ T4992] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.267630][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.267692][ T4992] RIP: 0033:0x7f897fb0f749 [ 72.267710][ T4992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.267732][ T4992] RSP: 002b:00007f897e56f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 72.267757][ T4992] RAX: ffffffffffffffda RBX: 00007f897fd65fa0 RCX: 00007f897fb0f749 [ 72.267770][ T4992] RDX: 0000200000000400 RSI: 0000200000000380 RDI: 0000200000000280 [ 72.267782][ T4992] RBP: 00007f897e56f090 R08: 0000000000000003 R09: 0000000000000000 [ 72.267794][ T4992] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 72.267877][ T4992] R13: 00007f897fd66038 R14: 00007f897fd65fa0 R15: 00007ffe3e505b08 [ 72.267898][ T4992] [ 72.541215][ T4960] syz.3.453 (4960) used greatest stack depth: 7496 bytes left [ 72.555620][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.616636][ T5001] __nla_validate_parse: 8 callbacks suppressed [ 72.616654][ T5001] netlink: 19 bytes leftover after parsing attributes in process `syz.0.468'. [ 72.659902][ T5007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5007 comm=syz.5.471 [ 72.672508][ T5007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5007 comm=syz.5.471 [ 72.686898][ T5004] loop6: detected capacity change from 0 to 8192 [ 72.697647][ T5009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5009 comm=syz.3.470 [ 72.713524][ T5001] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 72.751967][ T5004] loop6: p1 < > p2 < > p3 p4 < > [ 72.757048][ T5004] loop6: partition table partially beyond EOD, truncated [ 72.769802][ T5004] loop6: p1 start 67108864 is beyond EOD, truncated [ 72.776465][ T5004] loop6: p2 start 4278190080 is beyond EOD, truncated [ 72.783188][ T5013] loop3: detected capacity change from 0 to 512 [ 72.783309][ T5004] loop6: p3 start 100859904 is beyond EOD, truncated [ 72.820388][ T5013] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.474: EA inode hash validation failed [ 72.856599][ T5013] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.474: corrupted inode contents [ 72.868711][ T5013] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.474: mark_inode_dirty error [ 72.880569][ T5013] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.474: corrupted inode contents [ 72.892802][ T5013] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.474: mark_inode_dirty error [ 72.905043][ T5013] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.474: mark inode dirty (error -117) [ 72.918238][ T5013] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 72.927665][ T5013] EXT4-fs (loop3): 1 orphan inode deleted [ 72.935546][ T5013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.935887][ T5021] loop5: detected capacity change from 0 to 512 [ 72.948860][ T5013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.971555][ T5021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.992115][ T5021] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.021578][ T5021] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.072425][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.086047][ T5042] loop3: detected capacity change from 0 to 128 [ 73.378667][ T5083] loop5: detected capacity change from 0 to 512 [ 73.424886][ T5083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.442857][ T5083] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.460397][ T5085] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.487976][ T5083] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 73.504868][ T5085] SELinux: failed to load policy [ 73.595604][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.621499][ T5105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.501'. [ 73.639823][ T5105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.501'. [ 73.666168][ T5107] can0: slcan on ptm0. [ 73.899115][ T5119] loop5: detected capacity change from 0 to 8192 [ 73.938355][ T5123] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.948357][ T5119] loop5: p1 < > p2 < > p3 p4 < > [ 73.953476][ T5119] loop5: partition table partially beyond EOD, truncated [ 73.963285][ T5119] loop5: p1 start 67108864 is beyond EOD, truncated [ 73.970165][ T5119] loop5: p2 start 4278190080 is beyond EOD, truncated [ 73.977059][ T5119] loop5: p3 start 100859904 is beyond EOD, truncated [ 73.980379][ T5123] SELinux: failed to load policy [ 74.006710][ T5124] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 74.021090][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.511'. [ 74.066206][ T5129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.511'. [ 74.120174][ T5134] loop2: detected capacity change from 0 to 512 [ 74.158389][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.178199][ T5134] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.230459][ T5144] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.515'. [ 74.294682][ T5134] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 74.352202][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 74.369848][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 74.461448][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.472708][ T5143] Set syz1 is full, maxelem 65536 reached [ 74.512924][ T5155] loop2: detected capacity change from 0 to 512 [ 74.541219][ T5155] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.520: EA inode hash validation failed [ 74.566186][ T5155] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.520: corrupted inode contents [ 74.578046][ T5106] can0 (unregistered): slcan off ptm0. [ 74.589916][ T5155] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.520: mark_inode_dirty error [ 74.611553][ T5162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.523'. [ 74.621307][ T5160] SELinux: failed to load policy [ 74.627705][ T5155] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.520: corrupted inode contents [ 74.697462][ T5155] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.520: mark_inode_dirty error [ 74.722654][ T5155] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.520: mark inode dirty (error -117) [ 74.745301][ T5155] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 74.786991][ T5155] EXT4-fs (loop2): 1 orphan inode deleted [ 74.795993][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.530'. [ 74.796298][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.852824][ T5155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.964655][ T5190] loop6: detected capacity change from 0 to 8192 [ 74.989454][ T5192] SELinux: failed to load policy [ 75.020054][ T5190] loop6: p1 < > p2 < > p3 p4 < > [ 75.025257][ T5190] loop6: partition table partially beyond EOD, truncated [ 75.032735][ T5190] loop6: p1 start 67108864 is beyond EOD, truncated [ 75.039374][ T5190] loop6: p2 start 4278190080 is beyond EOD, truncated [ 75.046369][ T5190] loop6: p3 start 100859904 is beyond EOD, truncated [ 75.302831][ T5210] bridge3: entered promiscuous mode [ 75.427339][ T5220] loop6: detected capacity change from 0 to 512 [ 75.452083][ T5218] SELinux: failed to load policy [ 75.458269][ T5220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.471061][ T5220] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.483774][ T5220] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.518205][ T3653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.622273][ T5232] lo speed is unknown, defaulting to 1000 [ 75.644521][ T5233] block device autoloading is deprecated and will be removed. [ 75.782023][ T5235] loop3: detected capacity change from 0 to 8192 [ 75.791849][ T5240] loop0: detected capacity change from 0 to 512 [ 75.822380][ T5240] loop0: detected capacity change from 0 to 1764 [ 75.829955][ T5235] loop3: p1 < > p2 < > p3 p4 < > [ 75.835023][ T5235] loop3: partition table partially beyond EOD, truncated [ 75.857810][ T5235] loop3: p1 start 67108864 is beyond EOD, truncated [ 75.864655][ T5235] loop3: p2 start 4278190080 is beyond EOD, truncated [ 75.871544][ T5235] loop3: p3 start 100859904 is beyond EOD, truncated [ 76.208354][ T5260] loop3: detected capacity change from 0 to 512 [ 76.228259][ T5260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.243335][ T5260] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.257102][ T5260] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 76.288557][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.297143][ T5270] loop5: detected capacity change from 0 to 512 [ 76.311253][ T5270] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.558: inode has both inline data and extents flags [ 76.326552][ T5270] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.558: couldn't read orphan inode 15 (err -117) [ 76.339286][ T5270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.395663][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 76.395686][ T29] audit: type=1326 audit(1764201892.115:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f897fb065e7 code=0x7ffc0000 [ 76.427141][ T29] audit: type=1326 audit(1764201892.145:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f897faab829 code=0x7ffc0000 [ 76.450633][ T29] audit: type=1326 audit(1764201892.145:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f897fb065e7 code=0x7ffc0000 [ 76.474042][ T29] audit: type=1326 audit(1764201892.145:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f897faab829 code=0x7ffc0000 [ 76.497480][ T29] audit: type=1326 audit(1764201892.145:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f897fb065e7 code=0x7ffc0000 [ 76.521572][ T29] audit: type=1326 audit(1764201892.145:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f897faab829 code=0x7ffc0000 [ 76.545108][ T29] audit: type=1326 audit(1764201892.145:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5228 comm="syz.6.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897fb0f749 code=0x7ffc0000 [ 76.573139][ T29] audit: type=1326 audit(1764201892.295:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.6.562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897fb0f749 code=0x0 [ 76.596795][ T5280] loop3: detected capacity change from 0 to 8192 [ 76.624775][ T5283] netlink: 'syz.2.563': attribute type 12 has an invalid length. [ 76.632897][ T5284] hsr_slave_0: left promiscuous mode [ 76.640393][ T5284] hsr_slave_1: left promiscuous mode [ 76.650032][ T5280] loop3: p1 < > p2 < > p3 p4 < > [ 76.655120][ T5280] loop3: partition table partially beyond EOD, truncated [ 76.701051][ T29] audit: type=1400 audit(1764201892.425:2588): avc: denied { unmount } for pid=3584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.722651][ T5280] loop3: p1 start 67108864 is beyond EOD, truncated [ 76.729420][ T5280] loop3: p2 start 4278190080 is beyond EOD, truncated [ 76.736276][ T5280] loop3: p3 start 100859904 is beyond EOD, truncated [ 76.747039][ T29] audit: type=1400 audit(1764201892.425:2589): avc: denied { remove_name } for pid=3584 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.747712][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.830313][ T5290] loop2: detected capacity change from 0 to 2048 [ 76.877234][ T5290] Alternate GPT is invalid, using primary GPT. [ 76.883681][ T5290] loop2: p1 p2 p3 [ 76.887758][ T5290] loop2: partition table partially beyond EOD, truncated [ 76.888449][ T5295] loop5: detected capacity change from 0 to 512 [ 76.913168][ T5295] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.568: EA inode hash validation failed [ 76.925926][ T5295] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.568: corrupted inode contents [ 76.939604][ T5295] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.568: mark_inode_dirty error [ 76.951651][ T5295] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.568: corrupted inode contents [ 76.979807][ T5295] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.568: mark_inode_dirty error [ 76.992042][ T5295] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.568: mark inode dirty (error -117) [ 77.004882][ T5295] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 77.015699][ T5295] EXT4-fs (loop5): 1 orphan inode deleted [ 77.023244][ T5295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.048300][ T5295] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.088642][ T5300] loop5: detected capacity change from 0 to 512 [ 77.101470][ T5300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.114353][ T5300] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.114378][ T5286] Set syz1 is full, maxelem 65536 reached [ 77.133577][ T5300] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.181387][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.333930][ T5322] FAULT_INJECTION: forcing a failure. [ 77.333930][ T5322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.347091][ T5322] CPU: 1 UID: 0 PID: 5322 Comm: syz.0.576 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.347204][ T5322] Tainted: [W]=WARN [ 77.347212][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.347228][ T5322] Call Trace: [ 77.347257][ T5322] [ 77.347263][ T5322] __dump_stack+0x1d/0x30 [ 77.347284][ T5322] dump_stack_lvl+0xe8/0x140 [ 77.347301][ T5322] dump_stack+0x15/0x1b [ 77.347317][ T5322] should_fail_ex+0x265/0x280 [ 77.347349][ T5322] should_fail+0xb/0x20 [ 77.347367][ T5322] should_fail_usercopy+0x1a/0x20 [ 77.347386][ T5322] _copy_from_iter+0xd2/0xe80 [ 77.347408][ T5322] ? alloc_pages_mpol+0x217/0x260 [ 77.347430][ T5322] copy_page_from_iter+0x178/0x2a0 [ 77.347503][ T5322] tun_get_user+0x679/0x26e0 [ 77.347536][ T5322] ? ref_tracker_alloc+0x1f2/0x2f0 [ 77.347604][ T5322] tun_chr_write_iter+0x15e/0x210 [ 77.347774][ T5322] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 77.347798][ T5322] vfs_write+0x52a/0x960 [ 77.347826][ T5322] ksys_write+0xda/0x1a0 [ 77.347909][ T5322] __x64_sys_write+0x40/0x50 [ 77.347942][ T5322] x64_sys_call+0x2802/0x3000 [ 77.347962][ T5322] do_syscall_64+0xd2/0x200 [ 77.347981][ T5322] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.348006][ T5322] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.348119][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.348147][ T5322] RIP: 0033:0x7f056edbe1ff [ 77.348164][ T5322] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 77.348187][ T5322] RSP: 002b:00007f056d827000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.348212][ T5322] RAX: ffffffffffffffda RBX: 00007f056f015fa0 RCX: 00007f056edbe1ff [ 77.348224][ T5322] RDX: 0000000000000082 RSI: 0000200000001180 RDI: 00000000000000c8 [ 77.348289][ T5322] RBP: 00007f056d827090 R08: 0000000000000000 R09: 0000000000000000 [ 77.348368][ T5322] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 77.348379][ T5322] R13: 00007f056f016038 R14: 00007f056f015fa0 R15: 00007ffefc2cea38 [ 77.348397][ T5322] [ 77.807076][ T5341] __nla_validate_parse: 5 callbacks suppressed [ 77.807142][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 77.944333][ T5345] loop3: detected capacity change from 0 to 8192 [ 78.001053][ T5345] loop3: p1 < > p2 < > p3 p4 < > [ 78.006149][ T5345] loop3: partition table partially beyond EOD, truncated [ 78.013384][ T5345] loop3: p1 start 67108864 is beyond EOD, truncated [ 78.020072][ T5345] loop3: p2 start 4278190080 is beyond EOD, truncated [ 78.026899][ T5345] loop3: p3 start 100859904 is beyond EOD, truncated [ 78.065753][ T5347] FAULT_INJECTION: forcing a failure. [ 78.065753][ T5347] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.079087][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.2.588 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.079134][ T5347] Tainted: [W]=WARN [ 78.079143][ T5347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.079161][ T5347] Call Trace: [ 78.079169][ T5347] [ 78.079177][ T5347] __dump_stack+0x1d/0x30 [ 78.079202][ T5347] dump_stack_lvl+0xe8/0x140 [ 78.079284][ T5347] dump_stack+0x15/0x1b [ 78.079303][ T5347] should_fail_ex+0x265/0x280 [ 78.079341][ T5347] should_fail_alloc_page+0xf2/0x100 [ 78.079386][ T5347] __alloc_frozen_pages_noprof+0xff/0x360 [ 78.079443][ T5347] alloc_pages_mpol+0xb3/0x260 [ 78.079476][ T5347] alloc_pages_noprof+0x90/0x130 [ 78.079515][ T5347] pte_alloc_one+0x1e/0xd0 [ 78.079572][ T5347] __pte_alloc+0x32/0x290 [ 78.079679][ T5347] handle_mm_fault+0x1c18/0x2be0 [ 78.079711][ T5347] ? mt_find+0x21b/0x330 [ 78.079749][ T5347] do_user_addr_fault+0x3fe/0x1080 [ 78.079813][ T5347] exc_page_fault+0x62/0xa0 [ 78.079859][ T5347] asm_exc_page_fault+0x26/0x30 [ 78.079888][ T5347] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 78.079996][ T5347] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 78.080015][ T5347] RSP: 0018:ffffc900086b7d28 EFLAGS: 00050206 [ 78.080120][ T5347] RAX: ffff888104361b20 RBX: 0000000000000090 RCX: 0000000000000090 [ 78.080138][ T5347] RDX: 0000000000000000 RSI: ffffc900086b7e20 RDI: 0000200000000180 [ 78.080155][ T5347] RBP: ffff888115dea240 R08: 0000000000000c1d R09: 0000000000000000 [ 78.080173][ T5347] R10: 0001c900086b7e20 R11: 0001c900086b7eaf R12: 0000200000000210 [ 78.080191][ T5347] R13: 00007ffffffff000 R14: 0000200000000180 R15: ffffc900086b7e20 [ 78.080218][ T5347] _copy_to_user+0x7c/0xa0 [ 78.080257][ T5347] __se_sys_newfstat+0x264/0x2e0 [ 78.080379][ T5347] __x64_sys_newfstat+0x31/0x40 [ 78.080422][ T5347] x64_sys_call+0x2768/0x3000 [ 78.080486][ T5347] do_syscall_64+0xd2/0x200 [ 78.080515][ T5347] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.080557][ T5347] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.080602][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.080654][ T5347] RIP: 0033:0x7f4ec444f749 [ 78.080731][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.080752][ T5347] RSP: 002b:00007f4ec2eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 78.080776][ T5347] RAX: ffffffffffffffda RBX: 00007f4ec46a5fa0 RCX: 00007f4ec444f749 [ 78.080792][ T5347] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 78.080805][ T5347] RBP: 00007f4ec2eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 78.080818][ T5347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.080899][ T5347] R13: 00007f4ec46a6038 R14: 00007f4ec46a5fa0 R15: 00007ffe14046d08 [ 78.080920][ T5347] [ 78.403468][ T5352] loop2: detected capacity change from 0 to 512 [ 78.410902][ T5352] EXT4-fs (loop2): filesystem is read-only [ 78.417082][ T5352] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 78.428186][ T5352] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1)! [ 78.438557][ T5352] EXT4-fs (loop2): group descriptors corrupted! [ 78.485124][ T5359] loop2: detected capacity change from 0 to 512 [ 78.494760][ T5359] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.593: EA inode hash validation failed [ 78.513593][ T5359] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.593: corrupted inode contents [ 78.526060][ T5359] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.593: mark_inode_dirty error [ 78.537782][ T5359] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.593: corrupted inode contents [ 78.554322][ T5359] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.593: mark_inode_dirty error [ 78.576613][ T5359] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.593: mark inode dirty (error -117) [ 78.589524][ T5359] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 78.601166][ T5359] EXT4-fs (loop2): 1 orphan inode deleted [ 78.607624][ T5359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.620770][ T5359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.641239][ T5366] lo speed is unknown, defaulting to 1000 [ 78.766122][ T5370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=5370 comm=syz.6.596 [ 78.809534][ T5370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.596'. [ 78.901497][ T5379] loop3: detected capacity change from 0 to 1024 [ 78.921380][ T5379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.938603][ T5379] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 78.974672][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.601'. [ 78.975005][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.601'. [ 79.025055][ T5388] lo speed is unknown, defaulting to 1000 [ 79.033512][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.121923][ T5393] loop3: detected capacity change from 0 to 512 [ 79.134073][ T5393] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.613: EA inode hash validation failed [ 79.150060][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.603'. [ 79.161038][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.613: corrupted inode contents [ 79.173787][ T5393] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.613: mark_inode_dirty error [ 79.185514][ T5393] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.613: corrupted inode contents [ 79.203067][ T5393] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.613: mark_inode_dirty error [ 79.230299][ T5393] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.613: mark inode dirty (error -117) [ 79.254462][ T5393] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 79.266483][ T5393] EXT4-fs (loop3): 1 orphan inode deleted [ 79.276382][ T5393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.291109][ T5393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.405848][ T5410] loop6: detected capacity change from 0 to 8192 [ 79.440983][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 79.451648][ T5415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 79.473777][ T5410] loop6: p1 < > p2 < > p3 p4 < > [ 79.478957][ T5410] loop6: partition table partially beyond EOD, truncated [ 79.489795][ T5410] loop6: p1 start 67108864 is beyond EOD, truncated [ 79.496627][ T5410] loop6: p2 start 4278190080 is beyond EOD, truncated [ 79.503617][ T5410] loop6: p3 start 100859904 is beyond EOD, truncated [ 79.712764][ T5446] loop2: detected capacity change from 0 to 128 [ 80.158783][ T5457] loop5: detected capacity change from 0 to 512 [ 80.193738][ T5457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.207396][ T5460] loop2: detected capacity change from 0 to 512 [ 80.224858][ T5460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.229191][ T5457] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.240574][ T5460] EXT4-fs (loop2): 1 truncate cleaned up [ 80.255238][ T5457] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 80.270412][ T5460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.306777][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.330218][ T5472] loop2: detected capacity change from 0 to 512 [ 80.338184][ T5472] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.631: inode has both inline data and extents flags [ 80.354729][ T5472] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.631: couldn't read orphan inode 15 (err -117) [ 80.365189][ T5470] loop6: detected capacity change from 0 to 8192 [ 80.367435][ T5472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.398809][ T5472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.411532][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.425601][ T5472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.469991][ T5470] loop6: p1 < > p2 < > p3 p4 < > [ 80.475137][ T5470] loop6: partition table partially beyond EOD, truncated [ 80.489443][ T5478] loop5: detected capacity change from 0 to 8192 [ 80.496348][ T5470] loop6: p1 start 67108864 is beyond EOD, truncated [ 80.503184][ T5470] loop6: p2 start 4278190080 is beyond EOD, truncated [ 80.510061][ T5470] loop6: p3 start 100859904 is beyond EOD, truncated [ 80.555187][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.570646][ T5482] netlink: 'syz.3.635': attribute type 10 has an invalid length. [ 80.578449][ T5482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.635'. [ 80.592272][ T5478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5478 comm=syz.5.634 [ 80.610503][ T5482] team0: Port device geneve1 added [ 80.665926][ T5494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.637'. [ 80.683377][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=5494 comm=syz.5.637 [ 80.709454][ T5494] loop5: detected capacity change from 0 to 1764 [ 80.757729][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.643'. [ 80.817413][ T5506] SELinux: failed to load policy [ 80.896108][ T5513] loop6: detected capacity change from 0 to 512 [ 80.935422][ T5513] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.647: EA inode hash validation failed [ 80.948530][ T5513] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.647: corrupted inode contents [ 80.961190][ T5513] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.647: mark_inode_dirty error [ 80.973081][ T5513] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.647: corrupted inode contents [ 80.987804][ T5513] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.647: mark_inode_dirty error [ 81.000163][ T5513] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.647: mark inode dirty (error -117) [ 81.013264][ T5513] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 81.022468][ T5513] EXT4-fs (loop6): 1 orphan inode deleted [ 81.028871][ T5513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.042694][ T5513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.044053][ T5520] loop5: detected capacity change from 0 to 8192 [ 81.093116][ T5520] loop5: p1 < > p2 < > p3 p4 < > [ 81.098274][ T5520] loop5: partition table partially beyond EOD, truncated [ 81.109962][ T5520] loop5: p1 start 67108864 is beyond EOD, truncated [ 81.116643][ T5520] loop5: p2 start 4278190080 is beyond EOD, truncated [ 81.123655][ T5520] loop5: p3 start 100859904 is beyond EOD, truncated [ 81.219371][ T5537] SELinux: failed to load policy [ 81.219928][ T5530] loop6: detected capacity change from 0 to 1764 [ 81.402748][ T5556] loop6: detected capacity change from 0 to 512 [ 81.450527][ T5556] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.663: EA inode hash validation failed [ 81.508651][ T5556] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.663: corrupted inode contents [ 81.547000][ T5556] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.663: mark_inode_dirty error [ 81.559546][ T5556] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.663: corrupted inode contents [ 81.571933][ T5556] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.663: mark_inode_dirty error [ 81.589033][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 81.589048][ T29] audit: type=1326 audit(1764209833.315:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352e73f749 code=0x0 [ 81.618071][ T29] audit: type=1326 audit(1764209833.315:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.5.664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352e73f749 code=0x0 [ 81.645387][ T5556] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.663: mark inode dirty (error -117) [ 81.658087][ T5556] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 81.667479][ T29] audit: type=1326 audit(1764209833.385:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.690862][ T29] audit: type=1326 audit(1764209833.385:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.714285][ T29] audit: type=1326 audit(1764209833.385:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.737768][ T29] audit: type=1326 audit(1764209833.385:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.761388][ T29] audit: type=1326 audit(1764209833.385:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.764510][ T5556] EXT4-fs (loop6): 1 orphan inode deleted [ 81.784964][ T29] audit: type=1326 audit(1764209833.385:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.821945][ T5556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.836099][ T29] audit: type=1326 audit(1764209833.415:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.862799][ T5556] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.924637][ T5580] loop6: detected capacity change from 0 to 512 [ 81.933185][ T5572] loop2: detected capacity change from 0 to 8192 [ 81.939651][ T29] audit: type=1326 audit(1764209833.655:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056edbf749 code=0x7ffc0000 [ 81.956029][ T5577] SELinux: failed to load policy [ 81.965234][ T5580] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.672: EA inode hash validation failed [ 81.981045][ T5580] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.672: corrupted inode contents [ 81.993457][ T5572] loop2: p1 < > p2 < > p3 p4 < > [ 81.994167][ T5580] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.672: mark_inode_dirty error [ 81.998552][ T5572] loop2: partition table partially beyond EOD, truncated [ 82.010000][ T5580] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.672: corrupted inode contents [ 82.017231][ T5572] loop2: p1 start 67108864 is beyond EOD, truncated [ 82.028955][ T5580] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.672: mark_inode_dirty error [ 82.035517][ T5572] loop2: p2 start 4278190080 is beyond EOD, truncated [ 82.035542][ T5572] loop2: p3 start 100859904 is beyond EOD, truncated [ 82.061597][ T5580] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.672: mark inode dirty (error -117) [ 82.077372][ T5580] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 82.090172][ T5580] EXT4-fs (loop6): 1 orphan inode deleted [ 82.096494][ T5580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.114728][ T5580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.156805][ T5587] bridge_slave_0: left allmulticast mode [ 82.162603][ T5587] bridge_slave_0: left promiscuous mode [ 82.168362][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.179266][ T5587] bridge_slave_1: left allmulticast mode [ 82.185164][ T5587] bridge_slave_1: left promiscuous mode [ 82.190915][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.202002][ T5587] bond0: (slave bond_slave_0): Releasing backup interface [ 82.202778][ T5594] netlink: 'syz.5.675': attribute type 10 has an invalid length. [ 82.224976][ T5587] bond0: (slave bond_slave_1): Releasing backup interface [ 82.237160][ T5587] team0: Port device team_slave_0 removed [ 82.248216][ T5596] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 82.249942][ T5587] team0: Port device team_slave_1 removed [ 82.265079][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.272691][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.282168][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.289616][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.300046][ T5587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.338329][ T5594] batman_adv: batadv0: Adding interface: veth1_vlan [ 82.345023][ T5594] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.372755][ T5594] batman_adv: batadv0: Interface activated: veth1_vlan [ 82.383130][ T5607] loop0: detected capacity change from 0 to 512 [ 82.410220][ T5605] loop6: detected capacity change from 0 to 2048 [ 82.421633][ T5605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.439047][ T5607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.679: bg 0: block 248: padding at end of block bitmap is not set [ 82.485530][ T5614] loop3: detected capacity change from 0 to 2048 [ 82.493587][ T3653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.500402][ T5607] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.679: Failed to acquire dquot type 1 [ 82.515700][ T5607] EXT4-fs (loop0): 1 truncate cleaned up [ 82.526091][ T5614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.547028][ T5607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.571075][ T5607] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.582625][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.602268][ T5607] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 82.667647][ T5626] loop5: detected capacity change from 0 to 512 [ 82.690990][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.752488][ T5634] SELinux: failed to load policy [ 82.757934][ T5626] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.791946][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.806915][ T5626] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 82.845697][ T5638] loop6: detected capacity change from 0 to 512 [ 82.857737][ T5638] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.877291][ T5638] EXT4-fs (loop6): 1 truncate cleaned up [ 82.883592][ T5638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.920249][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.973571][ T5653] __nla_validate_parse: 13 callbacks suppressed [ 82.973667][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 82.997227][ T3653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.062870][ T5653] SELinux: failed to load policy [ 83.065955][ T5662] x_tables: duplicate underflow at hook 2 [ 83.087004][ T5662] loop3: detected capacity change from 0 to 1024 [ 83.094385][ T5662] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.105458][ T5662] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.121718][ T5662] JBD2: no valid journal superblock found [ 83.127510][ T5662] EXT4-fs (loop3): Could not load journal inode [ 83.145556][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.694'. [ 83.165469][ T5666] loop2: detected capacity change from 0 to 512 [ 83.186437][ T5664] loop5: detected capacity change from 0 to 8192 [ 83.195433][ T5666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.212575][ T5666] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.228346][ T5670] SELinux: Context system_u:object is not valid (left unmapped). [ 83.242614][ T5664] loop5: p1 < > p2 < > p3 p4 < > [ 83.247734][ T5664] loop5: partition table partially beyond EOD, truncated [ 83.270831][ T5666] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.288145][ T5664] loop5: p1 start 67108864 is beyond EOD, truncated [ 83.294915][ T5664] loop5: p2 start 4278190080 is beyond EOD, truncated [ 83.301854][ T5664] loop5: p3 start 100859904 is beyond EOD, truncated [ 83.440939][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.527589][ T5684] loop2: detected capacity change from 0 to 512 [ 83.551902][ T5684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.570066][ T5684] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.605191][ T5684] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.694299][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.707'. [ 83.716112][ T5697] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 83.750674][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.857995][ T5717] loop2: detected capacity change from 0 to 512 [ 83.865267][ T5717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.881711][ T5717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.894906][ T5717] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.919778][ T5720] lo speed is unknown, defaulting to 1000 [ 83.987552][ T5717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.714'. [ 84.025916][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.060333][ T5726] loop6: detected capacity change from 0 to 512 [ 84.085715][ T5726] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.718: bg 0: block 248: padding at end of block bitmap is not set [ 84.101020][ T5726] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.718: Failed to acquire dquot type 1 [ 84.113072][ T5726] EXT4-fs (loop6): 1 truncate cleaned up [ 84.119258][ T5726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.132386][ T5726] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.174873][ T5726] netlink: 'syz.6.718': attribute type 1 has an invalid length. [ 84.182689][ T5726] netlink: 224 bytes leftover after parsing attributes in process `syz.6.718'. [ 84.259328][ T5737] loop5: detected capacity change from 0 to 512 [ 84.270846][ T5739] loop2: detected capacity change from 0 to 512 [ 84.278730][ T5737] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.719: EA inode hash validation failed [ 84.295846][ T3653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.314316][ T5739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.332928][ T5737] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.719: corrupted inode contents [ 84.364523][ T5739] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.443322][ T5739] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 84.458248][ T5737] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.719: mark_inode_dirty error [ 84.476828][ T5737] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.719: corrupted inode contents [ 84.489212][ T5737] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.719: mark_inode_dirty error [ 84.501662][ T5737] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.719: mark inode dirty (error -117) [ 84.514658][ T5737] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 84.523985][ T5737] EXT4-fs (loop5): 1 orphan inode deleted [ 84.530476][ T5737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.579895][ T5737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.617864][ T5749] lo speed is unknown, defaulting to 1000 [ 84.931407][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.972624][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 84.981617][ T5759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 84.998546][ T5758] x_tables: duplicate underflow at hook 2 [ 85.017919][ T5764] FAULT_INJECTION: forcing a failure. [ 85.017919][ T5764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.031258][ T5764] CPU: 0 UID: 0 PID: 5764 Comm: syz.2.726 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.031298][ T5764] Tainted: [W]=WARN [ 85.031362][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.031388][ T5764] Call Trace: [ 85.031394][ T5764] [ 85.031400][ T5764] __dump_stack+0x1d/0x30 [ 85.031428][ T5764] dump_stack_lvl+0xe8/0x140 [ 85.031458][ T5764] dump_stack+0x15/0x1b [ 85.031481][ T5764] should_fail_ex+0x265/0x280 [ 85.031566][ T5764] should_fail+0xb/0x20 [ 85.031583][ T5764] should_fail_usercopy+0x1a/0x20 [ 85.031661][ T5764] _copy_from_user+0x1c/0xb0 [ 85.031702][ T5764] __copy_msghdr+0x244/0x300 [ 85.031747][ T5764] ___sys_sendmsg+0x109/0x1d0 [ 85.031890][ T5764] __x64_sys_sendmsg+0xd4/0x160 [ 85.031963][ T5764] x64_sys_call+0x191e/0x3000 [ 85.031991][ T5764] do_syscall_64+0xd2/0x200 [ 85.032025][ T5764] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.032132][ T5764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.032158][ T5764] RIP: 0033:0x7f4ec444f749 [ 85.032187][ T5764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.032210][ T5764] RSP: 002b:00007f4ec2eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.032229][ T5764] RAX: ffffffffffffffda RBX: 00007f4ec46a5fa0 RCX: 00007f4ec444f749 [ 85.032241][ T5764] RDX: 0000000020000004 RSI: 0000200000002c80 RDI: 0000000000000005 [ 85.032253][ T5764] RBP: 00007f4ec2eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 85.032265][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.032408][ T5764] R13: 00007f4ec46a6038 R14: 00007f4ec46a5fa0 R15: 00007ffe14046d08 [ 85.032428][ T5764] [ 85.039738][ T5758] loop0: detected capacity change from 0 to 1024 [ 85.433045][ T5788] lo speed is unknown, defaulting to 1000 [ 85.504488][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.736'. [ 85.686652][ T5801] netlink: 'syz.6.740': attribute type 1 has an invalid length. [ 85.829603][ T5807] FAULT_INJECTION: forcing a failure. [ 85.829603][ T5807] name failslab, interval 1, probability 0, space 0, times 0 [ 85.842390][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.6.743 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 85.842435][ T5807] Tainted: [W]=WARN [ 85.842444][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.842493][ T5807] Call Trace: [ 85.842501][ T5807] [ 85.842509][ T5807] __dump_stack+0x1d/0x30 [ 85.842533][ T5807] dump_stack_lvl+0xe8/0x140 [ 85.842624][ T5807] dump_stack+0x15/0x1b [ 85.842649][ T5807] should_fail_ex+0x265/0x280 [ 85.842693][ T5807] ? sel_netport_sid_slow+0x11b/0x330 [ 85.842785][ T5807] should_failslab+0x8c/0xb0 [ 85.842829][ T5807] __kmalloc_cache_noprof+0x4c/0x4a0 [ 85.842874][ T5807] sel_netport_sid_slow+0x11b/0x330 [ 85.842910][ T5807] sel_netport_sid+0xe9/0x140 [ 85.843002][ T5807] selinux_socket_connect_helper+0x36b/0x470 [ 85.843048][ T5807] selinux_sctp_bind_connect+0x178/0x250 [ 85.843084][ T5807] security_sctp_bind_connect+0x50/0x90 [ 85.843148][ T5807] sctp_sendmsg+0xee3/0x18d0 [ 85.843177][ T5807] ? selinux_socket_sendmsg+0x131/0x1b0 [ 85.843224][ T5807] ? __pfx_sctp_sendmsg+0x10/0x10 [ 85.843256][ T5807] inet_sendmsg+0xc5/0xd0 [ 85.843287][ T5807] __sock_sendmsg+0x102/0x180 [ 85.843316][ T5807] ____sys_sendmsg+0x345/0x4e0 [ 85.843345][ T5807] ___sys_sendmsg+0x17b/0x1d0 [ 85.843453][ T5807] __sys_sendmmsg+0x178/0x300 [ 85.843492][ T5807] __x64_sys_sendmmsg+0x57/0x70 [ 85.843513][ T5807] x64_sys_call+0x1c4a/0x3000 [ 85.843543][ T5807] do_syscall_64+0xd2/0x200 [ 85.843571][ T5807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.843617][ T5807] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 85.843733][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.843759][ T5807] RIP: 0033:0x7f897fb0f749 [ 85.843778][ T5807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.843797][ T5807] RSP: 002b:00007f897e56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.843903][ T5807] RAX: ffffffffffffffda RBX: 00007f897fd65fa0 RCX: 00007f897fb0f749 [ 85.843918][ T5807] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 85.843956][ T5807] RBP: 00007f897e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.843972][ T5807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.843986][ T5807] R13: 00007f897fd66038 R14: 00007f897fd65fa0 R15: 00007ffe3e505b08 [ 85.844009][ T5807] [ 86.263651][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 86.282640][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 86.348338][ T5837] lo speed is unknown, defaulting to 1000 [ 86.592817][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 86.592835][ T29] audit: type=1400 audit(1764212398.317:3244): avc: denied { map_create } for pid=5852 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.618644][ T29] audit: type=1400 audit(1764212398.317:3245): avc: denied { prog_load } for pid=5852 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.638126][ T29] audit: type=1400 audit(1764212398.317:3246): avc: denied { create } for pid=5852 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 86.669542][ T29] audit: type=1400 audit(1764212398.317:3247): avc: denied { map_create } for pid=5854 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.688789][ T29] audit: type=1400 audit(1764212398.317:3248): avc: denied { prog_load } for pid=5854 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.707804][ T29] audit: type=1400 audit(1764212398.317:3249): avc: denied { prog_load } for pid=5854 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.726970][ T29] audit: type=1400 audit(1764212398.317:3250): avc: denied { create } for pid=5854 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 86.746563][ T29] audit: type=1400 audit(1764212398.337:3251): avc: denied { read write } for pid=5852 comm="syz.0.762" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 86.770205][ T29] audit: type=1400 audit(1764212398.337:3252): avc: denied { read } for pid=5852 comm="syz.0.762" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 86.791698][ T29] audit: type=1400 audit(1764212398.337:3253): avc: denied { create } for pid=5852 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 86.833882][ T5862] lo speed is unknown, defaulting to 1000 [ 87.305207][ T5899] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.316940][ T5899] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 87.351099][ T5902] FAULT_INJECTION: forcing a failure. [ 87.351099][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 87.363856][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.5.784 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.363894][ T5902] Tainted: [W]=WARN [ 87.363902][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.363917][ T5902] Call Trace: [ 87.363924][ T5902] [ 87.363934][ T5902] __dump_stack+0x1d/0x30 [ 87.363960][ T5902] dump_stack_lvl+0xe8/0x140 [ 87.364001][ T5902] dump_stack+0x15/0x1b [ 87.364023][ T5902] should_fail_ex+0x265/0x280 [ 87.364064][ T5902] should_failslab+0x8c/0xb0 [ 87.364146][ T5902] kmem_cache_alloc_noprof+0x50/0x480 [ 87.364178][ T5902] ? flock_lock_inode+0x135/0xf60 [ 87.364255][ T5902] flock_lock_inode+0x135/0xf60 [ 87.364287][ T5902] ? file_has_perm+0x35c/0x3a0 [ 87.364321][ T5902] locks_lock_inode_wait+0x6f/0x2a0 [ 87.364368][ T5902] ? selinux_file_lock+0x38/0x50 [ 87.364410][ T5902] __se_sys_flock+0x2f1/0x3b0 [ 87.364445][ T5902] __x64_sys_flock+0x31/0x40 [ 87.364473][ T5902] x64_sys_call+0x1e5a/0x3000 [ 87.364552][ T5902] do_syscall_64+0xd2/0x200 [ 87.364575][ T5902] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.364605][ T5902] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.364705][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.364798][ T5902] RIP: 0033:0x7f352e73f749 [ 87.364816][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.364838][ T5902] RSP: 002b:00007f352d1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 87.364861][ T5902] RAX: ffffffffffffffda RBX: 00007f352e995fa0 RCX: 00007f352e73f749 [ 87.364876][ T5902] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 87.364890][ T5902] RBP: 00007f352d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.364904][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.364944][ T5902] R13: 00007f352e996038 R14: 00007f352e995fa0 R15: 00007ffe05099258 [ 87.364964][ T5902] [ 87.596187][ T5903] lo speed is unknown, defaulting to 1000 [ 87.642887][ T5915] mmap: syz.2.789 (5915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.804463][ T5933] netlink: 'syz.0.795': attribute type 21 has an invalid length. [ 87.839403][ T5939] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 88.750218][ T6010] FAULT_INJECTION: forcing a failure. [ 88.750218][ T6010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.763425][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.3.828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.763475][ T6010] Tainted: [W]=WARN [ 88.763482][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.763495][ T6010] Call Trace: [ 88.763502][ T6010] [ 88.763509][ T6010] __dump_stack+0x1d/0x30 [ 88.763534][ T6010] dump_stack_lvl+0xe8/0x140 [ 88.763634][ T6010] dump_stack+0x15/0x1b [ 88.763664][ T6010] should_fail_ex+0x265/0x280 [ 88.763708][ T6010] should_fail+0xb/0x20 [ 88.763729][ T6010] should_fail_usercopy+0x1a/0x20 [ 88.763826][ T6010] _copy_from_user+0x1c/0xb0 [ 88.763858][ T6010] __se_sys_add_key+0x20e/0x350 [ 88.763899][ T6010] __x64_sys_add_key+0x67/0x80 [ 88.763949][ T6010] x64_sys_call+0x28c8/0x3000 [ 88.763977][ T6010] do_syscall_64+0xd2/0x200 [ 88.764002][ T6010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.764066][ T6010] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.764109][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.764131][ T6010] RIP: 0033:0x7f916920f749 [ 88.764145][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.764200][ T6010] RSP: 002b:00007f9167c6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.764224][ T6010] RAX: ffffffffffffffda RBX: 00007f9169465fa0 RCX: 00007f916920f749 [ 88.764239][ T6010] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 88.764252][ T6010] RBP: 00007f9167c6f090 R08: ffffffffffffffff R09: 0000000000000000 [ 88.764269][ T6010] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 88.764281][ T6010] R13: 00007f9169466038 R14: 00007f9169465fa0 R15: 00007ffce1835b58 [ 88.764299][ T6010] [ 89.067974][ T6026] xt_TCPMSS: Only works on TCP SYN packets [ 89.545516][ T6080] __nla_validate_parse: 7 callbacks suppressed [ 89.545539][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 89.562369][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 89.714916][ T6097] FAULT_INJECTION: forcing a failure. [ 89.714916][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 89.727650][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.6.868 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.727736][ T6097] Tainted: [W]=WARN [ 89.727742][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.727755][ T6097] Call Trace: [ 89.727760][ T6097] [ 89.727767][ T6097] __dump_stack+0x1d/0x30 [ 89.727793][ T6097] dump_stack_lvl+0xe8/0x140 [ 89.727818][ T6097] dump_stack+0x15/0x1b [ 89.727894][ T6097] should_fail_ex+0x265/0x280 [ 89.727929][ T6097] ? rt_acct_proc_show+0x39/0x1f0 [ 89.728048][ T6097] should_failslab+0x8c/0xb0 [ 89.728086][ T6097] __kmalloc_cache_noprof+0x4c/0x4a0 [ 89.728131][ T6097] rt_acct_proc_show+0x39/0x1f0 [ 89.728172][ T6097] seq_read_iter+0x31e/0x950 [ 89.728201][ T6097] proc_reg_read_iter+0x110/0x180 [ 89.728228][ T6097] do_iter_readv_writev+0x4a1/0x540 [ 89.728386][ T6097] vfs_readv+0x1ea/0x690 [ 89.728436][ T6097] ? mutex_lock+0xd/0x30 [ 89.728540][ T6097] do_readv+0xe7/0x210 [ 89.728582][ T6097] __x64_sys_readv+0x45/0x50 [ 89.728618][ T6097] x64_sys_call+0x29fc/0x3000 [ 89.728776][ T6097] do_syscall_64+0xd2/0x200 [ 89.728804][ T6097] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.728841][ T6097] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.728958][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.729047][ T6097] RIP: 0033:0x7f897fb0f749 [ 89.729068][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.729089][ T6097] RSP: 002b:00007f897e56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 89.729176][ T6097] RAX: ffffffffffffffda RBX: 00007f897fd65fa0 RCX: 00007f897fb0f749 [ 89.729192][ T6097] RDX: 0000000000000001 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 89.729208][ T6097] RBP: 00007f897e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.729223][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.729247][ T6097] R13: 00007f897fd66038 R14: 00007f897fd65fa0 R15: 00007ffe3e505b08 [ 89.729265][ T6097] [ 89.985936][ T6103] capability: warning: `syz.5.871' uses 32-bit capabilities (legacy support in use) [ 89.986911][ T6099] lo speed is unknown, defaulting to 1000 [ 90.172061][ T6124] lo speed is unknown, defaulting to 1000 [ 90.249936][ T6126] lo speed is unknown, defaulting to 1000 [ 90.407410][ T6131] lo speed is unknown, defaulting to 1000 [ 91.146035][ T6171] lo speed is unknown, defaulting to 1000 [ 91.233751][ T6172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.601859][ T29] kauditd_printk_skb: 1399 callbacks suppressed [ 91.601880][ T29] audit: type=1400 audit(1764217523.319:4653): avc: denied { prog_load } for pid=6197 comm="syz.6.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.651779][ T29] audit: type=1400 audit(1764217523.349:4654): avc: denied { create } for pid=6197 comm="syz.6.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 91.672398][ T29] audit: type=1400 audit(1764217523.369:4655): avc: denied { read write } for pid=3653 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.725575][ T6200] bridge_slave_0: left allmulticast mode [ 91.731396][ T6200] bridge_slave_0: left promiscuous mode [ 91.737398][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.745765][ T29] audit: type=1326 audit(1764217523.409:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4ec444f749 code=0x7ffc0000 [ 91.769132][ T29] audit: type=1326 audit(1764217523.409:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec444f749 code=0x7ffc0000 [ 91.792668][ T29] audit: type=1326 audit(1764217523.409:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6191 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec444f749 code=0x7ffc0000 [ 91.816066][ T29] audit: type=1400 audit(1764217523.439:4659): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.844319][ T6203] netlink: 'syz.6.908': attribute type 10 has an invalid length. [ 91.844825][ T29] audit: type=1400 audit(1764217523.459:4660): avc: denied { map_create } for pid=6201 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.852116][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.6.908'. [ 91.871357][ T29] audit: type=1400 audit(1764217523.459:4661): avc: denied { prog_load } for pid=6201 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.899385][ T29] audit: type=1400 audit(1764217523.459:4662): avc: denied { prog_load } for pid=6201 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 91.929453][ T6200] bridge_slave_1: left allmulticast mode [ 91.935235][ T6200] bridge_slave_1: left promiscuous mode [ 91.941038][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.952224][ T6200] bond0: (slave bond_slave_0): Releasing backup interface [ 91.987211][ T6200] bond0: (slave bond_slave_1): Releasing backup interface [ 92.011659][ T6200] team0: Port device team_slave_0 removed [ 92.054125][ T6200] team0: Port device team_slave_1 removed [ 92.081389][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.088858][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.098477][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.106065][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.149814][ T6203] batman_adv: batadv0: Adding interface: veth1_vlan [ 92.156509][ T6203] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.186988][ T6203] batman_adv: batadv0: Interface activated: veth1_vlan [ 92.227757][ T6227] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 92.242138][ T6233] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 92.262824][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 92.285251][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.304296][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 92.320728][ T6237] lo speed is unknown, defaulting to 1000 [ 92.338602][ T6229] bond1: entered allmulticast mode [ 92.437238][ T6243] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.459804][ T6229] lo speed is unknown, defaulting to 1000 [ 92.534497][ T6245] netlink: 52 bytes leftover after parsing attributes in process `syz.5.925'. [ 92.811333][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 92.841394][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 92.924822][ T6275] xt_hashlimit: max too large, truncated to 1048576 [ 92.946159][ T6276] futex_wake_op: syz.0.937 tries to shift op by -1; fix this program [ 92.962602][ T6278] netlink: 'gtp': attribute type 10 has an invalid length. [ 92.964285][ T6272] lo speed is unknown, defaulting to 1000 [ 93.048300][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.941'. [ 93.158172][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.945'. [ 93.255851][ T6312] netlink: 'syz.5.953': attribute type 4 has an invalid length. [ 93.286839][ T6313] lo speed is unknown, defaulting to 1000 [ 93.362971][ T6331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6331 comm=syz.5.961 [ 93.766451][ T6373] lo speed is unknown, defaulting to 1000 [ 93.794512][ T6376] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 93.885355][ T6376] batman_adv: batadv0: Adding interface: veth1_vlan [ 93.892259][ T6376] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.918709][ T6376] batman_adv: batadv0: Interface activated: veth1_vlan [ 94.152107][ T6413] lo speed is unknown, defaulting to 1000 [ 94.426772][ T6459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.439533][ T6460] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 94.448001][ T6463] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 94.671039][ T6492] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 94.682427][ T6492] bond2 (unregistering): Released all slaves [ 94.858865][ T4738] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.963941][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.977084][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.055622][ T6529] FAULT_INJECTION: forcing a failure. [ 95.055622][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 95.068417][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.3.1046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 95.068459][ T6529] Tainted: [W]=WARN [ 95.068467][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.068553][ T6529] Call Trace: [ 95.068561][ T6529] [ 95.068569][ T6529] __dump_stack+0x1d/0x30 [ 95.068592][ T6529] dump_stack_lvl+0xe8/0x140 [ 95.068650][ T6529] dump_stack+0x15/0x1b [ 95.068670][ T6529] should_fail_ex+0x265/0x280 [ 95.068742][ T6529] should_failslab+0x8c/0xb0 [ 95.068778][ T6529] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 95.068821][ T6529] ? sidtab_sid2str_get+0xa0/0x130 [ 95.068863][ T6529] kmemdup_noprof+0x2b/0x70 [ 95.068947][ T6529] sidtab_sid2str_get+0xa0/0x130 [ 95.068984][ T6529] security_sid_to_context_core+0x1eb/0x2e0 [ 95.069054][ T6529] security_sid_to_context+0x27/0x40 [ 95.069091][ T6529] selinux_lsmprop_to_secctx+0x67/0xf0 [ 95.069191][ T6529] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 95.069221][ T6529] audit_log_subj_ctx+0xa4/0x3e0 [ 95.069248][ T6529] ? skb_put+0xa9/0xf0 [ 95.069281][ T6529] audit_log_task_context+0x48/0x70 [ 95.069351][ T6529] audit_log_task+0xf4/0x250 [ 95.069383][ T6529] ? kstrtouint+0x76/0xc0 [ 95.069444][ T6529] audit_seccomp+0x61/0x100 [ 95.069484][ T6529] ? __seccomp_filter+0x82d/0x1250 [ 95.069520][ T6529] __seccomp_filter+0x83e/0x1250 [ 95.069548][ T6529] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.069629][ T6529] ? vfs_write+0x7e8/0x960 [ 95.069671][ T6529] __secure_computing+0x82/0x150 [ 95.069707][ T6529] syscall_trace_enter+0xcf/0x1e0 [ 95.069798][ T6529] do_syscall_64+0xac/0x200 [ 95.069825][ T6529] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.069860][ T6529] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.069920][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.069946][ T6529] RIP: 0033:0x7f916920f749 [ 95.069972][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.069995][ T6529] RSP: 002b:00007f9167c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 95.070036][ T6529] RAX: ffffffffffffffda RBX: 00007f9169465fa0 RCX: 00007f916920f749 [ 95.070048][ T6529] RDX: 0000000000000800 RSI: 0000000000001000 RDI: 0000000000000000 [ 95.070059][ T6529] RBP: 00007f9167c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.070071][ T6529] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000001 [ 95.070082][ T6529] R13: 00007f9169466038 R14: 00007f9169465fa0 R15: 00007ffce1835b58 [ 95.070104][ T6529] [ 95.527253][ T6552] __nla_validate_parse: 7 callbacks suppressed [ 95.527275][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 95.543196][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 95.548066][ T6550] lo speed is unknown, defaulting to 1000 [ 95.690222][ T6566] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1061'. [ 95.779874][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 95.796964][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1069'. [ 95.827171][ T6591] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1072'. [ 95.876973][ T6594] lo speed is unknown, defaulting to 1000 [ 96.062312][ T6617] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1083'. [ 96.076149][ T6622] netlink: 'syz.6.1085': attribute type 10 has an invalid length. [ 96.112700][ T6622] team0: Port device dummy0 added [ 96.191994][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 96.613550][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1103'. [ 96.622619][ T29] kauditd_printk_skb: 2337 callbacks suppressed [ 96.622653][ T29] audit: type=1400 audit(1764217528.329:6996): avc: denied { map_create } for pid=6666 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.648375][ T29] audit: type=1400 audit(1764217528.329:6997): avc: denied { prog_load } for pid=6666 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.667595][ T29] audit: type=1400 audit(1764217528.329:6998): avc: denied { prog_load } for pid=6666 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.699575][ T29] audit: type=1400 audit(1764217528.409:6999): avc: denied { read write } for pid=3653 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.726102][ T29] audit: type=1400 audit(1764217528.439:7000): avc: denied { prog_load } for pid=6669 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.730854][ T6670] netlink: 'syz.6.1105': attribute type 10 has an invalid length. [ 96.745460][ T29] audit: type=1400 audit(1764217528.439:7001): avc: denied { create } for pid=6669 comm="syz.6.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.784516][ T29] audit: type=1400 audit(1764217528.499:7002): avc: denied { read write } for pid=3584 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.814417][ T29] audit: type=1400 audit(1764217528.529:7003): avc: denied { read write } for pid=3653 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.838660][ T29] audit: type=1400 audit(1764217528.529:7004): avc: denied { map_create } for pid=6671 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.857959][ T29] audit: type=1400 audit(1764217528.529:7005): avc: denied { prog_load } for pid=6671 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.879785][ T3500] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.072690][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 97.155902][ T6704] team0: Port device dummy0 removed [ 97.179716][ T6704] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 97.186852][ T6704] batman_adv: batadv0: Removing interface: veth1_vlan [ 97.205094][ T6709] netlink: 'syz.6.1121': attribute type 10 has an invalid length. [ 97.221370][ T6711] netlink: 'syz.2.1123': attribute type 39 has an invalid length. [ 97.247942][ T6709] batman_adv: batadv0: Adding interface: veth1_vlan [ 97.254641][ T6709] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.287600][ T6709] batman_adv: batadv0: Interface activated: veth1_vlan [ 97.562397][ T6743] netlink: 'syz.2.1136': attribute type 1 has an invalid length. [ 97.607787][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.622818][ T6752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.645879][ T6752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=6752 comm=syz.6.1138 [ 97.664564][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.676449][ T6752] bond1: (slave batadv1): making interface the new active one [ 97.685849][ T6752] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 97.859797][ T6781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.979291][ T6799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6799 comm=syz.6.1158 [ 98.110532][ T6811] lo speed is unknown, defaulting to 1000 [ 98.131766][ T6817] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.789072][ T6854] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 98.796314][ T6854] batman_adv: batadv0: Removing interface: veth1_vlan [ 98.810301][ T6856] validate_nla: 2 callbacks suppressed [ 98.810321][ T6856] netlink: 'syz.6.1182': attribute type 10 has an invalid length. [ 98.837201][ T6854] bond1: (slave batadv1): Releasing active interface [ 98.858234][ T6858] syz_tun: entered promiscuous mode [ 98.866146][ T6858] syz_tun: left promiscuous mode [ 98.882536][ T6856] batman_adv: batadv0: Adding interface: veth1_vlan [ 98.889197][ T6856] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.915711][ T6856] batman_adv: batadv0: Interface activated: veth1_vlan [ 99.076846][ T6872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.093716][ T6877] netlink: 'syz.5.1189': attribute type 10 has an invalid length. [ 99.145771][ T6884] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.493620][ T6918] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 99.500882][ T6918] batman_adv: batadv0: Removing interface: veth1_vlan [ 99.531556][ T6922] netlink: 'syz.6.1208': attribute type 10 has an invalid length. [ 99.545559][ T6922] batman_adv: batadv0: Adding interface: veth1_vlan [ 99.552345][ T6922] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.578780][ T6922] batman_adv: batadv0: Interface activated: veth1_vlan [ 99.621108][ T6930] lo speed is unknown, defaulting to 1000 [ 99.690648][ T6515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.738844][ T6938] lo speed is unknown, defaulting to 1000 [ 99.780319][ T6944] lo speed is unknown, defaulting to 1000 [ 99.888622][ T6952] FAULT_INJECTION: forcing a failure. [ 99.888622][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 99.888728][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.5.1222 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.888762][ T6952] Tainted: [W]=WARN [ 99.888769][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.888783][ T6952] Call Trace: [ 99.888789][ T6952] [ 99.888796][ T6952] __dump_stack+0x1d/0x30 [ 99.888866][ T6952] dump_stack_lvl+0xe8/0x140 [ 99.888891][ T6952] dump_stack+0x15/0x1b [ 99.888911][ T6952] should_fail_ex+0x265/0x280 [ 99.888948][ T6952] should_failslab+0x8c/0xb0 [ 99.889014][ T6952] __kmalloc_noprof+0xa5/0x570 [ 99.889047][ T6952] ? kobject_get_path+0x92/0x1c0 [ 99.889076][ T6952] kobject_get_path+0x92/0x1c0 [ 99.889104][ T6952] kobject_uevent_env+0x1da/0x570 [ 99.889184][ T6952] ? device_pm_check_callbacks+0x683/0x6a0 [ 99.889216][ T6952] kobject_uevent+0x1d/0x30 [ 99.889247][ T6952] device_del+0x710/0x790 [ 99.889285][ T6952] device_destroy+0x66/0xa0 [ 99.889361][ T6952] vcs_remove_sysfs+0x36/0x60 [ 99.889390][ T6952] vc_deallocate+0xfc/0x250 [ 99.889415][ T6952] vt_disallocate_all+0x175/0x200 [ 99.889460][ T6952] vt_ioctl+0x1592/0x18a0 [ 99.889524][ T6952] ? tty_jobctrl_ioctl+0x29e/0x810 [ 99.889561][ T6952] tty_ioctl+0x7d8/0xb80 [ 99.889592][ T6952] ? __pfx_tty_ioctl+0x10/0x10 [ 99.889644][ T6952] __se_sys_ioctl+0xce/0x140 [ 99.889670][ T6952] __x64_sys_ioctl+0x43/0x50 [ 99.889694][ T6952] x64_sys_call+0x1816/0x3000 [ 99.889718][ T6952] do_syscall_64+0xd2/0x200 [ 99.889739][ T6952] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.889791][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.889835][ T6952] RIP: 0033:0x7f352e73f749 [ 99.889853][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.889875][ T6952] RSP: 002b:00007f352d1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.889899][ T6952] RAX: ffffffffffffffda RBX: 00007f352e995fa0 RCX: 00007f352e73f749 [ 99.889915][ T6952] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 99.889930][ T6952] RBP: 00007f352d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.889960][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.889975][ T6952] R13: 00007f352e996038 R14: 00007f352e995fa0 R15: 00007ffe05099258 [ 99.889997][ T6952] [ 99.956222][ T6954] xt_hashlimit: max too large, truncated to 1048576 [ 100.067509][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.266659][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.331801][ T6967] macvtap1: entered promiscuous mode [ 100.337204][ T6967] macvtap1: entered allmulticast mode [ 100.463007][ T6982] FAULT_INJECTION: forcing a failure. [ 100.463007][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 100.475802][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.5.1236 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 100.475842][ T6982] Tainted: [W]=WARN [ 100.475849][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.475861][ T6982] Call Trace: [ 100.475868][ T6982] [ 100.475878][ T6982] __dump_stack+0x1d/0x30 [ 100.475932][ T6982] dump_stack_lvl+0xe8/0x140 [ 100.476019][ T6982] dump_stack+0x15/0x1b [ 100.476041][ T6982] should_fail_ex+0x265/0x280 [ 100.476134][ T6982] should_failslab+0x8c/0xb0 [ 100.476169][ T6982] kmem_cache_alloc_noprof+0x50/0x480 [ 100.476206][ T6982] ? key_alloc+0x27d/0x9a0 [ 100.476234][ T6982] key_alloc+0x27d/0x9a0 [ 100.476305][ T6982] keyring_alloc+0x45/0xb0 [ 100.476405][ T6982] lookup_user_key+0x2ea/0xd10 [ 100.476470][ T6982] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 100.476501][ T6982] __se_sys_add_key+0x268/0x350 [ 100.476545][ T6982] __x64_sys_add_key+0x67/0x80 [ 100.476634][ T6982] x64_sys_call+0x28c8/0x3000 [ 100.476664][ T6982] do_syscall_64+0xd2/0x200 [ 100.476689][ T6982] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.476783][ T6982] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.476890][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.476915][ T6982] RIP: 0033:0x7f352e73f749 [ 100.476934][ T6982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.476958][ T6982] RSP: 002b:00007f352d1a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 100.476982][ T6982] RAX: ffffffffffffffda RBX: 00007f352e995fa0 RCX: 00007f352e73f749 [ 100.476996][ T6982] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 100.477069][ T6982] RBP: 00007f352d1a7090 R08: ffffffffffffffff R09: 0000000000000000 [ 100.477085][ T6982] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 100.477101][ T6982] R13: 00007f352e996038 R14: 00007f352e995fa0 R15: 00007ffe05099258 [ 100.477119][ T6982] [ 100.889378][ T7005] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20004 [ 100.915964][ T3304] ================================================================== [ 100.924101][ T3304] BUG: KCSAN: data-race in __mark_inode_dirty / redirty_tail_locked [ 100.932151][ T3304] [ 100.934661][ T3304] read-write to 0xffff888106e58a50 of 4 bytes by task 4738 on cpu 1: [ 100.942729][ T3304] redirty_tail_locked+0x56/0x280 [ 100.947765][ T3304] writeback_sb_inodes+0x72c/0xa30 [ 100.952909][ T3304] wb_writeback+0x252/0x5c0 [ 100.957428][ T3304] wb_workfn+0x194/0x910 [ 100.961696][ T3304] process_scheduled_works+0x4ce/0x9d0 [ 100.967277][ T3304] worker_thread+0x582/0x770 [ 100.972108][ T3304] kthread+0x489/0x510 [ 100.976198][ T3304] ret_from_fork+0x122/0x1b0 [ 100.980808][ T3304] ret_from_fork_asm+0x1a/0x30 [ 100.985599][ T3304] [ 100.987934][ T3304] read to 0xffff888106e58a50 of 4 bytes by task 3304 on cpu 0: [ 100.995484][ T3304] __mark_inode_dirty+0x191/0x750 [ 101.000533][ T3304] mark_buffer_dirty+0x133/0x210 [ 101.005498][ T3304] block_page_mkwrite+0x287/0x3d0 [ 101.010636][ T3304] ext4_page_mkwrite+0x859/0xb90 [ 101.015587][ T3304] do_wp_page+0xa77/0x2510 [ 101.020031][ T3304] handle_mm_fault+0x77d/0x2be0 [ 101.024995][ T3304] do_user_addr_fault+0x630/0x1080 [ 101.030129][ T3304] exc_page_fault+0x62/0xa0 [ 101.034756][ T3304] asm_exc_page_fault+0x26/0x30 [ 101.039638][ T3304] [ 101.041974][ T3304] value changed: 0x00020042 -> 0x00000040 [ 101.047724][ T3304] [ 101.050151][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 101.056311][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.067805][ T3304] Tainted: [W]=WARN [ 101.071615][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.081679][ T3304] ================================================================== [ 103.056551][ T29] kauditd_printk_skb: 1777 callbacks suppressed [ 103.056569][ T29] audit: type=1400 audit(1764217534.769:8783): avc: denied { read write } for pid=3653 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.088476][ T29] audit: type=1400 audit(1764217534.799:8784): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0