last executing test programs: 6m5.708925651s ago: executing program 1 (id=8035): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x52, 0x8}, {0x8, 0x1, 0x14, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) acct(&(0x7f0000000280)='./file0\x00') 6m5.399314353s ago: executing program 1 (id=8037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r4, 0x29ab, 0xd480, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b7030000080000408500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x34, {0xffffffffffffffc0, 0x5}, 0xc9}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x0) 6m5.354253653s ago: executing program 1 (id=8038): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket(0xb, 0x1, 0x7) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000003048940ebb2ca1743e92dcaaefa352836359eecc85032d439160aac6fe13ef8d3f96942144ed0bbcafc99a3058dda9d157e9567d67d4a47441c504328b151c4578c58638fe7a9bb5690972169b6b59791ce40bf1c9e1f1a540016ef96ff70db6ca62e41e0ae5957b6a7f4e7095adf71b701042892c80ac6615a79f5710522fe90d1739212378b7dd841f7b8e"], 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="84ab27a9", 0x4}], 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x9fbc18ff106643da}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x6, 0x6, 0x1, 0x3, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0xb96, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff767, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x0, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x0, 0x5, 0x8008, 0x6, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x6, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x5a, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0xfffffcba, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = dup2(r0, r0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002100110000000000000000000a0000ff7f00000000000000050013000100000010c5fc2400000000"], 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) 6m5.200189084s ago: executing program 1 (id=8042): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6m4.783771997s ago: executing program 1 (id=8047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdh0ncU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrGNju6I2F/fGiSIBAlRRNeKABBKxxAE4VBQkDkgECYEQFmolEAf+tIBwD5QARrM7a2+8s84i27vF8/tJm33zZuzvvd18b3ffm/UEUFgn0n+SiOGIuBkRhxqbtx9wonH37cry5I3K8mQSa2tP/jWpH3e9sjzZPLT5c3dFxFJE3BcRP7occXFfe9y5hcWr47VadTbbHpmfmhmZW1g8c2VqfKI6Ub1WqTx2fmzs/Lmx0f+hN8mWez8+8/qRX08+MfHS8X89dW7q639J4kK937GpHzspr0UDScSF3QjWB+W0PxEx1OXxR6vPv7zLTaJLXzyyMpI+d/dGxKl6/h+Kcv3ZjPjAi0///VC8/1ann7258uIfe9lWAGDnrKX2b70b2JtKkX72T0pnI6JRLpXOnm18hr83hkq16bn5hy9PP3PtUmOO4J7YV7p8pVYdzeYK7ol9Sbr9SL28sf3opu1KRByOiM+WD9a3z16crl3q6UgHNA1HvPadT10cvGtT/v+h3Mh/YO9K8/+XP/7eD9Lym+V+twbopTT/v/nm1OMh/6Fw7pz/B3reJqA3vP5Dccl/KK72/N/63Flg7/D6D8Ul/6G45D8Ul/yH4pL/UFyt+S/9oZgOH39lJYmIpfcdrN9Sg9m+nD/bA+wha2uJL/lDQXnvD8U1sFE82M92AL3nMz5wp7P/O34beGbn2wL0RqnfDQD65vQx639QVOb/obgG+t0AoG+8xwfM/0PxmP+H4hrucP2vd7Rcu2s0Iu6OiJ+W9+1vXusL+P81HPHaCze/+3RE6U9J9v7/9KFTw+Ovv/rD1uMGk3/UlwgGI+LTLzz55WfH5+dnH0nr/7ZeP/+VrP7RfvUG6EYzT5t5DBTX3MLi1fFarTqroLCpEPG2aIbCLhaa48D1yvJk89arsef5hyLe+GDjJIQ07o3s1tg7kM1NHqivUQ6tJredq5DswNrl585ELD0XEffl9T/JrnfeWPkYWi23xX9ndp/ejmXzJ+kxR7uMX757e/Hvb4l/vCX+u7qMv/KxLg/cJYe/1d/4L/1mfdlrIO/xH9jmV2KP3GH/49/Y1q/ftt//rr/xTx3vb/wvTUe8ko4/o3n5V0rTcn3ls3X8+cLnG/Omg9uM/5nTG+Pfjbbxr7Q+/pU7jH8nuozzk6eqn8irL/8s4o3nIu7Pjd+Md6Aea2i11Bb/ZMv488AW8f/80V9czau/8GrE2vWI05EfvzXWyPzUzMjcwuKZK1PjE9WJ6rVK5bHzY2Pnz42NjtTnqEeaM9Xtnrh19EN59Se/1uj/UIf4zf53evzXtuhzq8WvfnL43Tn1Pz/WiP/Ayfzn/0gWv/H4D7TFf092n/4/+Xd2Lm96zFsRsT+rfzAivv/y4Yfy2vWRW434lzr0v3Rb/Pb+P9xl/+O3/3kmr/rZD3f7CwCAndR5aqDfLQMAAHZaL1Ya+91HIN/Q6mC0LgMnSy3rCksb6wpp/VvZ+kJ5KeKf2RpDWv9gtkqWlnMXGoC3naOL7/1Vv9sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUHRzC4tXx2u16uxcv1sC9Np/AwAA//8Fjv+b") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 6m4.380312319s ago: executing program 1 (id=8054): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0xa00) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000200)={0xe0000003}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24001c00190001001e0000000000000008000f00ff070000c30acb38126a0959e663b5f5e9b94fb1543648b493204162e41d685100"/64], 0x24}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 6m4.379942579s ago: executing program 32 (id=8054): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0xa00) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000200)={0xe0000003}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24001c00190001001e0000000000000008000f00ff070000c30acb38126a0959e663b5f5e9b94fb1543648b493204162e41d685100"/64], 0x24}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4m49.427479866s ago: executing program 0 (id=8631): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="0000000000a46200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r8, 0x0, 0x1034}, 0x18) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0)=r0, 0x12) fdatasync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x590a633cabcfa68e) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r11}, 0x10) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000340)="a9", 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8044) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 4m49.361882586s ago: executing program 0 (id=8621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x1, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0x3e3}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x7841, 0x0, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x39}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r12 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r12, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 4m49.043312408s ago: executing program 0 (id=8622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x61c9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e61, 0x2, @mcast2, 0xa}, {0xa, 0x0, 0x800b, @loopback}, 0xffffffffffffffff, 0x4}}, 0x48) acct(0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c80)={r4, 0xe0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a00), 0x0, 0x72, &(0x7f0000002a40), 0x0, 0x10, &(0x7f0000002ac0), &(0x7f0000002b00), 0x8, 0x800c9, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0xe, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0800000000000000000000000000e9bb00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000500"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000006000000000000000500000018270000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYBLOB="00000000010001000857070008000000187dcb7dfd556796ddbd103f87490c6b5e5053853bb67bb6ff56ec4f7290b4c4506258a7226ab815de3adc45", @ANYRES32, @ANYBLOB="0000000000000000c199f4ff080000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000940)=[{0x5, 0x1, 0x5, 0x5}, {0x3, 0x3, 0xd, 0x7}], 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="edff00000bd6e2840000000018f6b54a7dae4b99cd601d2340adf07b50dd0d89b7f04e67b307afa29058432880a762634a7774dbbe9d0a73b70bb0ae29dc94d235bced7913f99835579b48aedb9fe2fcad90", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000ff0300000000000001000000cc6801000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000183100000100"/80], &(0x7f0000000540)='syzkaller\x00', 0x0, 0xf9, &(0x7f0000000880)=""/249, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x9, 0xd}, 0x10, r5, r3, 0x3, &(0x7f0000000740)=[r1], &(0x7f0000000780)=[{0x3, 0x2, 0xf}, {0x0, 0x1, 0xc, 0x5}, {0x4, 0x2, 0xc, 0x8}], 0x10, 0xbf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) memfd_create(&(0x7f0000000500)='!\x00', 0x6) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x2, 0xc}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x4e22], 0x0, 0x8, 0xc2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @dev, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x67, 0x0, 0x23}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x3, 0xe}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0xc, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x10, 0x1e, 0x105, &(0x7f00000000c0)}) 4m48.67093434s ago: executing program 0 (id=8632): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$eJzs3MtvG0UcAODfrpP0RZOolEcfUENBRBSSJhTogQsIpF6QkOAAx5CGqtRtURMkWlW0IFSOiDsScETiL+AEFwScQFzhjpAq1AuFA1q09m7rxE7qODVO8PdJa8/swzOzs5PMzngdwMCq5i9JRBYRv0TEWCO6dIdq4+36tYtzf127OJdElr38R1Lf789rF+fKXcvjdhSRiTQi/SCJfW3SXTh/4dRsrTZ/rohPLZ5+a2rh/IXHT56ePTF/Yv7MzNGjR56YfvqpmSdvSzl35nnd++7Z/XuOvfbxi3NZvP79l3l+7yi2N5ejYXzdaVajuvRc1o3UXx9e96dvLDubwslQHzPCmlQiIq+u4Xr7H4tK3Ky8sXjh/b5mDuipLMuyLS1rK2Xgcgb8jyXR7xwA/VH+o8/vf8vlP+x+9N3VZxs3QHm5rxdLY8tQpPnb1sYd+84epV+NiFcv//1pvkTbcQgAgNvr67z/81i7/t9ocnfTfqPF3NB4RByKiF0RcWdE7I6IuyIi3/eeiLh3jelXl8Vb+z8/beuqYB3K+3/PFHNbS/t/abnLeKUxTnapHonh5I2TtfnDxTmZiOEteXx6lTS+ef7nj1ba1tz/y5c8/bIvWOTj96FlA3THZxdn11HkJa6+F7F3qF35kxszAUlE7ImIvV18ft5vPvnoF/vz8OiO1u37b1n+VdyGeabs84hHGvV/OZaVv5Q0UlppfnJqa9TmD0+VV0WrH3688lJzfLgpfOv67628/re3vf6L8pfNoJyvXVh7Gld+/XDFe5pur/+R5JV6eKRY987s4uK56YiRYsWS9TM3jy3j5f55+ScOtiv/aLIr4p/PitOwr7hW74uI+yPiQJH3ByLiwYg4uEr5v3vuoTdXP0P9rf/jq9V/xHjSPF/fRaBy6tuvVkq/s/o/Ug9NFGs6+fvXaQbXc+4AAABgs0jr34FP0skb4TSdnGx8h393bE9rZxcWD1Xj7TPHG9+VH4/htBzpGmsaD50uxobL+MyyeDnmlWXb6vHJubO1Xs2pA53ZsUL7z/1W6XfugJ5b0zxa6xNtwCbmeU0YXNo/DC7tHwbX2tp/688FAJtXu/Z/KeJ6U7SnD2EA/aP/D4NL+4fBpf3D4NL+YSC1PhJfjvR186T/zcCuY+s6vB+BT/qTeqVHnxzNP9rRg0CkG6XiugikGyEbB4rAlojo9KhLPa3T5dcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdvAAAA///5IuKJ") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4m48.152091413s ago: executing program 0 (id=8638): fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0/..\x00', &(0x7f0000000480)={0x18000, 0x150, 0x4}, 0x18) lstat(&(0x7f0000000540)='./file0/file0/..\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='thermal_power_allocator\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, r3, 0x2) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x1c5540, 0x101, 0x6}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r8, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1f, 0x7}, 0x0) openat(r5, &(0x7f0000000140)='./file0/../file0\x00', 0x900, 0x44) r9 = socket$inet(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xa4, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000001}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 4m48.057210294s ago: executing program 3 (id=8639): r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2000, 0xfffffffc}, 0x1c) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x4800000000000000, 0x28800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x25, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000bd0000000000000006000000185900000000000000000000000000008977080008000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x1, 0x48000, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@bridge_getlink={0x5c, 0x12, 0x4, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x40, 0x40}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1310c}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x7}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}]}, 0x5c}}, 0x54) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) close(r9) 4m48.006762595s ago: executing program 3 (id=8640): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="0000000000a46200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r8, 0x0, 0x1034}, 0x18) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0)=r0, 0x12) fdatasync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x590a633cabcfa68e) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r11}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000340)="a9", 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8044) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 4m47.802648196s ago: executing program 3 (id=8642): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) fadvise64(r2, 0x807f, 0x1000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff0000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r3, @ANYRESDEC], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x4001084) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 4m47.414676088s ago: executing program 0 (id=8644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="c50f00000000000000001100000005000300", @ANYRES32=0x0, @ANYBLOB="e767b41c4640fd408b28694d0126376c72d5ce2250541599f398021afc49396f4fa8b882427ca331efa6f66c317220494184697221b8503ed487412fbf12dbaff76b91b8f1f05dffa8e31661630dce0d361b2c32e089ab0a0e5303c7ebec643c3662f391b73c4b475f29b5ce000000000000"], 0x1c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r4, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) writev(r10, &(0x7f00000000c0)=[{}], 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r12, r12, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r13, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) sysinfo(0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000380)={0x0, 0x3}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 4m47.414234228s ago: executing program 33 (id=8644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="c50f00000000000000001100000005000300", @ANYRES32=0x0, @ANYBLOB="e767b41c4640fd408b28694d0126376c72d5ce2250541599f398021afc49396f4fa8b882427ca331efa6f66c317220494184697221b8503ed487412fbf12dbaff76b91b8f1f05dffa8e31661630dce0d361b2c32e089ab0a0e5303c7ebec643c3662f391b73c4b475f29b5ce000000000000"], 0x1c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r4, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) writev(r10, &(0x7f00000000c0)=[{}], 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r12, r12, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r13, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) sysinfo(0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000380)={0x0, 0x3}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) 4m46.485080863s ago: executing program 3 (id=8649): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4m45.39943244s ago: executing program 3 (id=8656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000014000780080012400000000005001500020000000500010006000000050005000200000005000400000000"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4m44.857609153s ago: executing program 3 (id=8659): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b03000000000000200012800b00010067656e6576250000100002800600054e0600000000060200"], 0x40}}, 0x40800) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1b, 0x80000003, @loopback, 0x80000001}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x0, 0x3}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4eb010018000000002a5632eb5ffc4b99"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) close_range(r3, 0xffffffffffffffff, 0x400000000000000) socket$igmp(0x2, 0x3, 0x2) 4m44.820640423s ago: executing program 34 (id=8659): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b03000000000000200012800b00010067656e6576250000100002800600054e0600000000060200"], 0x40}}, 0x40800) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1b, 0x80000003, @loopback, 0x80000001}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x0, 0x3}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="a4eb010018000000002a5632eb5ffc4b99"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) close_range(r3, 0xffffffffffffffff, 0x400000000000000) socket$igmp(0x2, 0x3, 0x2) 3.36492442s ago: executing program 6 (id=11582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r4, r3, 0x0, 0xfffa83) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) unlink(&(0x7f0000000000)='./file0\x00') fallocate(r5, 0x2, 0x200, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380)) statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480)) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 3.248165681s ago: executing program 6 (id=11585): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="0000000000a46200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r6, 0x0, 0x1034}, 0x18) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0)=r0, 0x12) fdatasync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x590a633cabcfa68e) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r9}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8044) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 3.067981292s ago: executing program 6 (id=11588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x18) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) 2.910824543s ago: executing program 5 (id=11592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r4, 0x0, 0xfffa83) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) unlink(&(0x7f0000000000)='./file0\x00') fallocate(r6, 0x2, 0x200, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r8, r9) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 2.835453633s ago: executing program 5 (id=11594): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x2, 0x7fff}, 0x7) read(r2, &(0x7f00000000c0)=""/66, 0x42) getpeername$qrtr(r2, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x48}}, 0xc054) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socket$rxrpc(0x21, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff, r4}, 0x38) ftruncate(0xffffffffffffffff, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r1, 0x4) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) 2.596583275s ago: executing program 5 (id=11599): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9b}]}, 0x40}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) clock_getres(0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa20000000000000702000000ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket(0x10, 0x2, 0x9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2.535475495s ago: executing program 2 (id=11600): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$eJzs3U9sHFcZAPBvdh0ncU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrGNju6I2F/fGiSIBAlRRNeKABBKxxAE4VBQkDkgECYEQFmolEAf+tIBwD5QARrM7a2+8s84i27vF8/tJm33zZuzvvd18b3ffm/UEUFgn0n+SiOGIuBkRhxqbtx9wonH37cry5I3K8mQSa2tP/jWpH3e9sjzZPLT5c3dFxFJE3BcRP7occXFfe9y5hcWr47VadTbbHpmfmhmZW1g8c2VqfKI6Ub1WqTx2fmzs/Lmx0f+hN8mWez8+8/qRX08+MfHS8X89dW7q639J4kK937GpHzspr0UDScSF3QjWB+W0PxEx1OXxR6vPv7zLTaJLXzyyMpI+d/dGxKl6/h+Kcv3ZjPjAi0///VC8/1ann7258uIfe9lWAGDnrKX2b70b2JtKkX72T0pnI6JRLpXOnm18hr83hkq16bn5hy9PP3PtUmOO4J7YV7p8pVYdzeYK7ol9Sbr9SL28sf3opu1KRByOiM+WD9a3z16crl3q6UgHNA1HvPadT10cvGtT/v+h3Mh/YO9K8/+XP/7eD9Lym+V+twbopTT/v/nm1OMh/6Fw7pz/B3reJqA3vP5Dccl/KK72/N/63Flg7/D6D8Ul/6G45D8Ul/yH4pL/UFyt+S/9oZgOH39lJYmIpfcdrN9Sg9m+nD/bA+wha2uJL/lDQXnvD8U1sFE82M92AL3nMz5wp7P/O34beGbn2wL0RqnfDQD65vQx639QVOb/obgG+t0AoG+8xwfM/0PxmP+H4hrucP2vd7Rcu2s0Iu6OiJ+W9+1vXusL+P81HPHaCze/+3RE6U9J9v7/9KFTw+Ovv/rD1uMGk3/UlwgGI+LTLzz55WfH5+dnH0nr/7ZeP/+VrP7RfvUG6EYzT5t5DBTX3MLi1fFarTqroLCpEPG2aIbCLhaa48D1yvJk89arsef5hyLe+GDjJIQ07o3s1tg7kM1NHqivUQ6tJredq5DswNrl585ELD0XEffl9T/JrnfeWPkYWi23xX9ndp/ejmXzJ+kxR7uMX757e/Hvb4l/vCX+u7qMv/KxLg/cJYe/1d/4L/1mfdlrIO/xH9jmV2KP3GH/49/Y1q/ftt//rr/xTx3vb/wvTUe8ko4/o3n5V0rTcn3ls3X8+cLnG/Omg9uM/5nTG+Pfjbbxr7Q+/pU7jH8nuozzk6eqn8irL/8s4o3nIu7Pjd+Md6Aea2i11Bb/ZMv488AW8f/80V9czau/8GrE2vWI05EfvzXWyPzUzMjcwuKZK1PjE9WJ6rVK5bHzY2Pnz42NjtTnqEeaM9Xtnrh19EN59Se/1uj/UIf4zf53evzXtuhzq8WvfnL43Tn1Pz/WiP/Ayfzn/0gWv/H4D7TFf092n/4/+Xd2Lm96zFsRsT+rfzAivv/y4Yfy2vWRW434lzr0v3Rb/Pb+P9xl/+O3/3kmr/rZD3f7CwCAndR5aqDfLQMAAHZaL1Ya+91HIN/Q6mC0LgMnSy3rCksb6wpp/VvZ+kJ5KeKf2RpDWv9gtkqWlnMXGoC3naOL7/1Vv9sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUHRzC4tXx2u16uxcv1sC9Np/AwAA//8Fjv+b") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.226155407s ago: executing program 6 (id=11606): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) ptrace(0x10, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newtclass={0x478, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xa, 0x10}, {0x8, 0xf}, {0x5, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3b, 0x5}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0xf9}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0xaa, 0x7, 0xd4, 0x86, 0x10001, 0x3, 0x7, 0x5d4, 0x632, 0xa, 0x6, 0x4, 0xfb60, 0x161dda7a, 0x10001, 0x5, 0x5, 0xe98, 0x1000, 0x8, 0x0, 0xf, 0x5, 0x7, 0x0, 0xb82, 0x7, 0x4000, 0x1, 0x9, 0x4, 0xd, 0x0, 0x7fff, 0x0, 0x5, 0x3, 0xc000, 0xec0f, 0x800, 0xf, 0x80000000, 0x5, 0xffff8000, 0x8, 0x6, 0x8, 0xf, 0x7, 0x9, 0x4, 0xffff4582, 0x5, 0x0, 0xbb4c, 0x74c1bff4, 0x8, 0xffffffff, 0x433, 0x2, 0x1, 0x7, 0xe3, 0x80000000, 0x3, 0x8, 0x0, 0x7f, 0xd63, 0x6, 0xfb95, 0x0, 0x7fff, 0x9, 0x1000, 0x4, 0x6, 0x9, 0x1, 0x129946b1, 0x1000, 0xfffffffc, 0xf, 0x0, 0x80, 0x2, 0x4, 0xffff2a97, 0xfff, 0x6, 0x3, 0x0, 0xe, 0x80000000, 0xffffffff, 0xfffffffe, 0x200, 0xc, 0x2, 0x6bcc, 0x1, 0x7, 0x7bf146ac, 0xf426, 0x4, 0x9, 0x5, 0x5, 0xade, 0x5, 0x5, 0x4, 0x1, 0x4, 0xc633, 0x9, 0x63, 0x0, 0xe, 0x7, 0x6, 0x2, 0x3, 0x7, 0x1, 0x3, 0x4, 0x5, 0x4, 0x80000001, 0x8, 0x3, 0x0, 0x2, 0xd53, 0x3, 0x2, 0x6, 0x3, 0x4, 0xf45, 0x80000001, 0x2, 0x8, 0x8, 0x0, 0x10, 0xd24, 0x9, 0x8, 0xf, 0x333, 0x841, 0x4, 0x5b4c, 0xfffffffc, 0x5, 0x2, 0x40, 0x8, 0x2, 0x4770, 0x3, 0x10001, 0x8001, 0x0, 0x13, 0x8, 0x8, 0x3, 0x3, 0x1, 0x6, 0xffffffff, 0x6b, 0x401, 0x2, 0x2, 0x7, 0x4c, 0xff, 0x7, 0x7, 0x2b7, 0x9, 0x7, 0xe, 0x401, 0x8001, 0xe950, 0x1, 0x2, 0x1, 0xec, 0x2, 0x0, 0x7f, 0x61fc, 0x9, 0x4b3, 0x4, 0x897, 0x5, 0x9, 0x80, 0x2, 0x9, 0xfe, 0x9, 0xffff0000, 0x8, 0x8, 0x1, 0x4, 0x1000, 0x6, 0x48, 0x0, 0xfffffffc, 0x2, 0x3, 0x80000001, 0x3, 0x2, 0x101, 0x8, 0x4, 0x0, 0x7, 0x6, 0x9, 0x3, 0xa, 0xae, 0x8843, 0x9, 0x7, 0x1, 0x0, 0x8001, 0x9d5, 0x0, 0xc, 0x8, 0x9, 0x4, 0x4ce, 0x8, 0x6, 0x734c, 0x6, 0x7, 0xb85, 0x0, 0x3, 0x3c]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7f}]}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x20}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.060321418s ago: executing program 5 (id=11608): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = memfd_secret(0x80000) close(r1) r2 = socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r3, @ANYRESHEX=r4, @ANYBLOB="97082a5ebd4fd30bcdd2e1dcb2ea66c280aa33e4ca58bdadaa909bdb45a8c90f136dede4cd590876e35b59106667fcbf2982063c75d0ddbcf37b82c42b624ae1f4ec1faba77e60f6b87ae8690939bd1d9f1fbb3de63449fb7f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file7/file0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000001880), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 1.968427808s ago: executing program 7 (id=11619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37, 0x0, 0xffffffff}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x6) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x3f, 0x3f) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0xfffffffffffdf001}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r7, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 1.78315798s ago: executing program 7 (id=11610): setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRES16=r4, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="fdff"]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x794c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0xff, 0x0}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}]}}}]}, 0x40}}, 0x4008040) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x68, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_io_uring_setup(0x211b, &(0x7f00000003c0)={0x0, 0x53e0, 0x2, 0x2000000, 0x2ae}, &(0x7f00000001c0), &(0x7f0000000280)) 1.68965929s ago: executing program 2 (id=11611): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) modify_ldt$read(0x0, &(0x7f0000000000)=""/20, 0x14) unshare(0x2040400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@private2, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'pimreg1\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000e80)={r6, 0x0, 0xc, 0x5}, &(0x7f0000000ec0)=0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x801) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 1.64611146s ago: executing program 4 (id=11612): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r3, 0x4bfa, &(0x7f0000002f80)=""/61) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001000000", @ANYRES32, @ANYBLOB="0000000000a46200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r6, 0x0, 0x1034}, 0x18) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202080, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0)=r0, 0x12) fdatasync(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x590a633cabcfa68e) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r9}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8044) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x3) 1.63202791s ago: executing program 2 (id=11613): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 1.61422728s ago: executing program 2 (id=11614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r4, 0x0, 0xfffa83) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) unlink(&(0x7f0000000000)='./file0\x00') fallocate(r6, 0x2, 0x200, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r8, r9) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.331918122s ago: executing program 2 (id=11615): getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000200)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0||!') bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f00000006c0)="913c4273fab4c47aad387b12d66c102a1696fc39f68faeac7513d72f5934fcceff6326f2b0dba10425f56bf4772fe5e9ff014fab238c7bbef45eba0342e2a040aef149a6f43b2c99b0dda659fa27e72c52e8c03999adec27639c44a1f265e1b73b7e3f2e2c4ea0f95ce6c352551af098436064f444faeb2faccf67efb9274a02bf56b289bea29d8e714f5a3f0ba10801b99569065daa2f3783a6d0d41a1cf8e0216af008cf82737c96ce63a05f3082fff0128984152548699d006360f5978ec3bb043ce93fc725e669ff0531aba2bc0431e33deef1ab578703c880a48b3d9f7e5b6a9ef9bbb0430ce2fad67421cbd4bd62829c") getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x25604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850) r6 = epoll_create(0x8617) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f00000001c0)={0x80000000}) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) unshare(0x6a040000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x401}, 0x11) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r8, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}}) unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') read$watch_queue(0xffffffffffffffff, &(0x7f0000000cc0)=""/4092, 0xffc) 1.330845652s ago: executing program 6 (id=11626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r7 = syz_open_dev$evdev(&(0x7f0000000480), 0x3, 0xc5542dce9f6858e5) syz_usb_disconnect(r7) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0xc0085504, &(0x7f00000003c0)=0x130) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000007800)=0xffffffff0000003d, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000003000000000000000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="b7", 0x1}], 0x1}}], 0x2, 0x24001844) 1.127751033s ago: executing program 5 (id=11616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x18) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x2) 899.214695ms ago: executing program 7 (id=11617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000008f9d3ddb52915dfe9cbd0dc175acc4497cb65bc36f51b17d3bdf5fdec34df1996b6fd893ed9a742d03e4428785d1aefc887da66ba94dd1f6bd51969e66fbdf93df7dd7e245e58474bef87df2689fba4475cb097344ae89b6f95675016b718043da4685a2f51fcc26e0f6581e08edd4a1a4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000f20000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(0x0, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc02000000000000000000000000000000000000000000000000000000000000dffc0000000000000a00008062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000005b110977d1cf334ab8d050a52200000050001100fe800000000000000000000000000011fe800000000000000000000000408028ac1414aa0000000000000000000000fe80fcffffff000000000000000000bb"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be00", 0x57, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, 0x0, 0x0, 0x30e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 779.915186ms ago: executing program 7 (id=11618): mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x28}}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x10, 0x3, 0xa) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) 779.071965ms ago: executing program 4 (id=11620): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000001c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r9, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r9, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 737.815076ms ago: executing program 7 (id=11621): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000480)=0x4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x1, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000640), 0x8}, 0x4a00, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4000000000, 0x3fff8000}, 0x201, 0x32, 0x43a1bd76, 0x4, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, &(0x7f0000000300)="f598c1835426d886908f7cbd7ad30182b728e4657859e717b3481705df9cb2d4c597924352612f23c7f42b0fd7637fbfb3059a6728ba11a1c3c88cf7d0b7a2ad698bd375d52fc9f16212acfcf76c85b3f12cf05cda2b1fbe0801c87cda990289071c433c9a94a4f5ec37a094479779530d5184213325cf86d0e74a4d89fc168430c25aa523bbaa792fa0f8774e6e74bd67b9bf0565e32b61d46d36e740e0265df4ef883c874af330df61d367401baff9a787dcb4a67da6bc1edc9f3a392e228460e47dacf7e93b80e9605e16ae9c7dd38d9ffaa11c119f1f7eb0929bb1e84c502fbacea18759e7b91bec8a8b", 0xec, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000440)="33bdd7d5540718424694773d1ae8459eb4d9e398f45ff5c50447b92068d82903") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x40000}]}}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0xd, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800"/144], 0x90) socket(0xb, 0x3, 0x371) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x10001}}, 0x120) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES64=r7], 0x68}, 0x1, 0x0, 0x0, 0x1073a5c9991f61be}, 0x8000006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040a0}, 0x6000092) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x401}, 0x11) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 692.853496ms ago: executing program 4 (id=11622): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) r6 = socket$inet6(0xa, 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000780)="15ca05765ad86218d433e26ab10546a47a5f373a23f3f24950a62be4ac050b0c319e89190ed2ebb19c45de272ceefd7a0eeb175f0d4df74768578f3e0ebba8544b78eb071febd82fd22006f5e8f1f46dcb6dc56a4e3978fec095c2e9b2ddc8cfea8c52625996167f93e8c31655886bdf8592ccdcac2cc957b991f0bc029c470d9b86c0039b18bbda986f86029435ee0e7fb13c50b86c062e722a1510d7d7c5207e07d2e7d4d1cf5b41268b6199df60a4c25978d29bfff9997246756b34e3a7c7b8ec2b34ebe8ea813d695878c2354ae38a6d62c380af3b8a3a69cc391d2b", 0xde, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f00000001c0)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r11}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 662.692836ms ago: executing program 2 (id=11623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 568.386946ms ago: executing program 4 (id=11624): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xea8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}], 0x1c) syz_io_uring_setup(0x5449, &(0x7f0000000040)={0x0, 0x3ec6, 0x2000, 0x0, 0x387}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x200, 0xb86, 0xfffffff8, 0xff}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r2, 0x1, 0x0, 0x5, 0x1}, &(0x7f0000000380)=0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000003c0)={0x2, 0x2, 0x9}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000400)}, {&(0x7f0000000500)="dd7f0c88fd79acac8eca5f742e10c0a58c65d2bc61530e2c97cc3c6d16a869330ddd8e2fbbc7601d3f1c1b18ccfcfc81f28feeae3811e0d5dc12c13b", 0x3c}, {&(0x7f0000000540)="40a1d82545955d9af685edbc1fe6a9cb0ccb4f5d90b1a14cdcff2e0db182fd8719e57a", 0x23}], 0x3) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={r2, 0x5, 0xc323, 0x3, 0x1, 0x1000, 0x8, 0x8, {r3, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x3, 0x7e5, 0xa, 0x7}}, &(0x7f0000000680)=0xb0) r6 = dup3(r1, r1, 0x80000) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000700)="2f895b496023f0b0c541d94e4d71c2d09182540f4af20449b386a6b3882def15432bf48646b04cc0b4dfad527ab2f2a988e7a5f6c0b7392f083b72b4d4f405e90534e60530ae68c52a888e67b9e6a40f93a73736de29fba9dabdf338d0a69132c61974cade8fe5ebb2b2a9c967feafed1ba207b82e15e089400b1df96f41a2f118f1311505732adad9f08a4b65401e5d83a1e3235e6557c71aedb5c6c1", 0x9d) write$P9_RSETATTR(r6, &(0x7f00000007c0)={0x7, 0x1b, 0x1}, 0x7) syz_genetlink_get_family_id$ethtool(0x0, r6) getegid() mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r6) mount(&(0x7f0000000a40)=@rnullb, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='cgroup\x00', 0x202881, &(0x7f0000000b00)='rr\x00') setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000b40)={r5, 0x1, 0xf4, 0xdef6, 0x400, 0x1}, 0x14) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd4, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x8e, 0x6, "5bca09c3317784d43232bcb5f1c191acf40e320e06a07e10bd824e45c9b3739d82e2110739bc9c489a6b471520dffed8cde7c2959cccbc2d8f7804c22d0d52a9255f9669b516be9846af046b256aff171e6495c32bde9f2b0806874f09d26e42b920a7f4173a3df74ac799335bd0981f2886b49b72cc4148cb8cbcecb3e2e29cf9cc9474c437ab86449b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000d40)) ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000d80)={0x1}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 449.010417ms ago: executing program 7 (id=11625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fallocate_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 417.465058ms ago: executing program 4 (id=11627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r4, 0x0, 0xfffa83) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) unlink(&(0x7f0000000000)='./file0\x00') fallocate(r6, 0x2, 0x200, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000340)='./file1/file3\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file1/file3\x00', 0x0, 0x400, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r8, r9) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 228.712749ms ago: executing program 5 (id=11628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x40) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004088}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x10, 0x20, 0x2, 0xffffffff, {{0x18, 0x4, 0x3, 0x5, 0x60, 0x68, 0x0, 0x1f, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x1, [0x1, 0xfdb, 0x9, 0x1ff, 0x3]}, @noop, @timestamp={0x44, 0x28, 0x74, 0x0, 0xd, [0x10001, 0x9, 0x8, 0x188, 0x5, 0x7, 0x4, 0x346, 0x10]}, @lsrr={0x83, 0xfffffffffffffe41, 0xf7}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r9, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)={0x614, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd26}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x83}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3312}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100b}}}]}}, {{0x8, 0x1, r6}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1200000}}, {0x8, 0x6, r15}}}]}}]}, 0x614}}, 0x80) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 222.480319ms ago: executing program 4 (id=11629): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x0, 0x100, 0x4, 0x20}, 0x50) r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24000800) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @local}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") creat(&(0x7f0000000500)='./bus\x00', 0x103) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000180)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3a, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='+}[@\x00G5\v\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\n\x00\x00\x00\x00\x00\x00\x00T\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8~F\xaax*\b\x00\x00\x00\x00\x00\x00\x00\xe2r\x17\xb6\xbf\"7X|$\x92\x81\x15F6\xd4$g\xbb\xbd\xab\t\x8fFM\xe2\a\xe2\x9d\xdf}\x9a\x97\xd8 \xd1\xb1;\xaf\xec\x9e\x84\xc7\xfd\xcc\xca\x1d`qF\x80\xc3\'G JEj\x18/\xf5@mB\vkHP\xc8\xe3jl\x91\xc0\x02\xcc\xa1\xae\xac') r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000540)=@ethtool_rx_ntuple={0x35, {0x11, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, 0x7, 0x1}, @udp_ip4_spec={@remote, @multicast2, 0x4e21, 0x4e23, 0xd}, 0x2, 0x7, 0x2729, 0x8000000000000001, 0xfffffffffffffffe}}}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 6 (id=11630): mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) write$sndseq(r2, &(0x7f0000000340)=[{0x3, 0x6, 0x1, 0x6, @time={0x5bcd8317, 0x7}, {0x0, 0xa9}, {0x3, 0x1}, @connect={{0x9, 0x3}, {0x2, 0x2}}}, {0x76, 0x9, 0x5, 0xc, @time={0x8, 0x5}, {0x7, 0x9}, {0x2, 0xe0}, @note={0x0, 0x2, 0x4, 0x2, 0x8}}, {0x5, 0x80, 0x6, 0x3e, @tick=0x7, {0xe}, {0x3, 0x1}, @quote={{0x5d, 0x1}, 0x100}}, {0x0, 0x5, 0x4c, 0x24, @time={0x8}, {0x1, 0x7}, {0xe, 0x7}, @control={0x98, 0x3, 0xf8d}}], 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x28}}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x10, 0x3, 0xa) munlockall() ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x4, 0x7, 0xb}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9c000000b800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.567706][ T29] audit: type=1326 audit(2000000047.220:160830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.591777][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10982'. [ 1261.601173][ T29] audit: type=1326 audit(2000000047.220:160831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.625524][ T29] audit: type=1326 audit(2000000047.220:160832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.645971][ T9956] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1261.649938][ T29] audit: type=1326 audit(2000000047.241:160833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.683752][ T29] audit: type=1326 audit(2000000047.241:160834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9936 comm="syz.4.10979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1261.713759][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.844831][ T9952] wg1 speed is unknown, defaulting to 1000 [ 1261.858502][ T9952] lo speed is unknown, defaulting to 1000 [ 1261.994728][ T9952] lo speed is unknown, defaulting to 1000 [ 1262.605304][ T9989] lo speed is unknown, defaulting to 1000 [ 1262.892344][ T9989] wg1 speed is unknown, defaulting to 1000 [ 1262.904986][ T9985] netlink: 'syz.7.10986': attribute type 21 has an invalid length. [ 1262.932072][ T9989] lo speed is unknown, defaulting to 1000 [ 1263.227708][ T9989] lo speed is unknown, defaulting to 1000 [ 1263.886208][T10028] __nla_validate_parse: 8 callbacks suppressed [ 1263.886227][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11005'. [ 1263.967399][T10025] netlink: 'syz.5.11004': attribute type 10 has an invalid length. [ 1264.099019][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11007'. [ 1264.107058][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11008'. [ 1264.121975][T10041] netlink: 'syz.6.11008': attribute type 12 has an invalid length. [ 1264.183084][T10025] netlink: 'syz.5.11004': attribute type 10 has an invalid length. [ 1264.323237][T10055] loop4: detected capacity change from 0 to 512 [ 1264.342847][T10055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1264.382866][T10055] EXT4-fs (loop4): 1 truncate cleaned up [ 1264.389249][T10061] selinux_netlink_send: 7 callbacks suppressed [ 1264.389260][T10061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10061 comm=syz.6.11015 [ 1264.409938][T10055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.458323][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.509935][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11018'. [ 1264.585362][T10072] !yz!: rxe_newlink: already configured on team_slave_0 [ 1264.632674][T10074] 9p: Unknown access argument ¿: -22 [ 1264.910274][T10087] loop4: detected capacity change from 0 to 512 [ 1264.918133][T10087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1265.358744][T10100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10100 comm=syz.5.11028 [ 1265.439532][T10102] netlink: 'syz.5.11029': attribute type 1 has an invalid length. [ 1265.447423][T10102] netlink: 'syz.5.11029': attribute type 2 has an invalid length. [ 1265.774883][T10087] EXT4-fs (loop4): 1 truncate cleaned up [ 1265.845720][T10087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1265.946401][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.018817][T10111] netlink: 'syz.7.11031': attribute type 10 has an invalid length. [ 1266.061794][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11033'. [ 1266.088267][T10121] loop4: detected capacity change from 0 to 512 [ 1266.145739][T10121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1266.153202][ T29] kauditd_printk_skb: 3040 callbacks suppressed [ 1266.153230][ T29] audit: type=1400 audit(2000000052.217:163875): avc: denied { getopt } for pid=10126 comm="syz.2.11037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1266.184428][T10127] rdma_rxe: rxe_newlink: failed to add bond0 [ 1266.190730][T10121] EXT4-fs (loop4): 1 truncate cleaned up [ 1266.218519][T10121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.241550][T10111] netlink: 'syz.7.11031': attribute type 10 has an invalid length. [ 1266.255591][ T29] audit: type=1326 audit(2000000052.322:163876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.11036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f131847f6c9 code=0x7ffc0000 [ 1266.298253][T10111] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1266.309628][ T29] audit: type=1326 audit(2000000052.353:163877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc13cdf10 code=0x7ffc0000 [ 1266.333505][ T29] audit: type=1326 audit(2000000052.353:163878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcbc13ce417 code=0x7ffc0000 [ 1266.357262][ T29] audit: type=1326 audit(2000000052.353:163879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc13cdf10 code=0x7ffc0000 [ 1266.381052][ T29] audit: type=1326 audit(2000000052.353:163880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1266.404885][ T29] audit: type=1326 audit(2000000052.353:163881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1266.428779][ T29] audit: type=1326 audit(2000000052.353:163882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1266.452703][ T29] audit: type=1326 audit(2000000052.353:163883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1266.476537][ T29] audit: type=1326 audit(2000000052.353:163884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.4.11034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1266.515638][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.626123][T10137] lo speed is unknown, defaulting to 1000 [ 1266.696876][T10137] wg1 speed is unknown, defaulting to 1000 [ 1266.703083][T10137] lo speed is unknown, defaulting to 1000 [ 1266.752393][T10137] lo speed is unknown, defaulting to 1000 [ 1266.847109][T10145] lo speed is unknown, defaulting to 1000 [ 1266.897534][T10142] syz.2.11041 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 1266.911488][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.2.11041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1266.911531][T10142] Tainted: [W]=WARN [ 1266.911540][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1266.911607][T10142] Call Trace: [ 1266.911617][T10142] [ 1266.911627][T10142] __dump_stack+0x1d/0x30 [ 1266.911657][T10142] dump_stack_lvl+0xe8/0x140 [ 1266.911687][T10142] dump_stack+0x15/0x1b [ 1266.911710][T10142] dump_header+0x81/0x220 [ 1266.911731][T10142] oom_kill_process+0x342/0x400 [ 1266.911859][T10142] out_of_memory+0x979/0xb80 [ 1266.911964][T10142] try_charge_memcg+0x610/0xa10 [ 1266.912003][T10142] obj_cgroup_charge_pages+0xa6/0x150 [ 1266.912107][T10142] obj_cgroup_charge_account+0x73/0x1a0 [ 1266.912156][T10142] __memcg_slab_post_alloc_hook+0x398/0x580 [ 1266.912186][T10142] kmem_cache_alloc_noprof+0x2b8/0x480 [ 1266.912251][T10142] ? alloc_buffer_head+0x35/0x1f0 [ 1266.912345][T10142] alloc_buffer_head+0x35/0x1f0 [ 1266.912372][T10142] folio_alloc_buffers+0x14a/0x310 [ 1266.912422][T10142] create_empty_buffers+0x2c/0x200 [ 1266.912513][T10142] __block_write_begin_int+0x1d4/0xf90 [ 1266.912648][T10142] ? filemap_get_entry+0x34b/0x390 [ 1266.912682][T10142] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1266.912702][T10142] ? ktime_get_coarse_real_ts64_mg+0x187/0x1a0 [ 1266.912734][T10142] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 1266.912793][T10142] block_page_mkwrite+0x1a8/0x3d0 [ 1266.912824][T10142] ext4_page_mkwrite+0x859/0xb90 [ 1266.912919][T10142] ? folio_unlock+0xd9/0x120 [ 1266.912948][T10142] handle_mm_fault+0x15ce/0x2be0 [ 1266.912975][T10142] ? vma_start_read+0x141/0x1f0 [ 1266.913096][T10142] do_user_addr_fault+0x630/0x1080 [ 1266.913117][T10142] ? fpregs_restore_userregs+0xe2/0x1d0 [ 1266.913151][T10142] ? switch_fpu_return+0xe/0x20 [ 1266.913196][T10142] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 1266.913239][T10142] exc_page_fault+0x62/0xa0 [ 1266.913274][T10142] asm_exc_page_fault+0x26/0x30 [ 1266.913357][T10142] RIP: 0033:0x7f131835137c [ 1266.913377][T10142] Code: 43 eb 00 01 48 8d 50 ff 48 89 15 f7 43 eb 00 88 48 ff 8b 2d de 43 eb 00 e8 81 7a ff ff 48 8b 05 ea 43 eb 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 da 43 eb 00 01 66 83 3d d6 [ 1266.913473][T10142] RSP: 002b:00007fff111f6660 EFLAGS: 00010206 [ 1266.913493][T10142] RAX: 0000001b33b24220 RBX: 00007f1319205720 RCX: 0000000000000003 [ 1266.913521][T10142] RDX: 0000001b33b24220 RSI: 0000000000000008 RDI: 00007f1319205720 [ 1266.913537][T10142] RBP: 0000000000013a95 R08: 00007f13186d6218 R09: 00007f13186c2000 [ 1266.913552][T10142] R10: 00007f13176eb008 R11: 0000000000000015 R12: 0000000000000004 [ 1266.913621][T10142] R13: 0000000000000016 R14: 0000000000000000 R15: 0000000000013a94 [ 1266.913661][T10142] [ 1266.913670][T10142] memory: usage 307200kB, limit 307200kB, failcnt 11259 [ 1267.022412][T10145] wg1 speed is unknown, defaulting to 1000 [ 1267.022764][T10145] lo speed is unknown, defaulting to 1000 [ 1267.113151][T10145] lo speed is unknown, defaulting to 1000 [ 1267.113758][T10142] memory+swap: usage 346972kB, limit 9007199254740988kB, failcnt 0 [ 1267.113777][T10142] kmem: usage 150368kB, limit 9007199254740988kB, failcnt 0 [ 1267.225251][T10142] Memory cgroup stats for /syz2: [ 1267.227909][T10142] cache 69197824 [ 1267.236499][T10142] rss 90771456 [ 1267.239944][T10142] shmem 69632 [ 1267.243248][T10142] mapped_file 2310144 [ 1267.247398][T10142] dirty 0 [ 1267.251150][T10142] writeback 0 [ 1267.254526][T10142] workingset_refault_anon 10374 [ 1267.259561][T10142] workingset_refault_file 17386 [ 1267.264435][T10142] swap 40726528 [ 1267.267895][T10142] swapcached 626688 [ 1267.271745][T10142] pgpgin 2275425 [ 1267.275305][T10142] pgpgout 2236217 [ 1267.279687][T10142] pgfault 2329446 [ 1267.283334][T10142] pgmajfault 1682 [ 1267.286965][T10142] inactive_anon 290816 [ 1267.291091][T10142] active_anon 91176960 [ 1267.295168][T10142] inactive_file 0 [ 1267.298829][T10142] active_file 4096 [ 1267.302552][T10142] unevictable 69124096 [ 1267.307365][T10142] hierarchical_memory_limit 314572800 [ 1267.312786][T10142] hierarchical_memsw_limit 9223372036854771712 [ 1267.318989][T10142] total_cache 69197824 [ 1267.323062][T10142] total_rss 90771456 [ 1267.327064][T10142] total_shmem 69632 [ 1267.330969][T10142] total_mapped_file 2310144 [ 1267.336171][T10142] total_dirty 0 [ 1267.339649][T10142] total_writeback 0 [ 1267.343475][T10142] total_workingset_refault_anon 10374 [ 1267.348905][T10142] total_workingset_refault_file 17386 [ 1267.354309][T10142] total_swap 40726528 [ 1267.358296][T10142] total_swapcached 626688 [ 1267.362634][T10142] total_pgpgin 2275425 [ 1267.367533][T10142] total_pgpgout 2236217 [ 1267.371704][T10142] total_pgfault 2329446 [ 1267.375912][T10142] total_pgmajfault 1682 [ 1267.380086][T10142] total_inactive_anon 290816 [ 1267.384725][T10142] total_active_anon 91176960 [ 1267.389321][T10142] total_inactive_file 0 [ 1267.394317][T10142] total_active_file 4096 [ 1267.398624][T10142] total_unevictable 69124096 [ 1267.403268][T10142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9979,pid=6604,uid=0 [ 1267.417944][T10142] Memory cgroup out of memory: Killed process 6604 (syz.2.9979) total-vm:93956kB, anon-rss:12788kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1267.504326][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1267.694575][T10166] loop4: detected capacity change from 0 to 512 [ 1267.746398][T10166] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.11048: inode has both inline data and extents flags [ 1267.777397][T10143] syz.2.11041 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1267.791540][T10143] CPU: 0 UID: 0 PID: 10143 Comm: syz.2.11041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1267.791655][T10143] Tainted: [W]=WARN [ 1267.791665][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1267.791758][T10143] Call Trace: [ 1267.791832][T10143] [ 1267.791843][T10143] __dump_stack+0x1d/0x30 [ 1267.791875][T10143] dump_stack_lvl+0xe8/0x140 [ 1267.791911][T10143] dump_stack+0x15/0x1b [ 1267.791935][T10143] dump_header+0x81/0x220 [ 1267.792024][T10143] oom_kill_process+0x342/0x400 [ 1267.792147][T10143] out_of_memory+0x979/0xb80 [ 1267.792181][T10143] try_charge_memcg+0x610/0xa10 [ 1267.792272][T10143] obj_cgroup_charge_pages+0xa6/0x150 [ 1267.792295][T10143] __memcg_kmem_charge_page+0x9f/0x170 [ 1267.792368][T10143] __alloc_frozen_pages_noprof+0x188/0x360 [ 1267.792402][T10143] alloc_pages_mpol+0xb3/0x260 [ 1267.792430][T10143] alloc_pages_noprof+0x90/0x130 [ 1267.792455][T10143] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1267.792559][T10143] __kvmalloc_node_noprof+0x483/0x670 [ 1267.792601][T10143] ? ip_set_alloc+0x24/0x30 [ 1267.792640][T10143] ? ip_set_alloc+0x24/0x30 [ 1267.792727][T10143] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1267.792764][T10143] ip_set_alloc+0x24/0x30 [ 1267.792795][T10143] hash_netiface_create+0x282/0x740 [ 1267.792916][T10143] ? __pfx_hash_netiface_create+0x10/0x10 [ 1267.792951][T10143] ip_set_create+0x3cc/0x970 [ 1267.792971][T10143] ? save_fpregs_to_fpstate+0x100/0x160 [ 1267.793018][T10143] nfnetlink_rcv_msg+0x4c6/0x590 [ 1267.793078][T10143] netlink_rcv_skb+0x123/0x220 [ 1267.793168][T10143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1267.793204][T10143] nfnetlink_rcv+0x167/0x16c0 [ 1267.793233][T10143] ? cmp_ex_search+0x25/0x40 [ 1267.793337][T10143] ? bsearch+0x95/0xc0 [ 1267.793363][T10143] ? __pfx_cmp_ex_search+0x10/0x10 [ 1267.793386][T10143] ? strncpy_from_kernel_nofault+0x78/0x130 [ 1267.793408][T10143] ? search_extable+0x53/0x80 [ 1267.793430][T10143] ? strncpy_from_kernel_nofault+0x78/0x130 [ 1267.793487][T10143] ? strncpy_from_kernel_nofault+0x78/0x130 [ 1267.793509][T10143] ? fixup_exception+0x741/0xd50 [ 1267.793546][T10143] ? __list_add_valid_or_report+0x38/0xe0 [ 1267.793608][T10143] ? trace_event_reg+0xdc/0x170 [ 1267.793707][T10143] ? perf_trace_add+0x176/0x1a0 [ 1267.793730][T10143] ? event_sched_in+0x675/0x750 [ 1267.793827][T10143] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 1267.793849][T10143] ? should_fail_ex+0x30/0x280 [ 1267.793868][T10143] ? selinux_nlmsg_lookup+0x99/0x890 [ 1267.793945][T10143] ? __rcu_read_unlock+0x34/0x70 [ 1267.793972][T10143] ? __netlink_lookup+0x266/0x2a0 [ 1267.794014][T10143] netlink_unicast+0x5c0/0x690 [ 1267.794051][T10143] netlink_sendmsg+0x58b/0x6b0 [ 1267.794071][T10143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1267.794090][T10143] __sock_sendmsg+0x145/0x180 [ 1267.794146][T10143] ____sys_sendmsg+0x31e/0x4e0 [ 1267.794181][T10143] ___sys_sendmsg+0x17b/0x1d0 [ 1267.794214][T10143] __x64_sys_sendmsg+0xd4/0x160 [ 1267.794242][T10143] x64_sys_call+0x191e/0x3000 [ 1267.794274][T10143] do_syscall_64+0xd2/0x200 [ 1267.794293][T10143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1267.794392][T10143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1267.794485][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.794505][T10143] RIP: 0033:0x7f131847f6c9 [ 1267.794520][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1267.794537][T10143] RSP: 002b:00007f1316ee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.794623][T10143] RAX: ffffffffffffffda RBX: 00007f13186d5fa0 RCX: 00007f131847f6c9 [ 1267.794635][T10143] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 1267.794647][T10143] RBP: 00007f1318501f91 R08: 0000000000000000 R09: 0000000000000000 [ 1267.794658][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.794670][T10143] R13: 00007f13186d6038 R14: 00007f13186d5fa0 R15: 00007fff111f65b8 [ 1267.794688][T10143] [ 1268.177876][T10143] memory: usage 307200kB, limit 307200kB, failcnt 11384 [ 1268.184864][T10143] memory+swap: usage 346972kB, limit 9007199254740988kB, failcnt 0 [ 1268.192788][T10143] kmem: usage 162000kB, limit 9007199254740988kB, failcnt 0 [ 1268.200187][T10143] Memory cgroup stats for /syz2: [ 1268.242208][T10174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10174 comm=syz.5.11050 [ 1268.260598][T10174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10174 comm=syz.5.11050 [ 1268.275223][T10166] EXT4-fs (loop4): get root inode failed [ 1268.280990][T10166] EXT4-fs (loop4): mount failed [ 1268.292907][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11050'. [ 1268.338312][T10175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10175 comm=syz.5.11050 [ 1268.361876][T10143] cache 69197824 [ 1268.365575][T10143] rss 78860288 [ 1268.368943][T10143] shmem 69632 [ 1268.372250][T10143] mapped_file 2314240 [ 1268.376891][T10143] dirty 0 [ 1268.379822][T10143] writeback 0 [ 1268.383115][T10143] workingset_refault_anon 10374 [ 1268.388005][T10143] workingset_refault_file 17386 [ 1268.392911][T10143] swap 40726528 [ 1268.396375][T10143] swapcached 626688 [ 1268.400180][T10143] pgpgin 2275427 [ 1268.404462][T10143] pgpgout 2239127 [ 1268.408156][T10143] pgfault 2329464 [ 1268.411863][T10143] pgmajfault 1682 [ 1268.415499][T10143] inactive_anon 79257600 [ 1268.419786][T10143] active_anon 299008 [ 1268.423698][T10143] inactive_file 4096 [ 1268.427622][T10143] active_file 0 [ 1268.431859][T10143] unevictable 69124096 [ 1268.435936][T10143] hierarchical_memory_limit 314572800 [ 1268.441472][T10143] hierarchical_memsw_limit 9223372036854771712 [ 1268.447661][T10143] total_cache 69197824 [ 1268.451766][T10143] total_rss 78860288 [ 1268.455688][T10143] total_shmem 69632 [ 1268.460105][T10143] total_mapped_file 2314240 [ 1268.464611][T10143] total_dirty 0 [ 1268.468072][T10143] total_writeback 0 [ 1268.471949][T10143] total_workingset_refault_anon 10374 [ 1268.477335][T10143] total_workingset_refault_file 17386 [ 1268.482755][T10143] total_swap 40726528 [ 1268.486804][T10143] total_swapcached 626688 [ 1268.491867][T10143] total_pgpgin 2275427 [ 1268.495962][T10143] total_pgpgout 2239127 [ 1268.500142][T10143] total_pgfault 2329464 [ 1268.504304][T10143] total_pgmajfault 1682 [ 1268.508502][T10143] total_inactive_anon 79257600 [ 1268.513271][T10143] total_active_anon 299008 [ 1268.518433][T10143] total_inactive_file 4096 [ 1268.522855][T10143] total_active_file 0 [ 1268.526862][T10143] total_unevictable 69124096 [ 1268.531510][T10143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9848,pid=6171,uid=0 [ 1268.546810][T10143] Memory cgroup out of memory: Killed process 6171 (syz.2.9848) total-vm:93956kB, anon-rss:12788kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1268.596668][T10166] bond0: (slave bond1): Releasing backup interface [ 1268.783171][T10183] loop4: detected capacity change from 0 to 512 [ 1268.826640][T10183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.854919][T10183] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.881712][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1269.184736][T10189] netlink: 'syz.5.11055': attribute type 10 has an invalid length. [ 1269.375765][T10203] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1269.390898][T10189] netlink: 'syz.5.11055': attribute type 10 has an invalid length. [ 1269.470626][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.514872][T10210] loop4: detected capacity change from 0 to 1024 [ 1269.534340][T10210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.540255][T10208] !yz!: rxe_newlink: already configured on team_slave_0 [ 1269.576181][T10216] netlink: 172 bytes leftover after parsing attributes in process `syz.7.11064'. [ 1269.588650][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11064'. [ 1269.621900][T10218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10218 comm=syz.7.11065 [ 1269.625359][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.635425][T10218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10218 comm=syz.7.11065 [ 1269.670273][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11065'. [ 1269.683823][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.704568][T10218] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10218 comm=syz.7.11065 [ 1269.938094][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11067'. [ 1270.085582][T10230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10230 comm=syz.5.11068 [ 1270.098326][T10230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10230 comm=syz.5.11068 [ 1270.112741][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11068'. [ 1270.141470][T10230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10230 comm=syz.5.11068 [ 1270.224073][T10239] tipc: New replicast peer: 255.255.255.255 [ 1270.230209][T10239] tipc: Enabled bearer , priority 10 [ 1270.313539][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.918264][ T29] kauditd_printk_skb: 1242 callbacks suppressed [ 1270.918279][ T29] audit: type=1326 audit(2000000057.224:165127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1270.949107][ T29] audit: type=1326 audit(2000000057.224:165128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5874cab779 code=0x7ffc0000 [ 1270.972913][ T29] audit: type=1326 audit(2000000057.224:165129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1270.997480][ T29] audit: type=1326 audit(2000000057.235:165130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1271.022108][ T29] audit: type=1326 audit(2000000057.235:165131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5874cab779 code=0x7ffc0000 [ 1271.045938][ T29] audit: type=1326 audit(2000000057.235:165132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1271.070280][ T29] audit: type=1326 audit(2000000057.245:165133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1271.094184][ T29] audit: type=1326 audit(2000000057.245:165134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5874cab779 code=0x7ffc0000 [ 1271.118436][ T29] audit: type=1326 audit(2000000057.245:165135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1271.142268][ T29] audit: type=1326 audit(2000000057.256:165136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.6.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1271.297623][ T4695] tipc: Node number set to 2886997007 [ 1271.983787][T10244] netlink: 'syz.5.11084': attribute type 10 has an invalid length. [ 1271.984067][T10244] netlink: 'syz.5.11084': attribute type 10 has an invalid length. [ 1272.294960][T10254] dvmrp1: entered allmulticast mode [ 1272.324696][T10245] syz.2.11072 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1272.339470][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.2.11072 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1272.339563][T10245] Tainted: [W]=WARN [ 1272.339571][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1272.339582][T10245] Call Trace: [ 1272.339588][T10245] [ 1272.339595][T10245] __dump_stack+0x1d/0x30 [ 1272.339692][T10245] dump_stack_lvl+0xe8/0x140 [ 1272.339768][T10245] dump_stack+0x15/0x1b [ 1272.339785][T10245] dump_header+0x81/0x220 [ 1272.339809][T10245] oom_kill_process+0x342/0x400 [ 1272.339849][T10245] out_of_memory+0x979/0xb80 [ 1272.339958][T10245] try_charge_memcg+0x610/0xa10 [ 1272.339994][T10245] obj_cgroup_charge_pages+0xa6/0x150 [ 1272.340017][T10245] __memcg_kmem_charge_page+0x9f/0x170 [ 1272.340081][T10245] __alloc_frozen_pages_noprof+0x188/0x360 [ 1272.340131][T10245] alloc_pages_mpol+0xb3/0x260 [ 1272.340158][T10245] ? alloc_pages_noprof+0xf4/0x130 [ 1272.340200][T10245] alloc_pages_noprof+0x90/0x130 [ 1272.340229][T10245] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1272.340316][T10245] __kvmalloc_node_noprof+0x483/0x670 [ 1272.340486][T10245] ? ip_set_alloc+0x24/0x30 [ 1272.340522][T10245] ? ip_set_alloc+0x24/0x30 [ 1272.340554][T10245] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1272.340662][T10245] ip_set_alloc+0x24/0x30 [ 1272.340704][T10245] hash_netiface_create+0x282/0x740 [ 1272.340745][T10245] ? __pfx_hash_netiface_create+0x10/0x10 [ 1272.340789][T10245] ip_set_create+0x3cc/0x970 [ 1272.340880][T10245] ? __nla_parse+0x40/0x60 [ 1272.340902][T10245] nfnetlink_rcv_msg+0x4c6/0x590 [ 1272.341025][T10245] netlink_rcv_skb+0x123/0x220 [ 1272.341058][T10245] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1272.341152][T10245] nfnetlink_rcv+0x167/0x16c0 [ 1272.341213][T10245] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1272.341257][T10245] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 1272.341320][T10245] ? should_fail_ex+0x30/0x280 [ 1272.341346][T10245] ? selinux_nlmsg_lookup+0x99/0x890 [ 1272.341383][T10245] ? __rcu_read_unlock+0x34/0x70 [ 1272.341480][T10245] ? __netlink_lookup+0x266/0x2a0 [ 1272.341583][T10245] netlink_unicast+0x5c0/0x690 [ 1272.341631][T10245] netlink_sendmsg+0x58b/0x6b0 [ 1272.341659][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.341733][T10245] __sock_sendmsg+0x145/0x180 [ 1272.341764][T10245] ____sys_sendmsg+0x31e/0x4e0 [ 1272.341811][T10245] ___sys_sendmsg+0x17b/0x1d0 [ 1272.341923][T10245] __x64_sys_sendmsg+0xd4/0x160 [ 1272.341958][T10245] x64_sys_call+0x191e/0x3000 [ 1272.342068][T10245] do_syscall_64+0xd2/0x200 [ 1272.342098][T10245] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1272.342140][T10245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1272.342282][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.342307][T10245] RIP: 0033:0x7f131847f6c9 [ 1272.342328][T10245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.342409][T10245] RSP: 002b:00007f1316ee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.342431][T10245] RAX: ffffffffffffffda RBX: 00007f13186d5fa0 RCX: 00007f131847f6c9 [ 1272.342444][T10245] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 1272.342456][T10245] RBP: 00007f1318501f91 R08: 0000000000000000 R09: 0000000000000000 [ 1272.342468][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.342485][T10245] R13: 00007f13186d6038 R14: 00007f13186d5fa0 R15: 00007fff111f65b8 [ 1272.342570][T10245] [ 1272.342632][T10245] memory: usage 307200kB, limit 307200kB, failcnt 11632 [ 1272.691599][T10245] memory+swap: usage 346972kB, limit 9007199254740988kB, failcnt 0 [ 1272.699574][T10245] kmem: usage 173800kB, limit 9007199254740988kB, failcnt 0 [ 1272.706882][T10245] Memory cgroup stats for /syz2: [ 1272.726911][T10245] cache 69193728 [ 1272.735480][T10245] rss 66781184 [ 1272.739119][T10245] shmem 69632 [ 1272.742583][T10245] mapped_file 2310144 [ 1272.747441][T10245] dirty 0 [ 1272.750428][T10245] writeback 0 [ 1272.753720][T10245] workingset_refault_anon 10374 [ 1272.758883][T10245] workingset_refault_file 17557 [ 1272.763739][T10245] swap 40726528 [ 1272.767427][T10245] swapcached 626688 [ 1272.771250][T10245] pgpgin 2279908 [ 1272.775811][T10245] pgpgout 2246558 [ 1272.779470][T10245] pgfault 2334010 [ 1272.783107][T10245] pgmajfault 1685 [ 1272.786861][T10245] inactive_anon 499712 [ 1272.790959][T10245] active_anon 66977792 [ 1272.795056][T10245] inactive_file 0 [ 1272.798697][T10245] active_file 0 [ 1272.802168][T10245] unevictable 69124096 [ 1272.806855][T10245] hierarchical_memory_limit 314572800 [ 1272.812251][T10245] hierarchical_memsw_limit 9223372036854771712 [ 1272.818452][T10245] total_cache 69193728 [ 1272.822562][T10245] total_rss 66781184 [ 1272.826486][T10245] total_shmem 69632 [ 1272.830316][T10245] total_mapped_file 2310144 [ 1272.835539][T10245] total_dirty 0 [ 1272.839004][T10245] total_writeback 0 [ 1272.842852][T10245] total_workingset_refault_anon 10374 [ 1272.848230][T10245] total_workingset_refault_file 17557 [ 1272.853637][T10245] total_swap 40726528 [ 1272.857638][T10245] total_swapcached 626688 [ 1272.862688][T10245] total_pgpgin 2279908 [ 1272.866763][T10245] total_pgpgout 2246558 [ 1272.870955][T10245] total_pgfault 2334010 [ 1272.875142][T10245] total_pgmajfault 1685 [ 1272.879321][T10245] total_inactive_anon 499712 [ 1272.883983][T10245] total_active_anon 66977792 [ 1272.889268][T10245] total_inactive_file 0 [ 1272.893447][T10245] total_active_file 0 [ 1272.897500][T10245] total_unevictable 69124096 [ 1272.902157][T10245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9821,pid=6087,uid=0 [ 1272.917575][T10245] Memory cgroup out of memory: Killed process 6087 (syz.2.9821) total-vm:93956kB, anon-rss:12788kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1273.082055][T10267] netlink: 'syz.6.11078': attribute type 10 has an invalid length. [ 1273.112520][T10267] bond0: (slave dummy0): Releasing backup interface [ 1273.174889][T10270] lo speed is unknown, defaulting to 1000 [ 1273.320111][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11080'. [ 1273.322842][T10267] netlink: 'syz.6.11078': attribute type 10 has an invalid length. [ 1273.360263][T10270] wg1 speed is unknown, defaulting to 1000 [ 1273.374096][T10270] lo speed is unknown, defaulting to 1000 [ 1273.420183][T10267] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1273.488660][T10270] lo speed is unknown, defaulting to 1000 [ 1273.887405][T10293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11087'. [ 1273.930895][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11086'. [ 1274.000351][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11091'. [ 1274.017096][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11089'. [ 1274.115705][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11089'. [ 1274.190090][T10313] 9pnet: Could not find request transport: r [ 1274.383263][T10324] loop4: detected capacity change from 0 to 512 [ 1274.413005][T10324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1274.439502][T10324] EXT4-fs (loop4): 1 truncate cleaned up [ 1274.454286][T10324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.515085][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.601243][T10332] loop4: detected capacity change from 0 to 512 [ 1274.617866][T10332] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1274.639096][T10332] EXT4-fs (loop4): 1 truncate cleaned up [ 1274.651906][T10332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.710457][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.814449][T10340] loop4: detected capacity change from 0 to 8192 [ 1274.831390][T10343] can: request_module (can-proto-0) failed. [ 1274.855409][T10340] loop4: p1 p2 p4[DM] [ 1274.859955][T10340] loop4: p1 size 835329 extends beyond EOD, truncated [ 1274.878726][T10348] netlink: 'syz.5.11101': attribute type 10 has an invalid length. [ 1274.887836][T10340] loop4: p2 size 327680 extends beyond EOD, truncated [ 1274.897126][T10340] loop4: p4 size 262144 extends beyond EOD, truncated [ 1274.921422][T10340] netlink: 664 bytes leftover after parsing attributes in process `syz.4.11098'. [ 1275.078784][T10348] netlink: 'syz.5.11101': attribute type 10 has an invalid length. [ 1275.241763][T10354] loop4: detected capacity change from 0 to 512 [ 1275.252390][T10354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1275.268399][T10354] EXT4-fs (loop4): 1 truncate cleaned up [ 1275.280083][T10354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.307456][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.406108][T10367] lo speed is unknown, defaulting to 1000 [ 1275.504912][T10367] wg1 speed is unknown, defaulting to 1000 [ 1275.514321][T10367] lo speed is unknown, defaulting to 1000 [ 1275.528773][T10371] netlink: 'syz.4.11110': attribute type 30 has an invalid length. [ 1275.554422][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11109'. [ 1275.598759][T10373] geneve2: entered promiscuous mode [ 1275.604092][T10373] geneve2: entered allmulticast mode [ 1275.630940][T10367] lo speed is unknown, defaulting to 1000 [ 1275.652001][T10371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10371 comm=syz.4.11110 [ 1275.689167][ T29] kauditd_printk_skb: 1465 callbacks suppressed [ 1275.689183][ T29] audit: type=1326 audit(2000000062.221:166602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.801247][ T29] audit: type=1326 audit(2000000062.263:166603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.825931][ T29] audit: type=1326 audit(2000000062.263:166604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.849902][ T29] audit: type=1326 audit(2000000062.274:166605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.874414][ T29] audit: type=1326 audit(2000000062.274:166606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.898219][ T29] audit: type=1326 audit(2000000062.274:166607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.922904][ T29] audit: type=1326 audit(2000000062.326:166608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.947538][ T29] audit: type=1326 audit(2000000062.337:166609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.5.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1275.974572][ T29] audit: type=1326 audit(2000000062.347:166610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1275.999066][ T29] audit: type=1326 audit(2000000062.347:166611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.11113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1276.177750][T10389] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1276.229745][T10381] loop4: detected capacity change from 0 to 128 [ 1276.257790][T10381] vfat: Bad value for 'shortname' [ 1276.541518][T10403] lo speed is unknown, defaulting to 1000 [ 1276.584719][T10406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10406 comm=syz.2.11121 [ 1276.597536][T10406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10406 comm=syz.2.11121 [ 1276.643025][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11121'. [ 1276.678714][T10411] netlink: 'syz.7.11122': attribute type 10 has an invalid length. [ 1276.697912][T10406] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10406 comm=syz.2.11121 [ 1276.746935][T10411] bond0: (slave dummy0): Releasing backup interface [ 1276.796691][T10403] wg1 speed is unknown, defaulting to 1000 [ 1276.806180][T10403] lo speed is unknown, defaulting to 1000 [ 1276.888542][T10403] lo speed is unknown, defaulting to 1000 [ 1276.923909][T10411] netlink: 'syz.7.11122': attribute type 10 has an invalid length. [ 1276.962891][T10411] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1277.198207][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11120'. [ 1277.207488][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11120'. [ 1277.387123][T10422] netlink: 'syz.6.11124': attribute type 30 has an invalid length. [ 1277.442187][T10424] geneve3: entered promiscuous mode [ 1277.447491][T10424] geneve3: entered allmulticast mode [ 1277.488227][T10422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10422 comm=syz.6.11124 [ 1277.541800][T10381] netlink: 'syz.4.11113': attribute type 21 has an invalid length. [ 1278.044292][T10428] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1278.073901][T10427] delete_channel: no stack [ 1278.488348][T10451] loop4: detected capacity change from 0 to 128 [ 1278.505896][T10451] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1278.524407][T10451] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1278.566181][T10451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10451 comm=syz.4.11135 [ 1278.579032][T10451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10451 comm=syz.4.11135 [ 1278.611245][T10451] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10451 comm=syz.4.11135 [ 1278.682201][T10461] 9p: Unknown access argument ¿: -22 [ 1278.688170][T10456] lo speed is unknown, defaulting to 1000 [ 1278.711917][T10454] netlink: 'syz.6.11136': attribute type 10 has an invalid length. [ 1278.723521][T10454] bond0: (slave dummy0): Releasing backup interface [ 1278.770082][T10456] wg1 speed is unknown, defaulting to 1000 [ 1278.776428][T10456] lo speed is unknown, defaulting to 1000 [ 1278.816276][T10456] lo speed is unknown, defaulting to 1000 [ 1278.824636][T10466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10466 comm=syz.5.11139 [ 1278.837923][T10466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10466 comm=syz.5.11139 [ 1278.853829][T10466] __nla_validate_parse: 1 callbacks suppressed [ 1278.853845][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11139'. [ 1278.931716][T10454] netlink: 'syz.6.11136': attribute type 10 has an invalid length. [ 1278.948486][T10454] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1279.001487][T10473] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11141'. [ 1279.286207][T10480] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1280.386623][T10509] netlink: 'syz.2.11145': attribute type 21 has an invalid length. [ 1280.461952][ T29] kauditd_printk_skb: 5967 callbacks suppressed [ 1280.461971][ T29] audit: type=1326 audit(2000000067.239:172579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1280.492197][ T29] audit: type=1326 audit(2000000067.239:172580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1280.515876][ T29] audit: type=1326 audit(2000000067.239:172581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5874cab779 code=0x7ffc0000 [ 1280.545756][ T29] audit: type=1326 audit(2000000067.239:172582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1280.569550][ T29] audit: type=1326 audit(2000000067.239:172583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1280.593318][ T29] audit: type=1326 audit(2000000067.271:172584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.11148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1280.617012][ T29] audit: type=1326 audit(2000000067.281:172585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5874d06567 code=0x7ffc0000 [ 1280.640764][ T29] audit: type=1326 audit(2000000067.281:172586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5874cab779 code=0x7ffc0000 [ 1280.664674][ T29] audit: type=1326 audit(2000000067.281:172587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.6.11147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5874d0f703 code=0x7ffc0000 [ 1280.688275][ T29] audit: type=1326 audit(2000000067.323:172588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.2.11145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f131841b779 code=0x7ffc0000 [ 1280.847692][T10526] wireguard0: entered promiscuous mode [ 1280.853251][T10526] wireguard0: entered allmulticast mode [ 1280.892396][T10529] loop4: detected capacity change from 0 to 512 [ 1280.948189][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.972681][T10532] selinux_netlink_send: 1 callbacks suppressed [ 1280.972746][T10532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10532 comm=syz.5.11153 [ 1280.991933][T10532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10532 comm=syz.5.11153 [ 1281.035364][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11153'. [ 1281.042025][T10529] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.089293][T10532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10532 comm=syz.5.11153 [ 1281.566341][T10548] netlink: 'syz.6.11157': attribute type 10 has an invalid length. [ 1281.581534][T10548] bond0: (slave dummy0): Releasing backup interface [ 1281.597705][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.686225][T10552] loop4: detected capacity change from 0 to 128 [ 1281.715373][T10552] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1281.751747][T10552] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1281.777793][T10538] vlan0: entered allmulticast mode [ 1281.782963][T10538] bridge_slave_0: entered allmulticast mode [ 1281.799386][T10552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10552 comm=syz.4.11158 [ 1281.812786][T10552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10552 comm=syz.4.11158 [ 1281.839503][T10548] netlink: 'syz.6.11157': attribute type 10 has an invalid length. [ 1281.858131][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11158'. [ 1281.880540][T10548] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1281.908686][T10552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10552 comm=syz.4.11158 [ 1282.236639][T10563] netlink: 'syz.7.11161': attribute type 4 has an invalid length. [ 1282.268744][T10563] netlink: 'syz.7.11161': attribute type 4 has an invalid length. [ 1282.276725][ T4695] lo speed is unknown, defaulting to 1000 [ 1282.282577][ T4695] syz2: Port: 1 Link DOWN [ 1282.297207][ T4695] lo speed is unknown, defaulting to 1000 [ 1282.303007][ T4695] syz2: Port: 1 Link ACTIVE [ 1282.338541][T10569] 9pnet_fd: p9_fd_create_unix (10569): problem connecting socket: ./file0: -2 [ 1282.353144][T10569] bridge13: entered promiscuous mode [ 1282.436715][T10571] netem: incorrect ge model size [ 1282.441716][T10571] netem: change failed [ 1282.483724][T10479] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1282.496765][T10573] netlink: 'syz.6.11166': attribute type 2 has an invalid length. [ 1282.549925][T10584] SELinux: ebitmap: truncated map [ 1282.561271][T10584] SELinux: failed to load policy [ 1282.579152][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11169'. [ 1282.617998][T10586] lo speed is unknown, defaulting to 1000 [ 1282.706501][T10599] netlink: 'syz.6.11169': attribute type 4 has an invalid length. [ 1282.723992][T10601] netlink: 'syz.4.11174': attribute type 4 has an invalid length. [ 1282.759409][T10601] netlink: 'syz.4.11174': attribute type 4 has an invalid length. [ 1282.777713][T10603] lo speed is unknown, defaulting to 1000 [ 1282.784902][T10586] wg1 speed is unknown, defaulting to 1000 [ 1282.794899][T10586] lo speed is unknown, defaulting to 1000 [ 1282.884285][T10586] lo speed is unknown, defaulting to 1000 [ 1282.922226][T10607] netlink: 'syz.4.11176': attribute type 10 has an invalid length. [ 1282.988812][T10603] wg1 speed is unknown, defaulting to 1000 [ 1283.000226][T10603] lo speed is unknown, defaulting to 1000 [ 1283.065917][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11178'. [ 1283.083167][T10603] lo speed is unknown, defaulting to 1000 [ 1283.165470][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11179'. [ 1283.449823][T10628] netlink: 664 bytes leftover after parsing attributes in process `syz.2.11182'. [ 1283.606146][T10636] 0ªX¹¦À: left allmulticast mode [ 1283.606961][T10634] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11183'. [ 1283.611321][T10636] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1283.817581][T10654] SELinux: ebitmap: truncated map [ 1283.831292][T10654] SELinux: failed to load policy [ 1283.832506][T10625] syz.7.11181 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1283.851099][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.7.11181 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1283.851144][T10625] Tainted: [W]=WARN [ 1283.851185][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1283.851268][T10625] Call Trace: [ 1283.851275][T10625] [ 1283.851282][T10625] __dump_stack+0x1d/0x30 [ 1283.851305][T10625] dump_stack_lvl+0xe8/0x140 [ 1283.851331][T10625] dump_stack+0x15/0x1b [ 1283.851357][T10625] dump_header+0x81/0x220 [ 1283.851420][T10625] oom_kill_process+0x342/0x400 [ 1283.851467][T10625] out_of_memory+0x979/0xb80 [ 1283.851514][T10625] try_charge_memcg+0x610/0xa10 [ 1283.851563][T10625] obj_cgroup_charge_pages+0xa6/0x150 [ 1283.851608][T10625] __memcg_kmem_charge_page+0x9f/0x170 [ 1283.851639][T10625] __alloc_frozen_pages_noprof+0x188/0x360 [ 1283.851740][T10625] alloc_pages_mpol+0xb3/0x260 [ 1283.851760][T10625] ? alloc_pages_noprof+0xf4/0x130 [ 1283.851792][T10625] alloc_pages_noprof+0x90/0x130 [ 1283.851880][T10625] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1283.851933][T10625] __kvmalloc_node_noprof+0x483/0x670 [ 1283.852029][T10625] ? ip_set_alloc+0x24/0x30 [ 1283.852064][T10625] ? ip_set_alloc+0x24/0x30 [ 1283.852118][T10625] ip_set_alloc+0x24/0x30 [ 1283.852213][T10625] hash_netiface_create+0x282/0x740 [ 1283.852260][T10625] ? __pfx_hash_netiface_create+0x10/0x10 [ 1283.852379][T10625] ip_set_create+0x3cc/0x970 [ 1283.852431][T10625] ? __nla_parse+0x40/0x60 [ 1283.852481][T10625] nfnetlink_rcv_msg+0x4c6/0x590 [ 1283.852544][T10625] netlink_rcv_skb+0x123/0x220 [ 1283.852641][T10625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1283.852675][T10625] nfnetlink_rcv+0x167/0x16c0 [ 1283.852775][T10625] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1283.852805][T10625] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 1283.852840][T10625] ? should_fail_ex+0x30/0x280 [ 1283.852858][T10625] ? selinux_nlmsg_lookup+0x99/0x890 [ 1283.852913][T10625] ? __rcu_read_unlock+0x34/0x70 [ 1283.852941][T10625] ? __netlink_lookup+0x266/0x2a0 [ 1283.852963][T10625] netlink_unicast+0x5c0/0x690 [ 1283.853024][T10625] netlink_sendmsg+0x58b/0x6b0 [ 1283.853044][T10625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.853062][T10625] __sock_sendmsg+0x145/0x180 [ 1283.853090][T10625] ____sys_sendmsg+0x31e/0x4e0 [ 1283.853200][T10625] ___sys_sendmsg+0x17b/0x1d0 [ 1283.853265][T10625] __x64_sys_sendmsg+0xd4/0x160 [ 1283.853293][T10625] x64_sys_call+0x191e/0x3000 [ 1283.853322][T10625] do_syscall_64+0xd2/0x200 [ 1283.853380][T10625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1283.853408][T10625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1283.853453][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.853532][T10625] RIP: 0033:0x7fa6e0fdf6c9 [ 1283.853550][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.853567][T10625] RSP: 002b:00007fa6dfa47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.853650][T10625] RAX: ffffffffffffffda RBX: 00007fa6e1235fa0 RCX: 00007fa6e0fdf6c9 [ 1283.853666][T10625] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 1283.853750][T10625] RBP: 00007fa6e1061f91 R08: 0000000000000000 R09: 0000000000000000 [ 1283.853796][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.853823][T10625] R13: 00007fa6e1236038 R14: 00007fa6e1235fa0 R15: 00007ffe57908768 [ 1283.853843][T10625] [ 1284.181368][T10625] memory: usage 307200kB, limit 307200kB, failcnt 1105 [ 1284.188438][T10625] memory+swap: usage 363016kB, limit 9007199254740988kB, failcnt 0 [ 1284.196454][T10625] kmem: usage 211852kB, limit 9007199254740988kB, failcnt 0 [ 1284.203864][T10625] Memory cgroup stats for /syz7: [ 1284.204109][T10625] cache 11223040 [ 1284.213355][T10625] rss 85458944 [ 1284.216888][T10625] shmem 11223040 [ 1284.220452][T10625] mapped_file 0 [ 1284.223911][T10625] dirty 0 [ 1284.226889][T10625] writeback 0 [ 1284.230170][T10625] workingset_refault_anon 547 [ 1284.235530][T10625] workingset_refault_file 23 [ 1284.240127][T10625] swap 57155584 [ 1284.243638][T10625] swapcached 954368 [ 1284.247478][T10625] pgpgin 358601 [ 1284.250954][T10625] pgpgout 334764 [ 1284.254629][T10625] pgfault 352822 [ 1284.258183][T10625] pgmajfault 74 [ 1284.261651][T10625] inactive_anon 1499136 [ 1284.266445][T10625] active_anon 96137216 [ 1284.270532][T10625] inactive_file 0 [ 1284.274225][T10625] active_file 0 [ 1284.277698][T10625] unevictable 0 [ 1284.281212][T10625] hierarchical_memory_limit 314572800 [ 1284.286593][T10625] hierarchical_memsw_limit 9223372036854771712 [ 1284.293390][T10625] total_cache 11223040 [ 1284.297482][T10625] total_rss 85458944 [ 1284.297493][T10625] total_shmem 11223040 [ 1284.297501][T10625] total_mapped_file 0 [ 1284.297509][T10625] total_dirty 0 [ 1284.297516][T10625] total_writeback 0 [ 1284.297577][T10625] total_workingset_refault_anon 547 [ 1284.297587][T10625] total_workingset_refault_file 23 [ 1284.297596][T10625] total_swap 57155584 [ 1284.297606][T10625] total_swapcached 954368 [ 1284.297615][T10625] total_pgpgin 358752 [ 1284.297624][T10625] total_pgpgout 334915 [ 1284.345140][T10625] total_pgfault 353035 [ 1284.345154][T10625] total_pgmajfault 74 [ 1284.345164][T10625] total_inactive_anon 1499136 [ 1284.345240][T10625] total_active_anon 96137216 [ 1284.345250][T10625] total_inactive_file 0 [ 1284.345259][T10625] total_active_file 0 [ 1284.345269][T10625] total_unevictable 0 [ 1284.345279][T10625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.10927,pid=9763,uid=0 [ 1284.390846][T10625] Memory cgroup out of memory: Killed process 9763 (syz.7.10927) total-vm:93956kB, anon-rss:12760kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 1284.617828][T10675] lo speed is unknown, defaulting to 1000 [ 1284.772539][T10686] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1284.831312][T10675] wg1 speed is unknown, defaulting to 1000 [ 1284.840891][T10686] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 1284.851626][T10675] lo speed is unknown, defaulting to 1000 [ 1284.915165][T10681] netlink: 664 bytes leftover after parsing attributes in process `syz.5.11199'. [ 1284.929685][T10684] bond0: (slave dummy0): Releasing backup interface [ 1284.947535][T10675] lo speed is unknown, defaulting to 1000 [ 1284.964455][T10688] loop4: detected capacity change from 0 to 512 [ 1285.004689][T10688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11201: bg 0: block 248: padding at end of block bitmap is not set [ 1285.033049][T10688] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.11201: Failed to acquire dquot type 1 [ 1285.055727][T10688] EXT4-fs (loop4): 1 truncate cleaned up [ 1285.074415][T10688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.100498][T10688] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.176523][T10684] validate_nla: 5 callbacks suppressed [ 1285.176539][T10684] netlink: 'syz.6.11200': attribute type 10 has an invalid length. [ 1285.233629][ T29] kauditd_printk_skb: 5288 callbacks suppressed [ 1285.233648][ T29] audit: type=1326 audit(2000000072.257:177875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6e0fd6567 code=0x7ffc0000 [ 1285.235261][T10684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1285.240294][ T29] audit: type=1326 audit(2000000072.257:177876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6e0f7b779 code=0x7ffc0000 [ 1285.298100][ T29] audit: type=1326 audit(2000000072.257:177877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1285.326379][ T29] audit: type=1326 audit(2000000072.289:177878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6e0fd6567 code=0x7ffc0000 [ 1285.350674][ T29] audit: type=1326 audit(2000000072.289:177879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6e0f7b779 code=0x7ffc0000 [ 1285.374473][ T29] audit: type=1326 audit(2000000072.289:177880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1285.398965][ T29] audit: type=1326 audit(2000000072.289:177881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6e0fd6567 code=0x7ffc0000 [ 1285.422741][ T29] audit: type=1326 audit(2000000072.289:177882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6e0f7b779 code=0x7ffc0000 [ 1285.447187][ T29] audit: type=1326 audit(2000000072.289:177883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1285.471192][ T29] audit: type=1326 audit(2000000072.299:177884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.7.11195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa6e0fd6567 code=0x7ffc0000 [ 1285.557817][T10699] netlink: 'syz.7.11204': attribute type 4 has an invalid length. [ 1285.594027][ T4695] lo speed is unknown, defaulting to 1000 [ 1285.599875][ T4695] syz2: Port: 1 Link DOWN [ 1285.607729][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.626586][T10699] netlink: 'syz.7.11204': attribute type 4 has an invalid length. [ 1285.629480][T10478] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 1285.660070][ T4695] lo speed is unknown, defaulting to 1000 [ 1285.666599][ T4695] syz2: Port: 1 Link ACTIVE [ 1285.862824][T10709] wireguard0: entered promiscuous mode [ 1285.868432][T10709] wireguard0: entered allmulticast mode [ 1286.151501][T10693] Set syz1 is full, maxelem 65536 reached [ 1286.188627][T10721] bond0: (slave dummy0): Releasing backup interface [ 1286.208537][T10721] bond0: (slave bond_slave_0): Releasing backup interface [ 1286.223675][T10721] bond0: (slave bond_slave_1): Releasing backup interface [ 1286.232518][T10721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.233426][T10725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10725 comm=syz.5.11210 [ 1286.253043][T10725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10725 comm=syz.5.11210 [ 1286.253599][T10721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.271858][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11210'. [ 1286.282918][T10721] batman_adv: batadv0: Removing interface: veth1_vlan [ 1286.290618][T10721] bond0: (slave macvlan1): Releasing backup interface [ 1286.322228][T10716] lo speed is unknown, defaulting to 1000 [ 1286.332073][T10728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10728 comm=syz.5.11210 [ 1286.421398][T10732] loop4: detected capacity change from 0 to 512 [ 1286.457478][T10732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1286.498854][T10732] EXT4-fs (loop4): 1 truncate cleaned up [ 1286.510939][T10732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.519233][T10716] wg1 speed is unknown, defaulting to 1000 [ 1286.559143][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11209'. [ 1286.568279][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11209'. [ 1286.578951][T10716] lo speed is unknown, defaulting to 1000 [ 1286.591070][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.642462][T10716] lo speed is unknown, defaulting to 1000 [ 1286.663882][T10746] loop4: detected capacity change from 0 to 512 [ 1286.678487][T10746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1286.701565][T10746] EXT4-fs (loop4): 1 truncate cleaned up [ 1286.707805][T10746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.735900][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.937759][T10754] netlink: 4752 bytes leftover after parsing attributes in process `syz.4.11218'. [ 1286.947807][T10754] netlink: 4752 bytes leftover after parsing attributes in process `syz.4.11218'. [ 1286.963741][T10754] 9pnet_fd: Insufficient options for proto=fd [ 1287.016884][T10750] lo speed is unknown, defaulting to 1000 [ 1287.157276][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11220'. [ 1287.176606][T10750] wg1 speed is unknown, defaulting to 1000 [ 1287.185724][T10750] lo speed is unknown, defaulting to 1000 [ 1287.299989][T10750] lo speed is unknown, defaulting to 1000 [ 1287.514613][T10776] $Hÿ: left promiscuous mode [ 1287.519570][T10776] bond2: left promiscuous mode [ 1287.536568][T10776] 0ªX¹¦À: left allmulticast mode [ 1287.561361][T10776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1287.742105][T10793] netlink: 'syz.5.11227': attribute type 142 has an invalid length. [ 1287.751243][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11227'. [ 1287.778267][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11228'. [ 1287.780101][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11229'. [ 1287.973324][T10810] 9pnet_virtio: no channels available for device ./file0 [ 1287.986346][T10810] netlink: 'syz.2.11232': attribute type 4 has an invalid length. [ 1287.997552][T10810] netlink: 'syz.2.11232': attribute type 4 has an invalid length. [ 1288.008935][ T9] lo speed is unknown, defaulting to 1000 [ 1288.014699][ T9] sz1: Port: 1 Link ACTIVE [ 1288.039109][ T3421] lo speed is unknown, defaulting to 1000 [ 1288.179839][ T9] lo speed is unknown, defaulting to 1000 [ 1288.185641][ T9] sz1: Port: 1 Link DOWN [ 1288.196484][ T9] lo speed is unknown, defaulting to 1000 [ 1288.329147][T10823] wireguard0: entered promiscuous mode [ 1288.334887][T10823] wireguard0: entered allmulticast mode [ 1288.359092][T10827] ipvlan0: left allmulticast mode [ 1288.364243][T10827] veth0_vlan: left allmulticast mode [ 1288.370042][T10827] bridge1: left promiscuous mode [ 1288.376066][T10827] bridge2: left promiscuous mode [ 1288.382651][T10827] bridge3: left promiscuous mode [ 1288.388912][T10827] bridge0: left promiscuous mode [ 1288.394218][T10827] bridge4: left promiscuous mode [ 1288.399875][T10827] bridge5: left promiscuous mode [ 1288.427575][T10827] syzkaller1: entered promiscuous mode [ 1288.433186][T10827] syzkaller1: entered allmulticast mode [ 1288.440590][T10832] lo speed is unknown, defaulting to 1000 [ 1288.528281][T10836] pim6reg: entered allmulticast mode [ 1288.585057][T10832] wg1 speed is unknown, defaulting to 1000 [ 1288.607522][T10832] lo speed is unknown, defaulting to 1000 [ 1288.667424][T10842] SELinux: ebitmap: truncated map [ 1288.705548][T10842] SELinux: failed to load policy [ 1288.785423][T10832] lo speed is unknown, defaulting to 1000 [ 1288.857336][T10848] loop4: detected capacity change from 0 to 512 [ 1288.974964][T10848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1289.037730][T10876] 9pnet_virtio: no channels available for device ./file0 [ 1289.086625][T10848] EXT4-fs (loop4): 1 truncate cleaned up [ 1289.101917][T10848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.125522][T10876] netlink: 'syz.6.11243': attribute type 4 has an invalid length. [ 1289.183497][T10876] netlink: 'syz.6.11243': attribute type 4 has an invalid length. [ 1289.212886][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.505957][ T9] lo speed is unknown, defaulting to 1000 [ 1289.511938][ T9] syz0: Port: 1 Link ACTIVE [ 1289.569412][ T4695] lo speed is unknown, defaulting to 1000 [ 1289.575311][ T4695] syz0: Port: 1 Link DOWN [ 1289.674520][T10904] lo speed is unknown, defaulting to 1000 [ 1289.720223][T10913] netlink: 'syz.5.11247': attribute type 4 has an invalid length. [ 1289.921131][T10904] wg1 speed is unknown, defaulting to 1000 [ 1289.935358][T10904] lo speed is unknown, defaulting to 1000 [ 1290.008081][T10904] lo speed is unknown, defaulting to 1000 [ 1290.031419][ T29] kauditd_printk_skb: 1269 callbacks suppressed [ 1290.031437][ T29] audit: type=1326 audit(2000000077.286:179153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1290.101526][ T29] audit: type=1326 audit(2000000077.286:179154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1290.126152][ T29] audit: type=1326 audit(2000000077.286:179155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1290.150980][ T29] audit: type=1326 audit(2000000077.286:179156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5874d0f703 code=0x7ffc0000 [ 1290.174707][ T29] audit: type=1326 audit(2000000077.286:179157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5874d0f787 code=0x7ffc0000 [ 1290.199016][ T29] audit: type=1326 audit(2000000077.286:179158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5874cc6b2d code=0x7ffc0000 [ 1290.222730][ T29] audit: type=1326 audit(2000000077.286:179159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5874d43e09 code=0x7ffc0000 [ 1290.247231][ T29] audit: type=1326 audit(2000000077.286:179160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5874cc6b97 code=0x7ffc0000 [ 1290.270951][ T29] audit: type=1326 audit(2000000077.286:179161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1290.295177][ T29] audit: type=1326 audit(2000000077.286:179162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.6.11255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1290.326019][T10932] 9pnet_fd: p9_fd_create_unix (10932): problem connecting socket: ./file0: -2 [ 1290.336801][T10928] __nla_validate_parse: 3 callbacks suppressed [ 1290.336820][T10928] netlink: 4752 bytes leftover after parsing attributes in process `syz.6.11256'. [ 1290.337215][T10930] netlink: 'syz.7.11257': attribute type 10 has an invalid length. [ 1290.353351][T10928] netlink: 4752 bytes leftover after parsing attributes in process `syz.6.11256'. [ 1290.370731][T10932] netlink: 'syz.4.11258': attribute type 4 has an invalid length. [ 1290.390339][T10932] netlink: 'syz.4.11258': attribute type 4 has an invalid length. [ 1290.397105][T10934] 9pnet_fd: Insufficient options for proto=fd [ 1290.520401][T10944] loop4: detected capacity change from 0 to 1024 [ 1290.550089][T10944] EXT4-fs: Ignoring removed orlov option [ 1290.608750][T10944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.845110][T10969] !yz!: rxe_newlink: already configured on team_slave_0 [ 1290.873997][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11270'. [ 1290.959258][T10974] lo speed is unknown, defaulting to 1000 [ 1291.051235][T10985] netlink: 'syz.2.11270': attribute type 4 has an invalid length. [ 1291.074051][T10983] lo speed is unknown, defaulting to 1000 [ 1291.398998][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.488452][T10986] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11274'. [ 1291.647847][T10974] wg1 speed is unknown, defaulting to 1000 [ 1291.700213][ T4695] lo speed is unknown, defaulting to 1000 [ 1291.706118][ T4695] syz2: Port: 1 Link DOWN [ 1291.781081][T10974] lo speed is unknown, defaulting to 1000 [ 1291.904922][T10996] loop4: detected capacity change from 0 to 512 [ 1291.921766][T10996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1291.948915][T10974] lo speed is unknown, defaulting to 1000 [ 1291.960890][T10996] EXT4-fs (loop4): 1 truncate cleaned up [ 1291.966441][T10983] wg1 speed is unknown, defaulting to 1000 [ 1291.974195][T10996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.987067][T10983] lo speed is unknown, defaulting to 1000 [ 1292.085827][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.100883][T10983] lo speed is unknown, defaulting to 1000 [ 1292.107688][T10994] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1292.118272][T11010] netlink: 'syz.7.11280': attribute type 10 has an invalid length. [ 1292.126383][T11010] netlink: 156 bytes leftover after parsing attributes in process `syz.7.11280'. [ 1292.197493][T11016] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 1292.235924][T11016] SELinux: failed to load policy [ 1292.348539][T11021] netlink: 'syz.5.11284': attribute type 4 has an invalid length. [ 1292.493233][T11021] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.559056][T11025] netlink: 'syz.6.11293': attribute type 10 has an invalid length. [ 1292.580986][T11040] netem: incorrect gi model size [ 1292.586000][T11040] netem: change failed [ 1292.596695][T11021] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.614800][T11046] loop4: detected capacity change from 0 to 512 [ 1292.652833][T11046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1292.703810][T11045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11287'. [ 1292.710816][T11046] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.715097][T11021] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.790874][T11042] lo speed is unknown, defaulting to 1000 [ 1292.816474][T11025] netlink: 'syz.6.11293': attribute type 10 has an invalid length. [ 1292.887455][T11025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1292.915207][T11021] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.984875][T11042] wg1 speed is unknown, defaulting to 1000 [ 1292.991400][T11042] lo speed is unknown, defaulting to 1000 [ 1293.033477][T10865] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.042200][T11042] lo speed is unknown, defaulting to 1000 [ 1293.059203][T10865] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.085488][T10865] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.103691][T10865] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.165783][T11061] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.11292'. [ 1293.186990][T11061] netlink: zone id is out of range [ 1293.192347][T11061] netlink: zone id is out of range [ 1293.225214][T11061] netlink: set zone limit has 8 unknown bytes [ 1293.329749][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.353546][T11073] 9pnet_fd: p9_fd_create_unix (11073): problem connecting socket: ./file0: -2 [ 1293.364033][T11073] netlink: 'syz.2.11298': attribute type 4 has an invalid length. [ 1293.374298][T11073] netlink: 'syz.2.11298': attribute type 4 has an invalid length. [ 1293.406735][T27564] lo speed is unknown, defaulting to 1000 [ 1293.412533][T27564] sz1: Port: 1 Link ACTIVE [ 1293.432744][ T3421] lo speed is unknown, defaulting to 1000 [ 1293.473406][T11077] loop4: detected capacity change from 0 to 512 [ 1293.481591][T11070] lo speed is unknown, defaulting to 1000 [ 1293.488326][ T1439] lo speed is unknown, defaulting to 1000 [ 1293.494140][ T1439] sz1: Port: 1 Link DOWN [ 1293.505827][T11077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1293.521140][ T1439] lo speed is unknown, defaulting to 1000 [ 1293.532462][T11077] EXT4-fs (loop4): 1 truncate cleaned up [ 1293.560400][T11077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.608445][T11089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11089 comm=syz.6.11303 [ 1293.621132][T11089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11089 comm=syz.6.11303 [ 1293.700623][T11070] wg1 speed is unknown, defaulting to 1000 [ 1293.720682][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.732942][T11070] lo speed is unknown, defaulting to 1000 [ 1293.819911][T11070] lo speed is unknown, defaulting to 1000 [ 1294.153555][T11114] 9pnet_fd: p9_fd_create_unix (11114): problem connecting socket: ./file0: -2 [ 1294.726641][T11132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11132 comm=syz.5.11317 [ 1294.739595][T11132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11132 comm=syz.5.11317 [ 1294.799747][ T29] kauditd_printk_skb: 2410 callbacks suppressed [ 1294.799773][ T29] audit: type=1326 audit(2000000082.293:181573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab8c5df10 code=0x7ffc0000 [ 1294.854140][T11141] 9pnet_fd: p9_fd_create_unix (11141): problem connecting socket: ./file0: -2 [ 1294.870194][T11141] bridge4: entered promiscuous mode [ 1294.873581][ T29] audit: type=1326 audit(2000000082.293:181574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faab8c5e32a code=0x7ffc0000 [ 1294.899669][ T29] audit: type=1326 audit(2000000082.293:181575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1294.924257][ T29] audit: type=1326 audit(2000000082.293:181576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1294.948178][ T29] audit: type=1326 audit(2000000082.293:181577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1294.948731][T11138] !yz!: rxe_newlink: already configured on team_slave_0 [ 1294.973079][ T29] audit: type=1326 audit(2000000082.293:181578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1295.003560][ T29] audit: type=1326 audit(2000000082.293:181579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1295.028324][ T29] audit: type=1326 audit(2000000082.293:181580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1295.052131][ T29] audit: type=1326 audit(2000000082.293:181581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1295.076587][ T29] audit: type=1326 audit(2000000082.293:181582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.5.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab8c5f6c9 code=0x7ffc0000 [ 1295.448172][T11165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11165 comm=syz.7.11329 [ 1295.461054][T11165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11165 comm=syz.7.11329 [ 1295.475028][T11162] loop4: detected capacity change from 0 to 512 [ 1295.502595][T11162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1295.556100][T11162] EXT4-fs (loop4): 1 truncate cleaned up [ 1295.562675][T11162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.640428][T11175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1295.677025][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11332'. [ 1295.699484][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.770681][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11334'. [ 1295.846919][T11183] SELinux: ebitmap: truncated map [ 1295.865643][T11183] SELinux: failed to load policy [ 1295.936784][T11190] 9pnet_fd: p9_fd_create_unix (11190): problem connecting socket: ./file0: -2 [ 1295.974812][T11190] validate_nla: 4 callbacks suppressed [ 1295.974831][T11190] netlink: 'syz.5.11346': attribute type 4 has an invalid length. [ 1296.017526][T11190] netlink: 'syz.5.11346': attribute type 4 has an invalid length. [ 1296.093751][T11196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11196 comm=syz.7.11338 [ 1296.106679][T11196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11196 comm=syz.7.11338 [ 1296.134741][T11185] netlink: 'syz.2.11335': attribute type 10 has an invalid length. [ 1296.144312][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11338'. [ 1296.167048][T11192] loop4: detected capacity change from 0 to 2048 [ 1296.172292][T11196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11196 comm=syz.7.11338 [ 1296.173774][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11337'. [ 1296.210035][T11192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.225240][T11192] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.11336: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1296.242398][T11192] EXT4-fs (loop4): Remounting filesystem read-only [ 1296.267083][T11200] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1296.297255][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.334726][T11185] netlink: 'syz.2.11335': attribute type 10 has an invalid length. [ 1296.384202][T11209] loop4: detected capacity change from 0 to 8192 [ 1296.434413][T11209] 9pnet_fd: Insufficient options for proto=fd [ 1296.591660][T11209] xt_CT: No such helper "snmp" [ 1296.810719][T11217] loop4: detected capacity change from 0 to 128 [ 1296.818166][T11217] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1296.830715][T11217] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1296.852690][T11217] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11217 comm=syz.4.11342 [ 1296.897562][T10853] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1296.958943][T11226] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11345'. [ 1296.985196][T11223] !yz!: rxe_newlink: already configured on team_slave_0 [ 1297.021308][T11222] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1297.039794][T11234] 9pnet_fd: p9_fd_create_unix (11234): problem connecting socket: ./file0: -2 [ 1297.053906][T11234] netlink: 'syz.2.11349': attribute type 4 has an invalid length. [ 1297.092412][T11234] netlink: 'syz.2.11349': attribute type 4 has an invalid length. [ 1297.146293][ T4695] lo speed is unknown, defaulting to 1000 [ 1297.152118][ T4695] sz1: Port: 1 Link ACTIVE [ 1297.156879][ T1439] lo speed is unknown, defaulting to 1000 [ 1297.285470][T11248] lo speed is unknown, defaulting to 1000 [ 1297.432184][T11248] wg1 speed is unknown, defaulting to 1000 [ 1297.439439][T11248] lo speed is unknown, defaulting to 1000 [ 1297.517780][T11248] lo speed is unknown, defaulting to 1000 [ 1297.722819][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11356'. [ 1297.994051][T11245] netlink: 'syz.6.11354': attribute type 10 has an invalid length. [ 1298.027679][T11256] loop4: detected capacity change from 0 to 512 [ 1298.034522][T11245] bond0: (slave dummy0): Releasing backup interface [ 1298.060135][T11256] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1298.094753][T11256] EXT4-fs (loop4): 1 truncate cleaned up [ 1298.148167][T11256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.166423][T11266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11360'. [ 1298.254330][T11245] netlink: 'syz.6.11354': attribute type 10 has an invalid length. [ 1298.283101][T11245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1298.308144][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.385012][T11277] 9pnet_fd: p9_fd_create_unix (11277): problem connecting socket: ./file0: -2 [ 1298.406209][T11275] SELinux: ebitmap: truncated map [ 1298.425093][T11275] SELinux: failed to load policy [ 1298.638726][T11296] selinux_netlink_send: 6 callbacks suppressed [ 1298.638745][T11296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11296 comm=syz.2.11370 [ 1298.658333][T11296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11296 comm=syz.2.11370 [ 1298.719727][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11367'. [ 1298.788818][T11303] lo speed is unknown, defaulting to 1000 [ 1298.924745][T11303] wg1 speed is unknown, defaulting to 1000 [ 1298.931788][T11303] lo speed is unknown, defaulting to 1000 [ 1298.999592][T11303] lo speed is unknown, defaulting to 1000 [ 1299.318762][T11304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11304 comm=syz.2.11372 [ 1299.331452][T11304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11304 comm=syz.2.11372 [ 1299.574106][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11372'. [ 1299.613992][ T29] kauditd_printk_skb: 1470 callbacks suppressed [ 1299.614010][ T29] audit: type=1326 audit(2000000087.332:183053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.644259][ T29] audit: type=1326 audit(2000000087.332:183054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.668811][ T29] audit: type=1326 audit(2000000087.343:183055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.686354][T11304] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11304 comm=syz.2.11372 [ 1299.692782][ T29] audit: type=1326 audit(2000000087.343:183056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.730612][ T29] audit: type=1326 audit(2000000087.343:183057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.754882][ T29] audit: type=1326 audit(2000000087.343:183058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.779924][ T29] audit: type=1326 audit(2000000087.343:183059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.797294][T11311] 9pnet_fd: p9_fd_create_unix (11311): problem connecting socket: ./file0: -2 [ 1299.803824][ T29] audit: type=1326 audit(2000000087.343:183060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.837151][ T29] audit: type=1326 audit(2000000087.343:183061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.861787][ T29] audit: type=1326 audit(2000000087.343:183062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.6.11373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5874d0f6c9 code=0x7ffc0000 [ 1299.973505][T11319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1300.132167][T11328] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11328 comm=syz.5.11381 [ 1300.144846][T11328] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11328 comm=syz.5.11381 [ 1300.188038][T11326] !yz!: rxe_newlink: already configured on team_slave_0 [ 1300.327523][T11347] 9pnet_fd: p9_fd_create_unix (11347): problem connecting socket: ./file0: -2 [ 1300.486162][T11354] loop4: detected capacity change from 0 to 128 [ 1300.512208][T11354] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1300.570075][T11354] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1300.591248][T11357] netlink: 'syz.7.11385': attribute type 298 has an invalid length. [ 1300.601431][T11365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11365 comm=syz.6.11393 [ 1300.614126][T11365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11365 comm=syz.6.11393 [ 1300.615686][T11354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11354 comm=syz.4.11390 [ 1300.668637][T11369] __nla_validate_parse: 3 callbacks suppressed [ 1300.668656][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11390'. [ 1300.686413][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11394'. [ 1300.939344][T11386] lo speed is unknown, defaulting to 1000 [ 1301.023564][T11386] wg1 speed is unknown, defaulting to 1000 [ 1301.029882][T11386] lo speed is unknown, defaulting to 1000 [ 1301.076046][T11386] lo speed is unknown, defaulting to 1000 [ 1301.121238][T11396] 9pnet_fd: p9_fd_create_unix (11396): problem connecting socket: ./file0: -2 [ 1301.215982][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11402'. [ 1301.292694][T10865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1301.329658][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11405'. [ 1301.398068][T11410] loop4: detected capacity change from 0 to 512 [ 1301.421037][T11410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1301.475893][T11410] EXT4-fs (loop4): 1 truncate cleaned up [ 1301.480289][T11414] ip6t_srh: unknown srh match flags 4000 [ 1301.490290][T11410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.544486][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.728709][T11420] SELinux: ebitmap: truncated map [ 1301.738359][T11420] SELinux: failed to load policy [ 1301.855362][T11422] lo speed is unknown, defaulting to 1000 [ 1301.981132][T11422] wg1 speed is unknown, defaulting to 1000 [ 1301.988011][T11422] lo speed is unknown, defaulting to 1000 [ 1302.050518][T11422] lo speed is unknown, defaulting to 1000 [ 1302.290110][T11426] loop4: detected capacity change from 0 to 164 [ 1302.534071][T11426] iso9660: Unknown parameter '00000000000000000003' [ 1302.639967][T11435] 9pnet_fd: p9_fd_create_unix (11435): problem connecting socket: ./file0: -2 [ 1302.728149][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11415'. [ 1302.822652][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11419'. [ 1302.848590][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11418'. [ 1302.895561][T11445] lo speed is unknown, defaulting to 1000 [ 1302.925516][T11452] pim6reg: entered allmulticast mode [ 1302.934507][T11452] pim6reg: left allmulticast mode [ 1303.142345][T11445] wg1 speed is unknown, defaulting to 1000 [ 1303.148542][T11445] lo speed is unknown, defaulting to 1000 [ 1303.196323][T11445] lo speed is unknown, defaulting to 1000 [ 1303.202504][T11460] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1303.310577][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11425'. [ 1303.501399][T11471] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 1303.519344][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11428'. [ 1303.532431][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11429'. [ 1303.539569][T11476] selinux_netlink_send: 15 callbacks suppressed [ 1303.539589][T11476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11476 comm=syz.6.11439 [ 1303.561204][T11476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11476 comm=syz.6.11439 [ 1303.602436][T11476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11476 comm=syz.6.11439 [ 1303.710619][T11488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11488 comm=syz.5.11431 [ 1303.723334][T11488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11488 comm=syz.5.11431 [ 1304.234770][T11506] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1304.266757][T11506] lo speed is unknown, defaulting to 1000 [ 1304.384902][T11506] wg1 speed is unknown, defaulting to 1000 [ 1304.392436][T11506] lo speed is unknown, defaulting to 1000 [ 1304.453871][T11506] lo speed is unknown, defaulting to 1000 [ 1304.903039][ T29] kauditd_printk_skb: 1965 callbacks suppressed [ 1304.903057][ T29] audit: type=1326 audit(2000000092.896:185028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.095503][ T29] audit: type=1326 audit(2000000092.938:185029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.119577][ T29] audit: type=1326 audit(2000000092.938:185030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.143387][ T29] audit: type=1326 audit(2000000092.938:185031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.167226][ T29] audit: type=1326 audit(2000000092.938:185032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.191022][ T29] audit: type=1326 audit(2000000092.938:185033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.215074][ T29] audit: type=1326 audit(2000000092.938:185034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.238936][ T29] audit: type=1326 audit(2000000092.938:185035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.262877][ T29] audit: type=1326 audit(2000000092.938:185036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.286651][ T29] audit: type=1326 audit(2000000092.938:185037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11511 comm="syz.7.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1305.471371][T11512] !yz!: rxe_newlink: already configured on team_slave_0 [ 1305.535783][T11519] lo speed is unknown, defaulting to 1000 [ 1305.652795][T11525] __nla_validate_parse: 2 callbacks suppressed [ 1305.652816][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11437'. [ 1305.687309][T11526] netlink: 'syz.2.11441': attribute type 21 has an invalid length. [ 1305.695386][T11526] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11441'. [ 1305.748850][T11530] loop4: detected capacity change from 0 to 128 [ 1305.768324][T11526] netlink: 'syz.2.11441': attribute type 5 has an invalid length. [ 1305.776220][T11526] netlink: 'syz.2.11441': attribute type 6 has an invalid length. [ 1305.784090][T11526] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11441'. [ 1305.819309][T11530] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1305.850424][T11530] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1305.876897][T11525] pim6reg: entered allmulticast mode [ 1305.886756][T11525] pim6reg: left allmulticast mode [ 1305.902777][T11530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11530 comm=syz.4.11443 [ 1305.916049][T11530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11530 comm=syz.4.11443 [ 1305.939588][T11537] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11445'. [ 1305.952052][T11519] wg1 speed is unknown, defaulting to 1000 [ 1305.992196][T11519] lo speed is unknown, defaulting to 1000 [ 1306.002185][T10865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1306.025196][T11541] 9pnet_fd: p9_fd_create_unix (11541): problem connecting socket: ./file0: -2 [ 1306.053553][T11541] netlink: 'syz.7.11447': attribute type 4 has an invalid length. [ 1306.062843][ T9] lo speed is unknown, defaulting to 1000 [ 1306.068811][ T9] syz2: Port: 1 Link ACTIVE [ 1306.070708][T11543] loop4: detected capacity change from 0 to 512 [ 1306.101633][T11519] lo speed is unknown, defaulting to 1000 [ 1306.109610][T11546] netlink: 14 bytes leftover after parsing attributes in process `syz.7.11448'. [ 1306.109702][T11543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1306.140369][T11537] siw: device registration error -23 [ 1306.173666][T11543] EXT4-fs (loop4): 1 truncate cleaned up [ 1306.217207][T11543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.274141][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1306.283240][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1306.293014][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1306.303743][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.327410][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1306.336640][T11556] netlink: 'syz.2.11451': attribute type 6 has an invalid length. [ 1306.379440][T11561] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1306.430059][T11558] lo speed is unknown, defaulting to 1000 [ 1306.521918][T11568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11568 comm=syz.7.11456 [ 1306.534701][T11568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11568 comm=syz.7.11456 [ 1306.575584][T11572] netlink: 'syz.4.11452': attribute type 3 has an invalid length. [ 1306.611046][T11574] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 1306.657765][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11459'. [ 1306.696739][T11558] wg1 speed is unknown, defaulting to 1000 [ 1306.710798][T11558] lo speed is unknown, defaulting to 1000 [ 1306.759991][T11583] 9pnet_fd: p9_fd_create_unix (11583): problem connecting socket: ./file0: -2 [ 1306.775449][T11583] netlink: 'syz.7.11461': attribute type 4 has an invalid length. [ 1306.793994][T11558] lo speed is unknown, defaulting to 1000 [ 1306.807987][T11585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11585 comm=syz.6.11462 [ 1306.840946][T11587] !yz!: rxe_newlink: already configured on team_slave_0 [ 1306.910144][T11590] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1306.910612][T11592] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 1306.998514][T11597] lo speed is unknown, defaulting to 1000 [ 1307.229091][T11610] macvtap1: entered allmulticast mode [ 1307.234601][T11610] bridge0: entered allmulticast mode [ 1307.244798][T11610] bridge0: left allmulticast mode [ 1307.260140][T11597] wg1 speed is unknown, defaulting to 1000 [ 1307.282526][T11597] lo speed is unknown, defaulting to 1000 [ 1307.325362][T11597] lo speed is unknown, defaulting to 1000 [ 1307.360917][ T9] lo speed is unknown, defaulting to 1000 [ 1307.366815][ T9] syz2: Port: 1 Link DOWN [ 1307.568040][T11620] netlink: 'syz.4.11473': attribute type 4 has an invalid length. [ 1307.589492][T11620] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1307.662499][T11630] Cannot find add_set index 2 as target [ 1307.703858][T11628] SELinux: ebitmap: truncated map [ 1307.731835][T11628] SELinux: failed to load policy [ 1307.762508][T11639] netlink: 'syz.7.11480': attribute type 21 has an invalid length. [ 1307.781038][T11639] netlink: 'syz.7.11480': attribute type 5 has an invalid length. [ 1307.827192][T11643] loop4: detected capacity change from 0 to 128 [ 1307.836055][T11643] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1307.858351][T11643] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1308.586477][T11670] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1308.627647][T10865] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1308.683007][T11674] selinux_netlink_send: 12 callbacks suppressed [ 1308.683086][T11674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11674 comm=syz.5.11492 [ 1308.702736][T11674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11674 comm=syz.5.11492 [ 1308.756427][T11679] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1308.844883][T11679] lo speed is unknown, defaulting to 1000 [ 1308.856541][T11684] loop4: detected capacity change from 0 to 512 [ 1308.893753][T11684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1308.939392][T11684] EXT4-fs (loop4): 1 truncate cleaned up [ 1308.959351][T11684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.064471][T11697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11697 comm=syz.7.11501 [ 1309.077210][T11697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11697 comm=syz.7.11501 [ 1309.101421][T11679] wg1 speed is unknown, defaulting to 1000 [ 1309.108315][T11679] lo speed is unknown, defaulting to 1000 [ 1309.114727][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.159328][T11697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11697 comm=syz.7.11501 [ 1309.165287][T11700] rdma_op ffff888125127180 conn xmit_rdma 0000000000000000 [ 1309.196248][T11679] lo speed is unknown, defaulting to 1000 [ 1309.263163][T11702] lo speed is unknown, defaulting to 1000 [ 1309.403250][T11705] pimreg: entered allmulticast mode [ 1309.416889][T11705] pimreg: left allmulticast mode [ 1309.441508][T11702] wg1 speed is unknown, defaulting to 1000 [ 1309.448244][T11702] lo speed is unknown, defaulting to 1000 [ 1309.503874][T11702] lo speed is unknown, defaulting to 1000 [ 1309.510555][T11703] loop4: detected capacity change from 0 to 1024 [ 1309.678029][T11709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11709 comm=syz.5.11505 [ 1309.690716][T11709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11709 comm=syz.5.11505 [ 1309.775342][T11716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11716 comm=syz.2.11508 [ 1309.788176][T11716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11716 comm=syz.2.11508 [ 1309.852019][T11716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11716 comm=syz.2.11508 [ 1309.876013][ T29] kauditd_printk_skb: 2016 callbacks suppressed [ 1309.876031][ T29] audit: type=1326 audit(2000000098.114:187054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1309.906272][ T29] audit: type=1326 audit(2000000098.114:187055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1309.917039][T11721] SELinux: ebitmap: truncated map [ 1309.936072][ T29] audit: type=1326 audit(2000000098.124:187056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1309.960079][ T29] audit: type=1326 audit(2000000098.124:187057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1309.984077][ T29] audit: type=1326 audit(2000000098.124:187058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1309.996927][T11721] SELinux: failed to load policy [ 1310.007848][ T29] audit: type=1326 audit(2000000098.124:187059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1310.036703][ T29] audit: type=1326 audit(2000000098.124:187060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1310.060517][ T29] audit: type=1326 audit(2000000098.124:187061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1310.084341][ T29] audit: type=1326 audit(2000000098.124:187062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1310.108181][ T29] audit: type=1326 audit(2000000098.124:187063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11720 comm="syz.4.11509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc13cf6c9 code=0x7ffc0000 [ 1310.328295][T11732] loop4: detected capacity change from 0 to 512 [ 1310.340070][T11732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1310.543848][T11733] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1310.573042][T11733] lo speed is unknown, defaulting to 1000 [ 1310.689827][T11733] wg1 speed is unknown, defaulting to 1000 [ 1310.696540][T11733] lo speed is unknown, defaulting to 1000 [ 1310.756452][T11733] lo speed is unknown, defaulting to 1000 [ 1310.930552][ T3421] lo speed is unknown, defaulting to 1000 [ 1310.936443][ T3421] sz1: Port: 1 Link DOWN [ 1311.017565][ T3421] lo speed is unknown, defaulting to 1000 [ 1311.107968][T11732] EXT4-fs (loop4): 1 truncate cleaned up [ 1311.137342][T11732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.198426][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.246532][T11761] __nla_validate_parse: 13 callbacks suppressed [ 1311.246561][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11520'. [ 1311.423625][T11769] siw: device registration error -23 [ 1312.018896][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11525'. [ 1312.174046][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11531'. [ 1312.359230][T11802] Cannot find del_set index 0 as target [ 1312.462733][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11535'. [ 1312.471901][T11808] validate_nla: 6 callbacks suppressed [ 1312.471920][T11808] netlink: 'syz.7.11535': attribute type 21 has an invalid length. [ 1312.533519][T11808] lo speed is unknown, defaulting to 1000 [ 1312.627254][T11808] wg1 speed is unknown, defaulting to 1000 [ 1312.634313][T11808] lo speed is unknown, defaulting to 1000 [ 1312.673530][T11808] lo speed is unknown, defaulting to 1000 [ 1312.738846][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11536'. [ 1312.989984][T11818] netlink: 'syz.4.11538': attribute type 2 has an invalid length. [ 1312.997898][T11818] netlink: 'syz.4.11538': attribute type 2 has an invalid length. [ 1313.005965][T11818] netlink: 'syz.4.11538': attribute type 1 has an invalid length. [ 1313.014682][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11538'. [ 1313.025261][T11818] hub 9-0:1.0: USB hub found [ 1313.030385][T11818] hub 9-0:1.0: 8 ports detected [ 1313.546925][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11547'. [ 1313.585595][T11843] selinux_netlink_send: 12 callbacks suppressed [ 1313.585624][T11843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11843 comm=syz.7.11548 [ 1313.604772][T11843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11843 comm=syz.7.11548 [ 1313.618848][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11548'. [ 1313.646218][T11843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11843 comm=syz.7.11548 [ 1313.863472][T11849] Cannot find add_set index 2 as target [ 1314.052274][T11860] loop4: detected capacity change from 0 to 2048 [ 1314.107820][ T1343] Alternate GPT is invalid, using primary GPT. [ 1314.114158][ T1343] loop4: p1 p2 p3 [ 1314.118064][ T1343] loop4: partition table partially beyond EOD, truncated [ 1314.118192][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11865 comm=syz.2.11557 [ 1314.137761][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11865 comm=syz.2.11557 [ 1314.154018][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11557'. [ 1314.157977][T11860] Alternate GPT is invalid, using primary GPT. [ 1314.169433][T11860] loop4: p1 p2 p3 [ 1314.173246][T11860] loop4: partition table partially beyond EOD, truncated [ 1314.183497][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11865 comm=syz.2.11557 [ 1314.274833][T11873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11873 comm=syz.4.11559 [ 1314.287651][T11873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11873 comm=syz.4.11559 [ 1314.305050][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11560'. [ 1314.324410][ T1343] udevd[1343]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1314.325468][T31438] udevd[31438]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1314.346120][T31031] udevd[31031]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1314.359736][T11875] tipc: Enabling of bearer rejected, failed to enable media [ 1314.368833][ T1343] udevd[1343]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1314.380719][T31438] udevd[31438]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1314.390996][T31031] udevd[31031]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1314.417714][ T1343] udevd[1343]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1314.431021][T31438] udevd[31438]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1314.441715][T31031] udevd[31031]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1314.454772][T11879] loop4: detected capacity change from 0 to 1024 [ 1314.464155][T11879] EXT4-fs: Ignoring removed orlov option [ 1314.476196][T11879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.561879][T11886] lo speed is unknown, defaulting to 1000 [ 1314.585897][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.601387][T11888] bridge0: port 1(gretap0) entered blocking state [ 1314.607894][T11888] bridge0: port 1(gretap0) entered disabled state [ 1314.621438][T11888] gretap0: entered allmulticast mode [ 1314.628813][T11888] gretap0: entered promiscuous mode [ 1314.639269][ T29] kauditd_printk_skb: 1367 callbacks suppressed [ 1314.639286][ T29] audit: type=1326 audit(2000000103.121:188431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.673458][T11888] gretap0: left allmulticast mode [ 1314.678568][T11888] gretap0: left promiscuous mode [ 1314.680674][ T29] audit: type=1326 audit(2000000103.121:188432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.683688][T11888] bridge0: port 1(gretap0) entered disabled state [ 1314.707344][ T29] audit: type=1326 audit(2000000103.121:188433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.737602][ T29] audit: type=1326 audit(2000000103.153:188434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.761388][ T29] audit: type=1326 audit(2000000103.153:188435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.785284][ T29] audit: type=1326 audit(2000000103.153:188436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.786026][T11892] loop4: detected capacity change from 0 to 512 [ 1314.812794][ T29] audit: type=1326 audit(2000000103.205:188437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.839908][ T29] audit: type=1326 audit(2000000103.205:188438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.841815][T11892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1314.863692][ T29] audit: type=1326 audit(2000000103.205:188439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.863738][ T29] audit: type=1326 audit(2000000103.247:188440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11887 comm="syz.7.11565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e0fdf6c9 code=0x7ffc0000 [ 1314.924658][T11895] netlink: 'syz.6.11563': attribute type 13 has an invalid length. [ 1314.954560][T11886] wg1 speed is unknown, defaulting to 1000 [ 1314.960702][T11886] lo speed is unknown, defaulting to 1000 [ 1314.971899][T11892] EXT4-fs (loop4): 1 truncate cleaned up [ 1314.988467][T11892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.001154][T11886] lo speed is unknown, defaulting to 1000 [ 1315.092868][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.215347][T11913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11913 comm=syz.5.11571 [ 1315.228271][T11913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11913 comm=syz.5.11571 [ 1315.270782][T11918] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1315.284594][T11918] lo speed is unknown, defaulting to 1000 [ 1315.365610][T11926] hub 1-0:1.0: USB hub found [ 1315.376736][T11926] hub 1-0:1.0: 8 ports detected [ 1315.462205][T11918] wg1 speed is unknown, defaulting to 1000 [ 1315.469643][T11918] lo speed is unknown, defaulting to 1000 [ 1315.506254][T11935] loop4: detected capacity change from 0 to 512 [ 1315.518781][T11918] lo speed is unknown, defaulting to 1000 [ 1315.535237][T11935] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.11574: error while reading EA inode 32 err=-116 [ 1315.556512][T11935] EXT4-fs (loop4): Remounting filesystem read-only [ 1315.563277][T11935] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 1315.568922][T11926] lo speed is unknown, defaulting to 1000 [ 1315.574287][T11935] EXT4-fs (loop4): 1 orphan inode deleted [ 1315.586205][T11935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.599440][T11935] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.671968][T11933] netlink: 'syz.4.11574': attribute type 4 has an invalid length. [ 1315.801782][T11926] wg1 speed is unknown, defaulting to 1000 [ 1315.812764][T11926] lo speed is unknown, defaulting to 1000 [ 1315.881614][T11926] lo speed is unknown, defaulting to 1000 [ 1315.888092][T11922] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1316.103207][T11968] loop4: detected capacity change from 0 to 128 [ 1316.135332][T11968] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1316.173778][T11968] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1316.278314][T10851] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1316.378178][T11988] loop4: detected capacity change from 0 to 512 [ 1316.409556][T11988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1316.414256][T11991] __nla_validate_parse: 2 callbacks suppressed [ 1316.414299][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11594'. [ 1316.466973][T11988] EXT4-fs (loop4): 1 truncate cleaned up [ 1316.482401][T11988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.564957][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11597'. [ 1316.585561][T12001] siw: device registration error -23 [ 1316.593838][ T1578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.687190][T12005] siw: device registration error -23 [ 1316.829621][T12017] 9pnet: Could not find request transport: fd 0x00004080 [ 1319.301361][ T3004] [ 1319.303702][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 1319.309875][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1319.320750][ T3004] Tainted: [W]=WARN [ 1319.324555][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.334622][ T3004] ================================================================== [ 1319.347647][T12113] netlink: 'syz.6.11630': attribute type 4 has an invalid length. [ 1319.367637][T27564] lo speed is unknown, defaulting to 1000 [ 1319.373448][T27564] syz0: Port: 1 Link ACTIVE [ 1319.397589][T12106] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.421318][T12111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.446340][T12111] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.469337][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.548961][T12106] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.595279][T12106] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.620116][ T29] kauditd_printk_skb: 2366 callbacks suppressed [ 1319.620135][ T29] audit: type=1400 audit(2000000108.349:190807): avc: denied { relabelto } for pid=12110 comm="syz.4.11629" name="bus" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1319.654316][ T29] audit: type=1400 audit(2000000108.349:190808): avc: denied { associate } for pid=12110 comm="syz.4.11629" name="bus" dev="tmpfs" ino=3132 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1319.669812][T12084] syz.7.11621 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1319.685541][ T29] audit: type=1400 audit(2000000108.423:190809): avc: denied { rename } for pid=12110 comm="syz.4.11629" name="bus" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1319.693230][T12084] CPU: 1 UID: 0 PID: 12084 Comm: syz.7.11621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1319.693305][T12084] Tainted: [W]=WARN [ 1319.693316][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1319.693335][T12084] Call Trace: [ 1319.693343][T12084] [ 1319.693353][T12084] __dump_stack+0x1d/0x30 [ 1319.693485][T12084] dump_stack_lvl+0xe8/0x140 [ 1319.693580][T12084] dump_stack+0x15/0x1b [ 1319.693606][T12084] dump_header+0x81/0x220 [ 1319.693680][T12084] oom_kill_process+0x342/0x400 [ 1319.693801][T12084] out_of_memory+0x979/0xb80 [ 1319.693907][T12084] try_charge_memcg+0x610/0xa10 [ 1319.693983][T12084] charge_memcg+0x51/0xc0 [ 1319.694053][T12084] __mem_cgroup_charge+0x28/0xb0 [ 1319.694154][T12084] shmem_get_folio_gfp+0x470/0xd60 [ 1319.694200][T12084] shmem_write_begin+0xa8/0x190 [ 1319.694229][T12084] generic_perform_write+0x184/0x490 [ 1319.694269][T12084] shmem_file_write_iter+0xc5/0xf0 [ 1319.694324][T12084] __kernel_write_iter+0x2d6/0x540 [ 1319.694362][T12084] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1319.694406][T12084] dump_user_range+0x61e/0x8f0 [ 1319.694506][T12084] elf_core_dump+0x1de7/0x1f80 [ 1319.694561][T12084] ? 0xffffffffff600000 [ 1319.694621][T12084] coredump_write+0xb12/0xe30 [ 1319.694703][T12084] vfs_coredump+0x143a/0x20d0 [ 1319.694808][T12084] ? __memcg_slab_free_hook+0xbc/0x230 [ 1319.694847][T12084] ? kmem_cache_free+0xe4/0x3d0 [ 1319.694909][T12084] ? proc_coredump_connector+0x114/0x220 [ 1319.694987][T12084] get_signal+0xd84/0xf70 [ 1319.695033][T12084] arch_do_signal_or_restart+0x96/0x440 [ 1319.695073][T12084] irqentry_exit_to_user_mode+0x5b/0xa0 [ 1319.695178][T12084] irqentry_exit+0x12/0x50 [ 1319.695221][T12084] exc_general_protection+0x15b/0x1f0 [ 1319.695291][T12084] asm_exc_general_protection+0x26/0x30 [ 1319.695321][T12084] RIP: 0033:0x7fa6e0fdf6d1 [ 1319.695342][T12084] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1319.695368][T12084] RSP: 002b:00002000000003e0 EFLAGS: 00010217 [ 1319.695459][T12084] RAX: 0000000000000000 RBX: 00007fa6e1235fa0 RCX: 00007fa6e0fdf6c9 [ 1319.695477][T12084] RDX: 00002000000001c0 RSI: 00002000000003e0 RDI: 0000000000000200 [ 1319.695496][T12084] RBP: 00007fa6e1061f91 R08: 0000200000000440 R09: 0000200000000440 [ 1319.695548][T12084] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000 [ 1319.695566][T12084] R13: 00007fa6e1236038 R14: 00007fa6e1235fa0 R15: 00007ffe57908768 [ 1319.695596][T12084] [ 1319.695606][T12084] memory: usage 307108kB, limit 307200kB, failcnt 1128 [ 1319.726105][ T29] audit: type=1400 audit(2000000108.454:190810): avc: denied { write } for pid=12110 comm="syz.4.11629" name="file0" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1319.733014][T12084] memory+swap: usage 362924kB, limit 9007199254740988kB, failcnt 0 [ 1319.759250][ T29] audit: type=1400 audit(2000000108.496:190811): avc: denied { unlink } for pid=1578 comm="syz-executor" name="file0" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_systemctl_exec_t:s0" [ 1319.762975][T12084] kmem: usage 95040kB, limit 9007199254740988kB, failcnt 0 [ 1319.762993][T12084] Memory cgroup stats for /syz7: [ 1320.052424][T12084] cache 142307328 [ 1320.061040][T12084] rss 73895936 [ 1320.064535][T12084] shmem 73175040 [ 1320.068074][T12084] mapped_file 0 [ 1320.072475][T12084] dirty 0 [ 1320.075516][T12084] writeback 0 [ 1320.078853][T12084] workingset_refault_anon 547 [ 1320.083531][T12084] workingset_refault_file 23 [ 1320.088210][T12084] swap 57155584 [ 1320.091682][T12084] swapcached 954368 [ 1320.095539][T12084] pgpgin 445160 [ 1320.099697][T12084] pgpgout 392143 [ 1320.103295][T12084] pgfault 423168 [ 1320.106949][T12084] pgmajfault 74 [ 1320.110436][T12084] inactive_anon 1499136 [ 1320.114606][T12084] active_anon 146526208 [ 1320.118863][T12084] inactive_file 0 [ 1320.122502][T12084] active_file 0 [ 1320.125950][T12084] unevictable 69132288 [ 1320.130603][T12084] hierarchical_memory_limit 314572800 [ 1320.136051][T12084] hierarchical_memsw_limit 9223372036854771712 [ 1320.142207][T12084] total_cache 142307328 [ 1320.146394][T12084] total_rss 73895936 [ 1320.150291][T12084] total_shmem 73175040 [ 1320.154355][T12084] total_mapped_file 0 [ 1320.159086][T12084] total_dirty 0 [ 1320.162542][T12084] total_writeback 0 [ 1320.166397][T12084] total_workingset_refault_anon 547 [ 1320.171650][T12084] total_workingset_refault_file 23 [ 1320.176798][T12084] total_swap 57155584 [ 1320.180854][T12084] total_swapcached 954368 [ 1320.185877][T12084] total_pgpgin 445311 [ 1320.189866][T12084] total_pgpgout 392294 [ 1320.194007][T12084] total_pgfault 423381 [ 1320.198079][T12084] total_pgmajfault 74 [ 1320.202056][T12084] total_inactive_anon 1499136 [ 1320.206827][T12084] total_active_anon 146526208 [ 1320.212401][T12084] total_inactive_file 0 [ 1320.216551][T12084] total_active_file 0 [ 1320.220552][T12084] total_unevictable 69132288 [ 1320.225242][T12084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.11621,pid=12084,uid=0 [ 1320.240630][T12084] Memory cgroup out of memory: Killed process 12084 (syz.7.11621) total-vm:95872kB, anon-rss:1276kB, file-rss:63536kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 1320.297713][T10862] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.313665][T10862] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.330961][T10862] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.346096][T10862] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0