last executing test programs: 2m53.739575983s ago: executing program 32 (id=786): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m41.923075464s ago: executing program 33 (id=985): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x58a, &(0x7f0000000bc0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) chroot(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m40.858533569s ago: executing program 4 (id=998): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x18, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x200) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) 2m39.358532612s ago: executing program 0 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mq_timedsend(0xffffffffffffffff, 0x0, 0x47, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000400), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xf}, 0x18) listen(r0, 0x9) syz_emit_ethernet(0x3a, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x3, 0x12}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m39.295629133s ago: executing program 0 (id=1007): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x8000, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2002000081c000000000008907800"/42], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79a9, 0x3180, 0x3, 0x2af, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0xfcf, 0x4c1, 0x43, 0x0, 0x0) 2m39.043609957s ago: executing program 0 (id=1010): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20e8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000"], 0x0, 0x2e, 0x0, 0x1, 0x3}, 0x28) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x6}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cc2b61b6cac48e9702de0ca936789f2472198d53a519134bfdc1fdf6086a80254b9f197d484bf967e3ca87bfea"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000080), 0x8, 0x601, &(0x7f0000001440)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r7, 0x0, 0x9, 0x8}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)=ANY=[@ANYRES64=r4, @ANYRESHEX=r3, @ANYBLOB="1600000000000008000000000000000001000000", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB="0100000005000000040000000000000000000000ae10000000000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0x6}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 2m38.709069292s ago: executing program 0 (id=1013): r0 = socket(0xf, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x2004010, &(0x7f0000000500)=ANY=[], 0xfd, 0x1204, &(0x7f00000046c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x84) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000003680)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES16], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x20048884) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r7, &(0x7f0000000680)="ac4b1569d72b2aae93a20a3de91b7a8d429795685d73adecebf46ab3d5ace9c5c1b8d648683506f66eebc5fc8d314a55e215accaa061d03f8ee273e1328e50c8aba0c355cd800eba203822aa38f41ccd1792f45cefad4e699f7fec531618368f9fae5f48109258ca82e87bdba72e0cfc94ab484f4d5518127ec31be10d5413d4091c94a7876de6de3123e8f24c2f023d361fbe1a065b4ac4928ce1344c91f874be7656b588b7dc2577acc7253286736d0d07ae4377253a5de2ceaf"}, 0x20) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m38.23513293s ago: executing program 0 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58) fstat(r8, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="180200003b00000227bd7000fbdbdf25040087000c006b0000000000000000000800d10001000000371c1d55c75cc2c9d6b2ddaa859564d044d977a9af0241323ff790034e5521324a7f4cb7b51a21e22d9d6bf53fd493c9988fa3c4712535cec4a034d30b0aab462ef237648774163b1a3b700ff0476b2858fadfc0d9350fd53075b7d3fe152a63da2c28d221b45e46be0beb2e8b1aa214067a334f5be924b21a1445989eae4faee42c940476e9df973b5606cdc15e70f5a0ea5061c28e454b252ebcabc18c8d5e162d45fa170f45a8c0e3835ea6c407fe979cc3e019a5a27944227e6b3a3557108ace933b9528e6d17e70d34424940a2c159f1aad6949a3453da01464238fbc414bc69abbc1c23b76b56d7bbc4c3e06bf2bc851ab337644f3e5fa8e4b332a610034d4280981ea9ce23180564297cc05e87da3864fdf1f0b4ac4007e41cd3b033e4bc022eb7b8af7458756160a5274d46c67b47cbf896a4365cc95294b86b3f337d6485519a3cff1745c7fd28f3b93bad48bc72caea673d8e39ffeb6821833e5c514d0cda2c5ff3c3a9dd1222fff94a2e2e5dfedabd532716ca396e928d0cf27b23a82dd15fcd12d6b474751a46c723bc6882e193e98df0bcc8583493ac23e3b58ae7b65d80b79393fd3af999f78586dbb8742721a7efc1b84498883bcf7e3884a2358d4aa342d5c4bbebce3804c7ad30ee50f8151e981cd34b0670926eb7ec5f6c5037bde2d512deeb22de0fcf573b160"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r7, r8, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r10, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r8, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r9, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r14) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r16 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r16}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r11, 0x0, r12, r13, r16]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, r2, r13, r17]) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2m37.954501363s ago: executing program 0 (id=1019): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x8000, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2002000081c000000000008907800"/42], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79a9, 0x3180, 0x3, 0x2af, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0xfcf, 0x4c1, 0x43, 0x0, 0x0) 2m37.917813384s ago: executing program 34 (id=1019): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x8000, @remote, 0x6}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2002000081c000000000008907800"/42], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79a9, 0x3180, 0x3, 0x2af, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0xfcf, 0x4c1, 0x43, 0x0, 0x0) 2m36.779447902s ago: executing program 4 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=r9, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7101090103020607037efd0930ea56ccf61cab1d033eff0401eb"], 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r13}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r4) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@cache_none}, {@directio}, {@version_L}, {@access_user}]}}) 2m35.900186075s ago: executing program 4 (id=1038): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES64, @ANYBLOB="4484e47f38234bd26686b8f4a70a6abe698c2e43d8136254da4d20e18f40bd04f60acd27877a9fdb8dd05c693238a820564c2925605b9c94db60688ac253a5f836bd347d2272d2c76091bafcb16777db9f112649f04754d35261e4540e27cb8b4c4de7e2ad4d47cff4d2af0c471b4d3f66b4fec6909effd52fd712ce0a7014a18bb9210a54e92ebc299ebf6849836de35609c2e3de6a1fca3bc903049a80d6e571cc3d5c120b1a8ff63dd94c1f1d145616e3df4bda6fcf2fe78a8ab21e2a9c445ad021524b3adccadc6a91591eae1cf1d826", @ANYRESOCT], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x23, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) mmap(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r2, 0x8cdee000) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000340)='./file1/file0\x00', 0x2221084, &(0x7f0000000c00)={[{@block_validity}, {@data_writeback}, {@nodioread_nolock}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize}, {@lazytime}, {@init_itable}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@errors_remount}, {@journal_checksum}, {@dax_always}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 2m35.61230235s ago: executing program 4 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800080000008000000080000000000018110000", @ANYRES32=r1, @ANYRES8=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) getdents(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40001, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m35.423362132s ago: executing program 4 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=r9, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7101090103020607037efd0930ea56ccf61cab1d033eff0401eb"], 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r13}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_none}, {@directio}, {@version_L}, {@access_user}]}}) 2m35.405532093s ago: executing program 4 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000740)='mm_page_alloc\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nl802154(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x4070bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000200000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000004840)={0x2ff, 0xa}) unshare(0x2c020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8, 0x20}, 0x38) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b00"], 0x144}}, 0x20000000) r10 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) 2m35.361106973s ago: executing program 35 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000740)='mm_page_alloc\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nl802154(0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x4070bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4024044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000200000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x63e4b27f, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003"], 0x10c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000004840)={0x2ff, 0xa}) unshare(0x2c020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r8, 0x20}, 0x38) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b00"], 0x144}}, 0x20000000) r10 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) 2m33.904527076s ago: executing program 6 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=r9, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7101090103020607037efd0930ea56ccf61cab1d033eff0401eb"], 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r13}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_none}, {@directio}, {@version_L}, {@access_user}]}}) 2m32.940889701s ago: executing program 6 (id=1065): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2002000081c000000000008907800"/42], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) io_uring_enter(0xffffffffffffffff, 0xfcf, 0x4c1, 0x43, 0x0, 0x0) 2m32.816202612s ago: executing program 6 (id=1068): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m32.761274023s ago: executing program 7 (id=1069): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000840)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) 2m32.610697915s ago: executing program 6 (id=1071): r0 = socket(0xf, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x2004010, &(0x7f0000000500)=ANY=[], 0xfd, 0x1204, &(0x7f00000046c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x84) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000003680)=ANY=[@ANYRES16, @ANYBLOB="9e08d29551dd906e5218825e90de58384d1f56b822dc049d5682bf1e3e3ce8ec86df55f14b960b236644a722fbbc16f10e67d55faa4eb2aedba351bf1e89812fa89ebb70b238382e419b50c9daca99234b152d5b5c605860d061d5fdb90f23f1ea93399989f6f85afd1a42d78beef8b96a51a3bc164d01e504fdecdbdb3f9f88b065d87b00e57eb2d61d0c48ca5ca6ef1f42456859ab2eef472c283e9565afc8d08d0d403da89bce4a5d68426820e2d25b45cb29eb51d6424cd8d9558cf2bec41d7cc3d0cee6f521317d1ff4a4909d2c60a45c6fa0913c991c54c39cac4b554e855a4b25a961484f9f5e8a7543c7562c48e157d8ccbcb6bcd4f608a8d1b065f0813e9a8362d7855bdfaa98998ad121223742d2bf00151270ab4fd759700948d1f12da94e3214eee0a6e165225151fd8a95d186599c9d87046f25c1add18d9c9b6cd4ad1a5d6c75aaf070681b9cb751a57612a1fc75d1fb2be40b476aa5116777688d794a9d06351f562b6d2de08a60866cfb82f03bd364e80ecd6f004f7af9b36cd8152d2de3c83382aaa54ec41d70a1bc573c3c7f0fd7617de377badc68f0ce13c167fcaaa2b407ed7759838d1a898a5442d8e98d7c7223ad9c1151867fe5eee4e4aed9f8ec1cb9da3146ea303b41483bce0e0e64599be72a36381ebda9a2f518212692a2999f4fd0ed903b180fb199a723ad7aef6318b10c34e64165f5261544432d559d491b12d7fc43464090e8aaac22740ac702b186dc3c3970756bfe9437babaf19a4cd5bc06be344cbe5d04d5c80dc0e08219be17212a64253ad57b3772a978ade8a0d1584cfbde2c0424b44a8efbf302f3f106fcd9144032636b16f0ad48a8f3d9053f4d436769d849fe49b596bf469c26a2a38ca2154aac69c876e665c1eccd8646f6cb2cb6f06abd666b081a4138c07cdf91a3d6d36ac4d7454d194078c7ee75b83d19fdceac5285758c3ce4401dc35c03028569c3751292b00c731d8ddb62e086d7703eef739d3f7f384f4088a0c427f9d120b7c60d212ad0c3f1ad144a0ef4e30b7105377e037a6499c2385d8a7f3dd088e67bf82c26a0c8d88227b564eb238a32630f75764f6147c7815a0f6c19a7748b68ebb151cf39fe5506266ff243f0bd23e203fb31de0113975e3994295b82d6e6f210ca5be09713ac8a2f13326a41ca685e75aba0a7ed9102c418c98244699e5ca64f54a4afdd69143588287f56d9784de6a671adca03858e4e327f07a908eb75ea9c1bc0dae191cf3be3400d78b015834a6d07389bfd67530cb8ec1a886a0e4a65f0ee64c1f75a01d7dcc85c952cf28a82143fef077b29ebc32ce1743dbf70e3222444395263edecf4c95d8bbbca922258b1d6f0559df236786e9f7e1635456fe53eadf0c3173832a42855b6cea8ef2c53cb5c14d13f9a728048ea50c91dcc4489547cf25a6b6b32ad84a05a3421f2d8765ed47cb94129532cc4ff9ff26796aedfff21c6fdce4636ac6609e96406c32e669a319b820b7a4791d5357e579d8ba44e193c19ee87a308b0805f26cbf42125b6dfa10574f049ac53addd8e21cd5a7c75925cec069c13a64707461f208d85b134a3929ae440c513c157fd3346588afe2922e0e123350119c508ec70a2f6dea87ca9d0677e38e5669848a32090916f2ca475d22c7371789ec5b6319902283c669661ce1b68e6aca58fd3d0ca4f8733ee6397547153729219980cd5d54e42febd27898e1c8250ada282b40ff9b15d6e1fc46efb825a1d14d99c3a5a6c045d2c109b9b2e18ae2983414de6601533ae3a9303273520ec178cb4b2f910d9c5825be5415801ce77d0f8a717eea164b73724774239d3e70e694d9d70ba9f627f783f06eccf73be067d0696763507ce105ed7e4e52ca753c553ce6bf5a51f44733aa9fda986973f94522166410d0ade649c7c08a1af0bc7a63cc8ccd30911c8b1acffbd8beb09ab4e4d649501577460c79419ee9ce5f462d3e396cb3a304a4123037c6d022553bee236cd60525a3247f379dcd0b94604b1ff92e47096ac7b0d625afacda25015791a04743cb78f387503a185e2b6eb057ef8d2fae22eb85226a3c8d41995d4451f75d901e04c17137ede3ab7e959434968fd1320e985c3c287aac6e0b88ccca79780c17121928855e3d712a791018a00f010082a5b1d1642f6422538bca743173c9c160250e0946e4d9835667d0a8691533264bced7074795d2e495a7d291829288401a0c60b0f38b697c4e724449ac036d63eafaabeccecd576008a2baf4141799260c54fb4dff5e9613f7f32512678f2ab0085ceebe1673f005675f267752bc408d08ff590d3a90330475adfbdacb10779958411fb0a40d9668ac28089ce80776d4e2a27a06fafa2deafa8ca863f3e4245863f7de1b281fe3b159f93b05a4c78a2493e381d733a9ddabcd77060ff3d1b152dabbb44feaf58038852b9854886eabfbde6bb392bec987e2ec7fd3c75b6685477f3c7e93888b674bce234922aaac8a0e37ab83128e3521919f3852d5ef91a09f85f36d7c322580b13793ef3d0a568d6bcadba2eede0927d75149b54fcb56baf2e309a5cb569bc8f97f28e0698a313a4df063fa1806e2abb9c681feb249b834699da3d00667c3c13c3d583c073b26e605a7ffd901ee21f84b0938e53e5622e911f147749c4b8bb6bbc24c18a53f5f0c2a3a89cbc8d461f7624ceb72b3a5d3a2e566d00af3036287c6f4e47af316bb784802bfa4603d851373e6ea7ac312146ca3cb91fcdbfb322dd87ad52511e7fd39467ed808bec90e59ab81e4042bc22f2b56b1512412f3cec49da79625b6aab8b6979c3ac12b85f76ed1d77ee9e7aaa5acd558920ec846c109cfa9bc9229033999f22d845211b807b2f508d9c7a97dbaa5a84531065ad3546ad14e796d543d8131e7d3517c5103926f991f53029f94e9d3ad09edb738014845a528fa970991b2b44b10e7cb2703448f747814bd15000a027c4c88c03630818f19c55f5eb93bc1b44b7ba6dc65649534fbb55d60ec063c3778bb59d13d3152445bc6d3ad16b22fe44936ff50cb71251f0d13a2e471ca627547f91191035ea7469d1a1f7d05563e13bcf1c7910e7e6cded649493e26f6742f6342aeac733d84f51c2691ee9eeaab4a68f8c6effc3a815615cbaff78ca112bd31935d862f22b903b10aa85b66e812bc24560a6e6ea336c34a4ba370f0d712421ed8abfb75391c500af9d00bc1ff118a8f87d2a909c274abf44c5220961d2791fde9fb9f8a219bc91cfe33ef6c6107df399bc71839f4a100284844795125eed41c9397a1675693dae4b4a7b78b0e30e5b208cd8075f1992b22150cc1e270270a23778f7b53b26a805da7b14757c18a184a17dfab4e6b62131e5218354e4adc514a4ee9130e8ae5566c9f949a6b329397f2545e38bf465929a5958c23786d6d22c752eccab7674a1e9e35f40c6ea2f4b065bbf32997f60a511d2f08d1b6cd9a97b160c1ddf8c24f991c2e7550695dec89c7631bb09a9525c00e550bd044c1c3bd4bb07d532b77e14d2851d45526dbad4cf7cb6f165a812a2b509c8d6bf13a8af81304510d61c13afdc82ec69687bc5f5a54de8d1c290a5c9046f574a31de65bc5462174ae943be04d26d961640883567e00d5f2aa68988b374af0f26fa18b9c5e908abfea0bf8c94ea7be7e0b1409ec86704764c3275eb565b263ae9f6230ab164e441795d746fb58d4eeb735d51c0a1927b7d991236b656f99376f6ab51267326d8b1e2a7ea2c6336197bf6c62cf7cc434abcb4a26a0ea7e65cf92342f551640a1e01b9649f78c0e52a03c95b52b11a833bf1e13cdfbe6ce96b2f3190c78b560fcee7c296a197524167c7dc20d7881e613583d27328e074b5e799f515695856535213458f1ece97196e202228274a61cf44b0148d44096fe50cb46561f9950f536095c7264f1d7b735601982b23f5e37e9ea955f8bdea01147115ced9d0bebc29d037af049ae0f78c6d8e4138db920c4ce0d0160d925920618c6c0ee151b3098115e5c21dd119c4c41f34c5947b447b0a49af92e9d42cc038a5b3f6ed2365bfb5f2c32ea0c43bec06f826f708e83bb2a9e10ed11584bf2ff95270f4d430cbdf7f3234753c2bf24725ddd16dbcbbcf1a0de2493482f2fa2fe8ba611009251a38967cc4d3290ba7bdf330d872d32603ac8597f709187d322be135f722f05dc25451fc33a71c6388c346657fa5ada96910f78dc89ba94dc3c93763ea1cc0cd9d9cc34fc7b4ba217e473dae313fa93fa3d87b99369f39f5b168f1723057a9fefa77d6fe105c8a02e6f352454d7b5091449b6a13922e4687f52f4d64e41c0505cc70f98bbb89e21cb77cc3fbc61b64b8985b325b8c405857f7e0dcdc2b928d551766c754b503ce8ca72ba57ed1be7c9b25828537064a6b2f74cfcd8cf5f4d93c2bc5ac505985aefc830942250e1b71b3180a0c9ec385bf458e3f5b5e4357d56ea49015c02cf815d489919c9069b17d0a97abeddf5cdbfec4df67f73403cb867581b823b9e1eaf40e86e5abcf9a1351a7ed813d0cc9f749146202e32e19ce95ded76891c610547d8832bf79cda85474b0fe55cfce9546ded3b98256bd5b2af6d41d8fe8a9707086d6b0f9e2b359b148b899e0e78003691ec9c964a437d27334faa4adf77d529b3eb1b59693f53b8ba95b187db3c8df4c3c486ed05e8176de43dbe8546a51d629d0ddd93796154005f48d242da57d5d2fb2c2906c645cf1dc85bc0eebad46a01b5f26ee114ffcff53bad7b6e7ab78684348d7fb8d385ae433b711ab79e31afe2d9a89abe826cf242117ce1faa6356a5524298fe977a58f4e8eb306f42da444dc8209f3d1aadea9f7c33687af070e5d73a8b6ef4ea1e099f4a02311319c1d2a27aad1888a3862bfa9747caf18b01d24bcabe21cebf8b5ec58836b667a373003b69bc840069fb0a2522b7d19180499f9826d93cb72c12eac27d843f907e870444d272d01bdf5f282a18e6c5ee2a7231def262810599b343c463d663f1305cab532c75c587bd957ca9a69938a72944ee866b1871dd97cc8a172ce96caf6a7ae670fcb0c40cb435dd262487acebe0e133ed7f7693a7119a813101d2922ae77c6c311851300ace1a959c9b1b28958984e4e5d910108fe0837f53a852b44f8de5bbd4f2452ecb4ed285d534c4fbad158c754945b590b8f84c0aec2a26e33e19351fdf886ef915c193407458a0838ba19d6685a61f188019f7d87d2cd14bcf414526e8a5c6329a9a69f0c71be628b49850c81d0da921e7562f7b1fd3d3738f9edb5b58f9c7422a11e49a79373b4fc073413785faaf4ac45cc73e61fb905b61a6417598adfa63ce54bc7b9b40871cea7d5ee3df42975238121462f4b08e677e12e3531bd201e967b0684e56150ac4e42e3c26a39c40d8c86aebaf4b3e8470a138f0554303f34b30576574de8bdce8c27f390f2d4ecf6947637291081df9a53bd48951a37455278c89c5f4327ab96c7211677fd650e11a95ae05ed09d196bfd68c06d77f248bc6a622d5bf0bfd036b320255c508113bb3ff29cf49631910ad501767639e19228ec74f0d8c0fe1b74a11e497934e924bff65791e851df914ae6f38e83e82e4cd0e29cf16f62c370488327abaad69307dc2bfd2f44d237f2d91a197b24ff5b89654090d25549c37a2f31ef3f481ad9a92c5daa569d8826467aa919bb88fffa69aec64714766bb95640a4cd18b18b0231bee4dec5d5bc69e719a35ab50005e8c5b20f5bf3d0efa3c7a7ff37fe42e1edaf4d0a9f20e2ed78ccb7167582e788f5f21", @ANYRES8=0x0, @ANYRES16], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x20048884) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r1) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m31.870147497s ago: executing program 7 (id=1077): r0 = socket$inet(0x2, 0x3, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000003400)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x48, 0x800}, {&(0x7f0000000740)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000b00)="91f1d23d34565e3c178287692af29e797c0d9fcd84e356e918f6829f1a21dca7ad5d1de49d105a472a6a5c3cee4755d8ff68888f9ea6cd9e2d1a516bef836694670d3c800e7bb223a3bc5cce257dada6d70b93f1c23babcba490f9b3ad20c2f022179470c90fa63db056985644297a59da0058ca1709ef668eabe277c2f9bd5f5d010242a99ab433522c669ec6556f054bbd45d92e4da701c741dd42c62ade1d4ce5febdd6af9c8cd9a4053bafbe", 0xae}, {&(0x7f0000000bc0)="5f5f21141efe656b487eba4a40762882191ec02abf80b6769e7716c53451aabe7f7476c85b60a4e1f737d1e05aa81cf1117a13826c2963ca4d670be4781a491c5d1ceb10a9cfe49293df2d3816ffe43a9be933406e0ca466fb0259ec07d01256837affd58c8e776497d7154fe81318c44efed258898e1345497060bd8bd02b22a022aa01c5b215996e3abdf677f8ee6a29a6cc703ab842e2da6fecfcd6082a75c37ed4a55550a45b2911b70821df5798fe30f0c00ff1d1a1e019d7672a107ab363854ece421e47b6b17aeb7318724eb9eaea7b44370afc077d947db72fdb1cd2413db9e0cdd463edefedf382cd6898ccdd4a", 0xf2}, {&(0x7f0000000cc0)="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", 0xfa}, {&(0x7f0000000dc0)="4c3493f1771f4abe1270307340a45fcf0dfc16c610745a4f7bec6bebeb2ae8da1a08ba784a91ee3fa5032f4d59698afae064ec800f54324e4b39c7eb93a5b68fbd62bd0713a838c72485bcff34d411628ef982561b31efdffbeb0cadb71d0b9d7968f78ee749161a6809d3783832f513f445f6ef2fc484649aaabc1fb5c68e1f37cf99b0aa2ffa4984cda726dc4448d9046c66b3aa9e9bccbdc98e2cd40e5275eeaf24f2c56dab79dd536ff4666ec9d002e33e16f4bd4b24ed4e2e23d0be4c6ad1c6", 0xc2}], 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3000000000000000840000000100000002005d07010000000800000079c20000000000000600000081000000", @ANYRES32=0x0, @ANYBLOB="1800000000000000d836020000100100b908"], 0xb0, 0x40850}, {&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x56dc}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000001080)="2b0d8e297ff51489988f0350af5b3329ffae124cccf3e08671cdfea4f00035f4b957332a43e719bce4c32f11f6f22b6348ad6b8dbb1ab063f6517fdd9b435e49f608edc86b492f845c8317d316639107ee6ad60a2c6d420ee066e12572ad6ce3f720359657f35ec741ddffc0d61a9028535f956e582f3750b82e98056e96bcc34ea723af2d46c863a17da559db73db45cb3cd6b6a0c0c50a970fcf890ff0cec27f65ef10acc6e3be141f1a819b4ed03a8a97a42c53bcc50e6d", 0xb9}, {&(0x7f0000001140)="52b91c19be10d79804d3f2a9a33eac0fce92de0d84e13b9e0df23ffa8597828efcd0f9c9417866b1bedf929d2f03ca398a0975c20128ef9a9466bf68f256bb81bfc2dbccd5f8282cdbf4e75fd6030d0a40c54ba24ce5d37d402b2157425c9bc5972e7c701c56a227d2d1e2ff5f8de50d9202f40286978a32d35bae5aa2664cc1eea225156a6dd30c12356d920f3be12c5ae43d", 0x93}, {&(0x7f0000001200)="7d4e59b1ac1fea568c5883beae8e9292bb1ed448a1c73dbe52be0947bd0934605607485f7152bc09dbae81e496fc262adce29d85cbf62f14cd", 0x39}, {&(0x7f0000001240)="26294bcd0cb573e9c764759e4f6814eb8405043507e5abe404eb906e8a008de3158fc062e9e25b85558adac86128a663289184c4623cbe58653b137318a1bf530b463bcbf3ea569be06ffecc7dd186531dca3bb58bbfc3c1919d4c16ff935a42c8f35986d7979b4e84051cd42c66757208850981d723468d8eb62573ad6fd6d34375e57d2cbe9d99499ec4d092e8c5cf06d7602e7f62dc", 0x97}, {&(0x7f0000001300)="d0685572afcc1c65cce2f16809f16ccac44c2cc77535391e958b716f218a98e47b9751cbf766497f936ee5d7b65a7fd57f3da483a4a49e69710e62fd446d3a44aeeda73bb4b7e7ae3ca4df8812b4ce12953c6243be3f3c7761678b99ef621b5615eb1bd2a1ad47deaa91b897fc4ee9c247aef168cfd2e11d31399578ffa26d24e78c7165", 0x84}, {&(0x7f00000013c0)="726fda3f3352edf2e4517294fcadfac70daff5f941d5ba4c9667d9883843378b7bf01a32bb6cf5a91e69ac7887377b1759ee5e7b21301fff81eda42559456299e906126c2c8089cb28ad1ca00f83280548584896845d7f0d99253755c8b445ad921dadad2adf0c9cfc3816070028f2ed0186bd1631918f43eddc70e0607ba3dc8ab89ccc8c541b27431c53f75142a9955ddd3394af479b8e9cce8e86b7d0eaf73a47842606d5e1f28a3a3718108ed3331f78bc9ac1cc9eb955d98c48e548f047ea4f448ca32865c57da149b23f6931270405deccb259f4b32e9f7a49f445b341c20eeb9a5ef49dbcbdbc62ac0a74c6c2b24b7d", 0xf3}], 0x6, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000008419000007000000ac1414aa000000001800000000000000840000000600004aac1414bb00000000"], 0x30, 0xc895}], 0x3, 0x0) get_robust_list(0x0, &(0x7f0000000940)=&(0x7f0000000900)={&(0x7f0000000400), 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)}}, &(0x7f0000000980)=0x18) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) r4 = dup3(r0, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000000001000300000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x21, 0x4, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}, 0xfc00) listen(r8, 0x2) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x6299, 0x80, 0x0, 0x334}, &(0x7f00000002c0), &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) 2m31.799133958s ago: executing program 7 (id=1080): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x10}}, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x25dfdbf8, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="edfb29b668796ef56e0d6010ec9a26a5d0ce9b2df943c0ea8adce321ea475b6d6ed00eeb1a3d0f1a8e6d", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf250200000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @nfc={0x27, r7, 0x0, 0x3}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, @llc={0x1a, 0x205, 0x4, 0x7, 0x8, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0xfffc, 0x0, 0x0, 0x0, 0xb80, &(0x7f0000000040)='veth0_to_bond\x00', 0xd74f, 0x12, 0x8}) 2m31.778982838s ago: executing program 6 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x18, 0x0, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) sendmmsg$unix(r4, &(0x7f0000000600)=[{{&(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000000)="d4ad3bf867ea0ecbe3644588645031ab340fe7596bc59fb1510c1e51e91b8b5313", 0x21}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}], 0x30, 0x8880}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="fb4347b2c3b4b967efc59928131af5596bec72a952cb746b5c30d8f18a09f6d9c98ace996b8e317f8895ab29347b217ca495789e2a284f5ed7ed7c104a0fa1ef2091323e3aacd334c5e35fbd370c494babae269f4a289d69eb1cc7a774377278d36c4fd9e23c24ffff4dc530f4c4936d72890407f7aefc9faae54751a7702378719ab5", 0x83}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [r5, r5, r4, r0, r6, r6, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}], 0x58, 0x40400}}], 0x2, 0x20004854) 2m31.445185173s ago: executing program 6 (id=1087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES64=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m31.444991013s ago: executing program 36 (id=1087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES64=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m30.909228221s ago: executing program 7 (id=1093): r0 = socket(0xf, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='tlb_flush\x00', r1}, 0x18) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmmsg$sock(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x2004010, &(0x7f0000000500)=ANY=[], 0xfd, 0x1204, &(0x7f00000046c0)="$eJzs3M+LG2UYB/Cn67bdbt0faq22IL7oRS9Ddw9e9LLIFqQBpe0KrSBM3VkNOyYhExYiYvWiV/8O8ehNEG962Yt/g7e9eNyDOGJmaxtJQdklkeXzueRJnnzzPsMLgYS8OXjj6493d6psJx/E3JkzMdeLSIcpUszFA5/Hq6//9PMLt+7cvbHRam3eTOn6xu2111JKyy/+8N6n37704+Diu98tf38+9lffP/ht/df9y/tXDv64/VG7Su0qdbqDlKd73e4gv1cWabtd7WYpvVMWeVWkdqcq+mP9nbLb6w1T3tleWuz1i6pKeWeYdothGnTToD9M+Yd5u5OyLEtLi8FxbH1zWNd1RF2fjXNR13V9IRbjYjwZS7EcK7EaT8XT8UxcimfjcjwXz8eV0bNmPTcAAAAAAAAAAAAAAAAAAACcLsc8/392psMDAAAAAAAAAAAAAAAAAADAKXHrzt0bG63W5s2UFiLKr/a29raa26a/sRPtKKOIa7ESv8fo9H+jqa+/1dq8lkZW44vy/lH+/t7WE+P5tdHfCUzMrzX5NJ4/H4uP5tdjJS5Nzq9PzC/EKy8/ks9iJX75ILpRxnb8lX2Y/2wtpTffbv0jfzUWZrs1AAAAcGKy9LeJn9+z7HH9Jv9vvh+Ye7DYWH4+rs7P7LI5Ug0/2c3LL4/ulWXRbx45ueJcnPALPqY4rOt6QmshIqaw+rGL+fhfjKFQNMWM35iYioebPutJAAAAAAAAAAAA+C+m8XPCiQtfmPqlAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAAAP//cnTQJQ==") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x84) write$cgroup_int(r3, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000003680)=ANY=[@ANYRES16, @ANYBLOB="9e08d29551dd906e5218825e90de58384d1f56b822dc049d5682bf1e3e3ce8ec86df55f14b960b236644a722fbbc16f10e67d55faa4eb2aedba351bf1e89812fa89ebb70b238382e419b50c9daca99234b152d5b5c605860d061d5fdb90f23f1ea93399989f6f85afd1a42d78beef8b96a51a3bc164d01e504fdecdbdb3f9f88b065d87b00e57eb2d61d0c48ca5ca6ef1f42456859ab2eef472c283e9565afc8d08d0d403da89bce4a5d68426820e2d25b45cb29eb51d6424cd8d9558cf2bec41d7cc3d0cee6f521317d1ff4a4909d2c60a45c6fa0913c991c54c39cac4b554e855a4b25a961484f9f5e8a7543c7562c48e157d8ccbcb6bcd4f608a8d1b065f0813e9a8362d7855bdfaa98998ad121223742d2bf00151270ab4fd759700948d1f12da94e3214eee0a6e165225151fd8a95d186599c9d87046f25c1add18d9c9b6cd4ad1a5d6c75aaf070681b9cb751a57612a1fc75d1fb2be40b476aa5116777688d794a9d06351f562b6d2de08a60866cfb82f03bd364e80ecd6f004f7af9b36cd8152d2de3c83382aaa54ec41d70a1bc573c3c7f0fd7617de377badc68f0ce13c167fcaaa2b407ed7759838d1a898a5442d8e98d7c7223ad9c1151867fe5eee4e4aed9f8ec1cb9da3146ea303b41483bce0e0e64599be72a36381ebda9a2f518212692a2999f4fd0ed903b180fb199a723ad7aef6318b10c34e64165f5261544432d559d491b12d7fc43464090e8aaac22740ac702b186dc3c3970756bfe9437babaf19a4cd5bc06be344cbe5d04d5c80dc0e08219be17212a64253ad57b3772a978ade8a0d1584cfbde2c0424b44a8efbf302f3f106fcd9144032636b16f0ad48a8f3d9053f4d436769d849fe49b596bf469c26a2a38ca2154aac69c876e665c1eccd8646f6cb2cb6f06abd666b081a4138c07cdf91a3d6d36ac4d7454d194078c7ee75b83d19fdceac5285758c3ce4401dc35c03028569c3751292b00c731d8ddb62e086d7703eef739d3f7f384f4088a0c427f9d120b7c60d212ad0c3f1ad144a0ef4e30b7105377e037a6499c2385d8a7f3dd088e67bf82c26a0c8d88227b564eb238a32630f75764f6147c7815a0f6c19a7748b68ebb151cf39fe5506266ff243f0bd23e203fb31de0113975e3994295b82d6e6f210ca5be09713ac8a2f13326a41ca685e75aba0a7ed9102c418c98244699e5ca64f54a4afdd69143588287f56d9784de6a671adca03858e4e327f07a908eb75ea9c1bc0dae191cf3be3400d78b015834a6d07389bfd67530cb8ec1a886a0e4a65f0ee64c1f75a01d7dcc85c952cf28a82143fef077b29ebc32ce1743dbf70e3222444395263edecf4c95d8bbbca922258b1d6f0559df236786e9f7e1635456fe53eadf0c3173832a42855b6cea8ef2c53cb5c14d13f9a728048ea50c91dcc4489547cf25a6b6b32ad84a05a3421f2d8765ed47cb94129532cc4ff9ff26796aedfff21c6fdce4636ac6609e96406c32e669a319b820b7a4791d5357e579d8ba44e193c19ee87a308b0805f26cbf42125b6dfa10574f049ac53addd8e21cd5a7c75925cec069c13a64707461f208d85b134a3929ae440c513c157fd3346588afe2922e0e123350119c508ec70a2f6dea87ca9d0677e38e5669848a32090916f2ca475d22c7371789ec5b6319902283c669661ce1b68e6aca58fd3d0ca4f8733ee6397547153729219980cd5d54e42febd27898e1c8250ada282b40ff9b15d6e1fc46efb825a1d14d99c3a5a6c045d2c109b9b2e18ae2983414de6601533ae3a9303273520ec178cb4b2f910d9c5825be5415801ce77d0f8a717eea164b73724774239d3e70e694d9d70ba9f627f783f06eccf73be067d0696763507ce105ed7e4e52ca753c553ce6bf5a51f44733aa9fda986973f94522166410d0ade649c7c08a1af0bc7a63cc8ccd30911c8b1acffbd8beb09ab4e4d649501577460c79419ee9ce5f462d3e396cb3a304a4123037c6d022553bee236cd60525a3247f379dcd0b94604b1ff92e47096ac7b0d625afacda25015791a04743cb78f387503a185e2b6eb057ef8d2fae22eb85226a3c8d41995d4451f75d901e04c17137ede3ab7e959434968fd1320e985c3c287aac6e0b88ccca79780c17121928855e3d712a791018a00f010082a5b1d1642f6422538bca743173c9c160250e0946e4d9835667d0a8691533264bced7074795d2e495a7d291829288401a0c60b0f38b697c4e724449ac036d63eafaabeccecd576008a2baf4141799260c54fb4dff5e9613f7f32512678f2ab0085ceebe1673f005675f267752bc408d08ff590d3a90330475adfbdacb10779958411fb0a40d9668ac28089ce80776d4e2a27a06fafa2deafa8ca863f3e4245863f7de1b281fe3b159f93b05a4c78a2493e381d733a9ddabcd77060ff3d1b152dabbb44feaf58038852b9854886eabfbde6bb392bec987e2ec7fd3c75b6685477f3c7e93888b674bce234922aaac8a0e37ab83128e3521919f3852d5ef91a09f85f36d7c322580b13793ef3d0a568d6bcadba2eede0927d75149b54fcb56baf2e309a5cb569bc8f97f28e0698a313a4df063fa1806e2abb9c681feb249b834699da3d00667c3c13c3d583c073b26e605a7ffd901ee21f84b0938e53e5622e911f147749c4b8bb6bbc24c18a53f5f0c2a3a89cbc8d461f7624ceb72b3a5d3a2e566d00af3036287c6f4e47af316bb784802bfa4603d851373e6ea7ac312146ca3cb91fcdbfb322dd87ad52511e7fd39467ed808bec90e59ab81e4042bc22f2b56b1512412f3cec49da79625b6aab8b6979c3ac12b85f76ed1d77ee9e7aaa5acd558920ec846c109cfa9bc9229033999f22d845211b807b2f508d9c7a97dbaa5a84531065ad3546ad14e796d543d8131e7d3517c5103926f991f53029f94e9d3ad09edb738014845a528fa970991b2b44b10e7cb2703448f747814bd15000a027c4c88c03630818f19c55f5eb93bc1b44b7ba6dc65649534fbb55d60ec063c3778bb59d13d3152445bc6d3ad16b22fe44936ff50cb71251f0d13a2e471ca627547f91191035ea7469d1a1f7d05563e13bcf1c7910e7e6cded649493e26f6742f6342aeac733d84f51c2691ee9eeaab4a68f8c6effc3a815615cbaff78ca112bd31935d862f22b903b10aa85b66e812bc24560a6e6ea336c34a4ba370f0d712421ed8abfb75391c500af9d00bc1ff118a8f87d2a909c274abf44c5220961d2791fde9fb9f8a219bc91cfe33ef6c6107df399bc71839f4a100284844795125eed41c9397a1675693dae4b4a7b78b0e30e5b208cd8075f1992b22150cc1e270270a23778f7b53b26a805da7b14757c18a184a17dfab4e6b62131e5218354e4adc514a4ee9130e8ae5566c9f949a6b329397f2545e38bf465929a5958c23786d6d22c752eccab7674a1e9e35f40c6ea2f4b065bbf32997f60a511d2f08d1b6cd9a97b160c1ddf8c24f991c2e7550695dec89c7631bb09a9525c00e550bd044c1c3bd4bb07d532b77e14d2851d45526dbad4cf7cb6f165a812a2b509c8d6bf13a8af81304510d61c13afdc82ec69687bc5f5a54de8d1c290a5c9046f574a31de65bc5462174ae943be04d26d961640883567e00d5f2aa68988b374af0f26fa18b9c5e908abfea0bf8c94ea7be7e0b1409ec86704764c3275eb565b263ae9f6230ab164e441795d746fb58d4eeb735d51c0a1927b7d991236b656f99376f6ab51267326d8b1e2a7ea2c6336197bf6c62cf7cc434abcb4a26a0ea7e65cf92342f551640a1e01b9649f78c0e52a03c95b52b11a833bf1e13cdfbe6ce96b2f3190c78b560fcee7c296a197524167c7dc20d7881e613583d27328e074b5e799f515695856535213458f1ece97196e202228274a61cf44b0148d44096fe50cb46561f9950f536095c7264f1d7b735601982b23f5e37e9ea955f8bdea01147115ced9d0bebc29d037af049ae0f78c6d8e4138db920c4ce0d0160d925920618c6c0ee151b3098115e5c21dd119c4c41f34c5947b447b0a49af92e9d42cc038a5b3f6ed2365bfb5f2c32ea0c43bec06f826f708e83bb2a9e10ed11584bf2ff95270f4d430cbdf7f3234753c2bf24725ddd16dbcbbcf1a0de2493482f2fa2fe8ba611009251a38967cc4d3290ba7bdf330d872d32603ac8597f709187d322be135f722f05dc25451fc33a71c6388c346657fa5ada96910f78dc89ba94dc3c93763ea1cc0cd9d9cc34fc7b4ba217e473dae313fa93fa3d87b99369f39f5b168f1723057a9fefa77d6fe105c8a02e6f352454d7b5091449b6a13922e4687f52f4d64e41c0505cc70f98bbb89e21cb77cc3fbc61b64b8985b325b8c405857f7e0dcdc2b928d551766c754b503ce8ca72ba57ed1be7c9b25828537064a6b2f74cfcd8cf5f4d93c2bc5ac505985aefc830942250e1b71b3180a0c9ec385bf458e3f5b5e4357d56ea49015c02cf815d489919c9069b17d0a97abeddf5cdbfec4df67f73403cb867581b823b9e1eaf40e86e5abcf9a1351a7ed813d0cc9f749146202e32e19ce95ded76891c610547d8832bf79cda85474b0fe55cfce9546ded3b98256bd5b2af6d41d8fe8a9707086d6b0f9e2b359b148b899e0e78003691ec9c964a437d27334faa4adf77d529b3eb1b59693f53b8ba95b187db3c8df4c3c486ed05e8176de43dbe8546a51d629d0ddd93796154005f48d242da57d5d2fb2c2906c645cf1dc85bc0eebad46a01b5f26ee114ffcff53bad7b6e7ab78684348d7fb8d385ae433b711ab79e31afe2d9a89abe826cf242117ce1faa6356a5524298fe977a58f4e8eb306f42da444dc8209f3d1aadea9f7c33687af070e5d73a8b6ef4ea1e099f4a02311319c1d2a27aad1888a3862bfa9747caf18b01d24bcabe21cebf8b5ec58836b667a373003b69bc840069fb0a2522b7d19180499f9826d93cb72c12eac27d843f907e870444d272d01bdf5f282a18e6c5ee2a7231def262810599b343c463d663f1305cab532c75c587bd957ca9a69938a72944ee866b1871dd97cc8a172ce96caf6a7ae670fcb0c40cb435dd262487acebe0e133ed7f7693a7119a813101d2922ae77c6c311851300ace1a959c9b1b28958984e4e5d910108fe0837f53a852b44f8de5bbd4f2452ecb4ed285d534c4fbad158c754945b590b8f84c0aec2a26e33e19351fdf886ef915c193407458a0838ba19d6685a61f188019f7d87d2cd14bcf414526e8a5c6329a9a69f0c71be628b49850c81d0da921e7562f7b1fd3d3738f9edb5b58f9c7422a11e49a79373b4fc073413785faaf4ac45cc73e61fb905b61a6417598adfa63ce54bc7b9b40871cea7d5ee3df42975238121462f4b08e677e12e3531bd201e967b0684e56150ac4e42e3c26a39c40d8c86aebaf4b3e8470a138f0554303f34b30576574de8bdce8c27f390f2d4ecf6947637291081df9a53bd48951a37455278c89c5f4327ab96c7211677fd650e11a95ae05ed09d196bfd68c06d77f248bc6a622d5bf0bfd036b320255c508113bb3ff29cf49631910ad501767639e19228ec74f0d8c0fe1b74a11e497934e924bff65791e851df914ae6f38e83e82e4cd0e29cf16f62c370488327abaad69307dc2bfd2f44d237f2d91a197b24ff5b89654090d25549c37a2f31ef3f481ad9a92c5daa569d8826467aa919bb88fffa69aec64714766bb95640a4cd18b18b0231bee4dec5d5bc69e719a35ab50005e8c5b20f5bf3d0efa3c7a7ff37fe42e1edaf4d0a9f20e2ed78ccb7167582e788f5f21", @ANYRES8=0x0, @ANYRES16], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x20048884) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m30.183668542s ago: executing program 7 (id=1098): dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x5, 0x2d) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d80)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10000000000000}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m29.544525072s ago: executing program 7 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4, r2}) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x8000, @remote, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79a9, 0x3180, 0x3, 0x2af, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 2m29.488320343s ago: executing program 37 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x5}, 0x2804, 0x800, 0xaab7, 0x1, 0x400, 0x10001, 0x1, 0x0, 0x4, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300"], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3, 0x2, 0x5, 0x500, 0x2, 0x4, r2}) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e23, 0x8000, @remote, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79a9, 0x3180, 0x3, 0x2af, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 2m6.292990866s ago: executing program 9 (id=1405): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x5885, 0x80, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m4.74244484s ago: executing program 9 (id=1431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305010000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280080001006772650010000280040012"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) socket(0x11, 0x3, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m4.474600404s ago: executing program 9 (id=1434): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast1, @loopback, @remote, 0x5, 0x2, 0x5, 0x480, 0x86, 0x80}) 2m4.403628895s ago: executing program 9 (id=1436): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)=0x100000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = io_uring_setup(0x5f6f, &(0x7f0000000000)={0x0, 0x84bf, 0x40, 0x2, 0xfffffffc}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='io_uring_register\x00', r2, 0x0, 0x800}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000500)=[@ioring_restriction_sqe_op={0x1, 0x31a1ac19ea15b29b}], 0x1) 2m3.534395038s ago: executing program 9 (id=1456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000020000000400000005400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r2, &(0x7f00000002c0)={[0x4f3]}, 0x8) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) 2m3.503230119s ago: executing program 9 (id=1457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000001000021000000000037354206", @ANYRES32=r2, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c0129d14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m3.459562569s ago: executing program 38 (id=1457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000001000021000000000037354206", @ANYRES32=r2, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c0129d14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 3.087218503s ago: executing program 2 (id=2721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$x25(r3, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r9, 0x5509, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.65663103s ago: executing program 3 (id=2737): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES64, @ANYBLOB="4484e47f38234bd26686b8f4a70a6abe698c2e43d8136254da4d20e18f40bd04f60acd27877a9fdb8dd05c693238a820564c2925605b9c94db60688ac253a5f836bd347d2272d2c76091bafcb16777db9f112649f04754d35261e4540e27cb8b4c4de7e2ad4d47cff4d2af0c471b4d3f66b4fec6909effd52fd712ce0a7014a18bb9210a54e92ebc299ebf6849836de35609c2e3de6a1fca3bc903049a80d6e571cc3d5c120b1a8ff63dd94c1f1d145616e3df4bda6fcf2fe78a8ab21e2a9c445ad021524b3adccadc6a91591eae1cf1d826", @ANYRESOCT], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x23, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) mmap(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r3, 0x8cdee000) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000340)='./file1/file0\x00', 0x2221084, &(0x7f0000000c00)={[{@block_validity}, {@data_writeback}, {@nodioread_nolock}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize}, {@lazytime}, {@init_itable}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@errors_remount}, {@journal_checksum}, {@dax_always}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) 2.158070717s ago: executing program 3 (id=2738): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x60044884) 2.136223007s ago: executing program 1 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/81, 0x2b) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x200009d4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)=""/36, 0x24}], 0x2, 0xa, 0xfffffff9) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x44) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000002060c000300686173f3683a69700005000100870000000c00078008000600000000000900020073797a3200000080050005000200000005000400000000000000000000000000000000ba5c"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x91, &(0x7f00000003c0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x83, 0x0, 0xe000, 0x6, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0x6f, 0x0, @opaque="44b109cfc2a858af194a4ac3db8bad8ccb7f1d73db046f75e86561ec40317194403121d78d6677ef6efcc0404eb3574d691b8ef5dd9337789151be916a1b9f161f2ecafcfa55d49620e365a54b886a5733d86f287205e665d0cc3caa90808a72d5feb6d54f3aa3"}}}}}, 0x0) 2.119497208s ago: executing program 2 (id=2740): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x11, 0x1, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) 2.023734109s ago: executing program 3 (id=2741): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x97e1}, 0x4210, 0xc8, 0x0, 0x1, 0xff, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x5, 0x5, 0x1, 0x0, 0x0, 0x1, 0x40000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, @perf_config_ext={0x7, 0x1}, 0x6010, 0x100000001, 0xe4e520d, 0x4, 0x6, 0x8c9, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='kfree\x00', r1, 0x0, 0x10000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r0) 1.98149135s ago: executing program 3 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee00, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001800fd032abd7000fedbdf251d01"], 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="fecc4118df2ead85c083c3a1c1a88db34a2f16476b6d8761d426e064d94c139394e56a91e32aed688681c16535b0ebe07caea623dd36eed1d45db0c9db1a45b9d182681d96e95e0c335955851b54839aca38d5401c9ab54af8d74154ce0125c97c9b289d83ec100cfe4f9b011a13b22df94b4fd6c72255b7a577d657e747bd001bf97dc279f84339af16e4261abf25707f304bc88e596a973330ca56d9233640f682f5a4294f2b3cdeefe661ca18df2f6208830d25695cdac071b4fe25129efe04e921a45c000baf8f7bdc60798b211dcd2a23f6b539eee5137b40319e851f14", @ANYRESDEC=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES16, @ANYRES32], 0x50, 0x24040094}, 0x80) syz_clone3(&(0x7f0000000e00)={0x1000000, &(0x7f0000000a40), 0x0, &(0x7f0000000c00), {0x8033}, &(0x7f0000000c80)=""/191, 0xbf, &(0x7f0000001d80)=""/4096, &(0x7f0000000dc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58) fstat(r8, &(0x7f0000000e80)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)={0x18, 0x11, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000000800)=ANY=[@ANYBLOB="180200003b00000227bd7000fbdbdf25040087000c006b0000000000000000000800d10001000000371c1d55c75cc2c9d6b2ddaa859564d044d977a9af0241323ff790034e5521324a7f4cb7b51a21e22d9d6bf53fd493c9988fa3c4712535cec4a034d30b0aab462ef237648774163b1a3b700ff0476b2858fadfc0d9350fd53075b7d3fe152a63da2c28d221b45e46be0beb2e8b1aa214067a334f5be924b21a1445989eae4faee42c940476e9df973b5606cdc15e70f5a0ea5061c28e454b252ebcabc18c8d5e162d45fa170f45a8c0e3835ea6c407fe979cc3e019a5a27944227e6b3a3557108ace933b9528e6d17e70d34424940a2c159f1aad6949a3453da01464238fbc414bc69abbc1c23b76b56d7bbc4c3e06bf2bc851ab337644f3e5fa8e4b332a610034d4280981ea9ce23180564297cc05e87da3864fdf1f0b4ac4007e41cd3b033e4bc022eb7b8af7458756160a5274d46c67b47cbf896a4365cc95294b86b3f337d6485519a3cff1745c7fd28f3b93bad48bc72caea673d8e39ffeb6821833e5c514d0cda2c5ff3c3a9dd1222fff94a2e2e5dfedabd532716ca396e928d0cf27b23a82dd15fcd12d6b474751a46c723bc6882e193e98df0bcc8583493ac23e3b58ae7b65d80b79393fd3af999f78586dbb8742721a7efc1b84498883bcf7e3884a2358d4aa342d5c4bbebce3804c7ad30ee50f8151e981cd34b0670926eb7ec5f6c5037bde2d512deeb22de0fcf573b160"], 0x218}], 0x2, &(0x7f0000001040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r7, r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r8, r10, r4, r3]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c}}], 0x80, 0x8000}, 0x80) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYBLOB="02000400", @ANYRES64=r8, @ANYBLOB="0200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r9, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="100004000000000020000000000000"], 0x94, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r14) getgroups(0x6, &(0x7f0000000c40)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01]) r16 = getgid() setxattr$system_posix_acl(&(0x7f0000000640)='./file0/file0/../file0\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x4}, [], {0x4, 0x5}, [{0x8, 0x4}, {}, {}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r16}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x2) getgroups(0x6, &(0x7f0000000100)=[0xee01, r11, 0x0, r12, r13, r16]) getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, r2, r13, r17]) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000040321010100000000000000000a000003050019800800020009090000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 1.858771032s ago: executing program 3 (id=2744): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0) 1.807056333s ago: executing program 3 (id=2745): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) 1.726675844s ago: executing program 8 (id=2747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x91, &(0x7f00000003c0)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x83, 0x0, 0xe000, 0x6, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0x6f, 0x0, @opaque="44b109cfc2a858af194a4ac3db8bad8ccb7f1d73db046f75e86561ec40317194403121d78d6677ef6efcc0404eb3574d691b8ef5dd9337789151be916a1b9f161f2ecafcfa55d49620e365a54b886a5733d86f287205e665d0cc3caa90808a72d5feb6d54f3aa3"}}}}}, 0x0) (fail_nth: 1) 1.619712676s ago: executing program 8 (id=2748): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3mb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7mQmfZtJpppkIPP7wZ15zr03ec6ZCeeBnGFOAAPrZPmQRjwfEdNJxFjrfBIRlWY0FHFp+747t2/OlUcSW1tX/kia95TtuO9nSiciYjMinouInyoRp9NH89bWN5Zn8zxba7Un6iurE7X1jTNLK7OL2WJ27eK5c1PnLpy/eHH/xvrG+x88Wz3/zuj30wszpyZ//S6JSzHaunb/OPbT9mtSKV/CB7x7EMn6KOl3B/hXhiLiWOv5mRiLY80IADjKtoYjtgCAAZOo/wAwYNr/B2iv7R3UOlg3v78dESOd8g+11sxGmuuQx+8kD6xMJBExfpgd5UjavBURV8dPPvr3lzyyZvu4zu5HBzlQP5bzz6VO80+6M/9Eh/lnpP3Zif+o+/x3L/+xLvPfdI853nuxUXTNfyvihaFO+ZOd/EmX/Fd7zP/D3fm/u13b+jbitY71J3kgV/fPh0wsLOXZ2e3HzjlONm5+uNv4j3fJv7nH+Fd7HP/oZy//vLlL/tdf2f3975S/rImf9pj/k8pbX3S7Vuaf7zL+vd7/b3rMf+GljzZ6vBUAAAAAAAAAAAAAAAAAAAAAAAAAAACOhDQiRiNJqztxmlar23t4Px3H07yo1U8vFI1r89HcK3s8Kmn7q5bHtttJ2Z5sfR9/uz31UPvNiHgqIj4f/n+zXZ0r8vl+Dx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWk48tP//X8Pb+/8DAEfcSL87AAAcOvUfAAaP+g8Ag0f9B4DBo/4DwOBR/wFg8Kj/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByy6cuXy2Przu2bc2V7/vp6Y7m4fmY+qy1XVxpz1blibbW6WBSLeVadK1b2+n15UaxOTUXjxkQ9q9UnausbMytF41p9ZmlldjGbySqHMioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDyjzSNJqxGRNuM0rVYjnoiI8agkC0t5djYinoyIX4Yrw2V7st+dBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9VlvfWJ7N82xNIBAIdoJ+z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+O5t+t3vngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP6W/JRFRHqfGXh19+Or/krvDzeeI+PjrK1/emK3X1ybL83/unK9/1To/1Y/+AwB7adfpdh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE5q6xvLs3merR1g0O8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwf/4JAAD//68fzsc=") 1.354263509s ago: executing program 8 (id=2750): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") 1.009841845s ago: executing program 8 (id=2752): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_clone3(&(0x7f00000005c0)={0x2083a00, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000380), {0x3}, &(0x7f0000000400)=""/7, 0x7, &(0x7f0000000440)=""/44, &(0x7f0000000540)=[r0, r1], 0x2, {r2}}, 0x58) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x1e, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x59fd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000d1a01010025bd7000000000000a000000000000000000000005001b003a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x27) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = eventfd2(0x0, 0x0) readv(r9, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x10, 0x800000000080002, 0x2) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x165200, 0x20, 0x10}, 0x18) move_mount(r11, &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10) 948.936855ms ago: executing program 1 (id=2755): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 942.281326ms ago: executing program 1 (id=2756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x248) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=r9, @ANYRESHEX=r3], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7101090103020607037efd0930ea56ccf61cab1d033eff0401eb"], 0x1a) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r13}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r4) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r14}, 0x2c, {[{@cache_none}, {@directio}, {@version_L}, {@access_user}]}}) 852.668238ms ago: executing program 5 (id=2758): r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") futimesat(r0, 0x0, 0x0) 758.546059ms ago: executing program 5 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x7, 0x0, 0x1, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) futimesat(r2, &(0x7f0000000000)='./file1\x00', 0x0) 719.65898ms ago: executing program 5 (id=2760): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r2, &(0x7f00000002c0)={[0x4f3]}, 0x8) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="e056f2b3", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf255d0000004000a6800a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000800a50000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4810}, 0xc015) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 661.018181ms ago: executing program 5 (id=2761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) vmsplice(r0, 0x0, 0x0, 0xa) 640.019791ms ago: executing program 5 (id=2762): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x80000000000, 0x42071, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1030, 0x8, 0x3, 0x0, 0x2004, 0x1088f105, 0xe9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000da7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) sysinfo(&(0x7f0000000000)=""/35) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x3}, 0x18) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwrite64(r7, &(0x7f00000020c0)="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", 0x1000, 0x3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01030000b000000000001c00000018000180146864d30812fa0600020076657468300000000000000000000000a847f5e32ab9865ab6ce4bc8f22141606912f0bd31a257f273dab20f4203525e6af1994f20045c68aceffa90f488f357381e740900000000000000d35aa6df1c4b9451921de8d4ea575c31757d31cc94081565daf6b8849456b057df1c2e8c6710017cceee70c83494bdb0e0fcf02deecb8b66ad35b67e1fcab58c5bb57f7b5eef84483a0ad802cf1d449eca91dcde0ef1b3f348a6416a3e83a837be41a56b6defab3eaf8a58a91554b295ecdbe3c4166a7b"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) r9 = socket$rds(0x15, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x20000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}], [{@smackfsroot={'smackfsroot', 0x3d, 'debug'}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) unshare(0x4040600) 443.135734ms ago: executing program 2 (id=2763): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") 424.041024ms ago: executing program 2 (id=2764): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r2, &(0x7f00000002c0)={[0x4f3]}, 0x8) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="e056f2b3", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf255d0000004000a6800a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000800a50000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4810}, 0xc015) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 374.218305ms ago: executing program 2 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x16c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x144, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x800, 0x8000002, 0x51}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @remote}, "dd9dec79219eb5499325e16c"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r7, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtaction={0x90c, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x8f8, 0x1, [@m_police={0x880, 0x3ffe, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x9742, 0xffff0000, 0x3ff0000, 0x7, 0x0, 0x9, 0xf, 0x8, 0x6, 0x2, 0x277f, 0x3f, 0x2, 0x100, 0x3, 0x4, 0x3, 0xb, 0xffffffff, 0x7, 0x7, 0x5, 0xfffffff9, 0x1, 0x7ff, 0xe623, 0x3, 0x0, 0x0, 0xfffffff7, 0xffff, 0xf5, 0x6, 0x10000, 0x65af49fb, 0x798, 0x200, 0x800, 0x4, 0x7d, 0x9, 0x7, 0x1, 0x6, 0x8001, 0x10000, 0x1000, 0x7, 0xfffffffa, 0xfffffe00, 0x0, 0x100, 0x101, 0x2, 0x10, 0x8, 0x0, 0x101, 0x6, 0x10, 0x9, 0x8000, 0x7ff, 0x2, 0x7, 0x90ce, 0x59, 0x6, 0x0, 0xddea, 0x5, 0x7, 0x5074, 0x2, 0xffffffff, 0x10000, 0xe00, 0x8001, 0x4, 0x0, 0x6, 0x3, 0x15, 0x9, 0x6129, 0x10200, 0xb8f, 0x60000000, 0x3, 0xfff, 0x400, 0xffff, 0xe, 0x1, 0x2, 0x1, 0xf, 0xcbe6, 0x8001, 0x14b27114, 0xfffff800, 0xd, 0x4, 0x3, 0x7, 0xfffffff7, 0xe0, 0x0, 0x6, 0x75f, 0x3, 0x8, 0x5, 0x3, 0xffffffff, 0x80000001, 0x8, 0x1, 0x8, 0xfffffffc, 0x3ff, 0x60000000, 0x3ff, 0x6, 0x4, 0x1, 0x6, 0x401, 0x4, 0x3b9, 0x7ff, 0x6, 0x0, 0xd8f, 0x6, 0x0, 0x507, 0x6, 0x1, 0x0, 0x7, 0x3, 0x213e, 0x6, 0x98cc, 0x10000, 0x7ff, 0xd0, 0x1ff, 0x1, 0x0, 0x7, 0x0, 0x3, 0x1, 0x8, 0x3, 0x3, 0xd, 0x8, 0xfa, 0x6, 0x3, 0x7, 0x101, 0x7, 0x6, 0x4, 0x9, 0x4, 0x1, 0x7f, 0xffff, 0x985, 0x1, 0x4, 0x6, 0x7ff, 0xfffffffb, 0xfffffff9, 0x0, 0x0, 0xfffffffb, 0x5, 0x5, 0x7fff, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x7ff, 0x3, 0x101, 0x7, 0x5, 0x800, 0x7, 0x5, 0x3, 0x9ebf, 0x4, 0x6, 0x0, 0x81, 0x3a9e258c, 0xd, 0xfff, 0xfffffff8, 0x9, 0x0, 0x4, 0x0, 0xb, 0x8, 0xaa, 0x9, 0x101, 0x3, 0x3, 0x3, 0x3fc00000, 0x4, 0x5, 0x9, 0x641, 0x3, 0x0, 0x101, 0xea80, 0x7, 0x2, 0x0, 0x1ff, 0x1, 0x1, 0x8, 0x0, 0x9, 0x4, 0x101, 0x4, 0x0, 0x7, 0x5, 0xfffffffa, 0xfffffffc, 0xbef5, 0x4, 0x2, 0xaa77, 0x6, 0x9, 0xa1, 0x8000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5, 0x4, 0x7f, 0xffff, 0x2, 0x3, 0xd, 0x22, 0x9a, 0x2, 0x1, 0x0, 0x8, 0x1ff, 0x6, 0x3, 0xf8, 0x7, 0x4, 0x2, 0x3, 0xee, 0x7fffffff, 0x2a, 0x7, 0x9, 0x964, 0xa5d5, 0x6, 0x3, 0x3dcc00, 0xfffffff1, 0xfffffffa, 0x1, 0xb6, 0x6, 0xe, 0x7fffffff, 0x80000000, 0xf1, 0x7, 0x8, 0x7, 0xffffffff, 0xffffff81, 0x40000000, 0x8, 0x4, 0x9, 0xc000, 0x8, 0x6d, 0x8, 0x2, 0x8, 0x0, 0x9, 0xbe, 0x8, 0x9a3, 0x7fff, 0x2dc, 0x7ff, 0x2, 0x80000000, 0x100, 0x8e, 0x81, 0xe69, 0x80, 0x46e5, 0x3, 0x1ff, 0x30, 0xf1, 0x400, 0x5c9a3fb8, 0xe, 0x0, 0x1, 0xf2a, 0x5, 0x200, 0x1, 0x2, 0x7, 0x9, 0x10000, 0x7, 0x7, 0x20393f42, 0x9, 0x9e4, 0x9, 0x3, 0x7, 0x6, 0x9, 0x6, 0x9, 0x3, 0xfffffffd, 0x9, 0x2, 0x5, 0x0, 0x76b6, 0x8000, 0x6f27, 0xfa8, 0xfffffffb, 0x1, 0x8, 0x3, 0xd7, 0x0, 0x200, 0x5, 0x7, 0x2, 0x6f, 0x6, 0x4, 0x91f6, 0x7, 0xcb9, 0x8, 0x5, 0x3, 0x3, 0x4, 0x1, 0xbdf, 0x40, 0xf, 0x3, 0x10001, 0x8, 0xde, 0x6c, 0x0, 0x1, 0xfffffbff, 0x5, 0x4, 0x2, 0xfffffffc, 0x4, 0x3, 0x3, 0xfff, 0x5, 0xfffff086, 0x80, 0x73afaeb, 0x3, 0x2ff, 0x7fff, 0x6, 0x4e, 0x1, 0x2fd, 0x101, 0x8da, 0x10, 0x0, 0x2, 0xfffffeff, 0x400, 0x569f, 0x7, 0xae6, 0x200, 0x800, 0x3, 0x5, 0x6, 0x3, 0xfffffff9, 0x2, 0xde, 0xff, 0x0, 0x2119, 0x2, 0x6, 0x0, 0x1d, 0x3, 0x1, 0x7f, 0x81, 0x0, 0x5, 0x4, 0xfffffff7, 0x4, 0x1, 0xc83, 0x7, 0x8, 0x7, 0x7, 0x5, 0x5, 0x5, 0x100, 0x7, 0xb, 0x1, 0x6, 0x8, 0xa, 0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x8, 0x4, 0x80000001, 0x1235, 0x3, 0xfae, 0x0, 0x3, 0x6, 0x8, 0x1, 0x10000, 0x9, 0x7ff, 0x3, 0x0, 0x0, 0x10001, 0x2, 0x3, 0xfffffff8, 0x9, 0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x92, 0x0, 0x7b, 0x9, 0x100, 0x951f, 0x10000]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90c}}, 0x0) 163.473628ms ago: executing program 8 (id=2766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x16c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x144, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x286f, 0x800, 0x8000002, 0x51}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @remote}, "dd9dec79219eb5499325e16c"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r7, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtaction={0x90c, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x8f8, 0x1, [@m_police={0x880, 0x3ffe, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x4, 0x0, 0x2, {}, {0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x9742, 0xffff0000, 0x3ff0000, 0x7, 0x0, 0x9, 0xf, 0x8, 0x6, 0x2, 0x277f, 0x3f, 0x2, 0x100, 0x3, 0x4, 0x3, 0xb, 0xffffffff, 0x7, 0x7, 0x5, 0xfffffff9, 0x1, 0x7ff, 0xe623, 0x3, 0x0, 0x0, 0xfffffff7, 0xffff, 0xf5, 0x6, 0x10000, 0x65af49fb, 0x798, 0x200, 0x800, 0x4, 0x7d, 0x9, 0x7, 0x1, 0x6, 0x8001, 0x10000, 0x1000, 0x7, 0xfffffffa, 0xfffffe00, 0x0, 0x100, 0x101, 0x2, 0x10, 0x8, 0x0, 0x101, 0x6, 0x10, 0x9, 0x8000, 0x7ff, 0x2, 0x7, 0x90ce, 0x59, 0x6, 0x0, 0xddea, 0x5, 0x7, 0x5074, 0x2, 0xffffffff, 0x10000, 0xe00, 0x8001, 0x4, 0x0, 0x6, 0x3, 0x15, 0x9, 0x6129, 0x10200, 0xb8f, 0x60000000, 0x3, 0xfff, 0x400, 0xffff, 0xe, 0x1, 0x2, 0x1, 0xf, 0xcbe6, 0x8001, 0x14b27114, 0xfffff800, 0xd, 0x4, 0x3, 0x7, 0xfffffff7, 0xe0, 0x0, 0x6, 0x75f, 0x3, 0x8, 0x5, 0x3, 0xffffffff, 0x80000001, 0x8, 0x1, 0x8, 0xfffffffc, 0x3ff, 0x60000000, 0x3ff, 0x6, 0x4, 0x1, 0x6, 0x401, 0x4, 0x3b9, 0x7ff, 0x6, 0x0, 0xd8f, 0x6, 0x0, 0x507, 0x6, 0x1, 0x0, 0x7, 0x3, 0x213e, 0x6, 0x98cc, 0x10000, 0x7ff, 0xd0, 0x1ff, 0x1, 0x0, 0x7, 0x0, 0x3, 0x1, 0x8, 0x3, 0x3, 0xd, 0x8, 0xfa, 0x6, 0x3, 0x7, 0x101, 0x7, 0x6, 0x4, 0x9, 0x4, 0x1, 0x7f, 0xffff, 0x985, 0x1, 0x4, 0x6, 0x7ff, 0xfffffffb, 0xfffffff9, 0x0, 0x0, 0xfffffffb, 0x5, 0x5, 0x7fff, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x7ff, 0x3, 0x101, 0x7, 0x5, 0x800, 0x7, 0x5, 0x3, 0x9ebf, 0x4, 0x6, 0x0, 0x81, 0x3a9e258c, 0xd, 0xfff, 0xfffffff8, 0x9, 0x0, 0x4, 0x0, 0xb, 0x8, 0xaa, 0x9, 0x101, 0x3, 0x3, 0x3, 0x3fc00000, 0x4, 0x5, 0x9, 0x641, 0x3, 0x0, 0x101, 0xea80, 0x7, 0x2, 0x0, 0x1ff, 0x1, 0x1, 0x8, 0x0, 0x9, 0x4, 0x101, 0x4, 0x0, 0x7, 0x5, 0xfffffffa, 0xfffffffc, 0xbef5, 0x4, 0x2, 0xaa77, 0x6, 0x9, 0xa1, 0x8000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5, 0x4, 0x7f, 0xffff, 0x2, 0x3, 0xd, 0x22, 0x9a, 0x2, 0x1, 0x0, 0x8, 0x1ff, 0x6, 0x3, 0xf8, 0x7, 0x4, 0x2, 0x3, 0xee, 0x7fffffff, 0x2a, 0x7, 0x9, 0x964, 0xa5d5, 0x6, 0x3, 0x3dcc00, 0xfffffff1, 0xfffffffa, 0x1, 0xb6, 0x6, 0xe, 0x7fffffff, 0x80000000, 0xf1, 0x7, 0x8, 0x7, 0xffffffff, 0xffffff81, 0x40000000, 0x8, 0x4, 0x9, 0xc000, 0x8, 0x6d, 0x8, 0x2, 0x8, 0x0, 0x9, 0xbe, 0x8, 0x9a3, 0x7fff, 0x2dc, 0x7ff, 0x2, 0x80000000, 0x100, 0x8e, 0x81, 0xe69, 0x80, 0x46e5, 0x3, 0x1ff, 0x30, 0xf1, 0x400, 0x5c9a3fb8, 0xe, 0x0, 0x1, 0xf2a, 0x5, 0x200, 0x1, 0x2, 0x7, 0x9, 0x10000, 0x7, 0x7, 0x20393f42, 0x9, 0x9e4, 0x9, 0x3, 0x7, 0x6, 0x9, 0x6, 0x9, 0x3, 0xfffffffd, 0x9, 0x2, 0x5, 0x0, 0x76b6, 0x8000, 0x6f27, 0xfa8, 0xfffffffb, 0x1, 0x8, 0x3, 0xd7, 0x0, 0x200, 0x5, 0x7, 0x2, 0x6f, 0x6, 0x4, 0x91f6, 0x7, 0xcb9, 0x8, 0x5, 0x3, 0x3, 0x4, 0x1, 0xbdf, 0x40, 0xf, 0x3, 0x10001, 0x8, 0xde, 0x6c, 0x0, 0x1, 0xfffffbff, 0x5, 0x4, 0x2, 0xfffffffc, 0x4, 0x3, 0x3, 0xfff, 0x5, 0xfffff086, 0x80, 0x73afaeb, 0x3, 0x2ff, 0x7fff, 0x6, 0x4e, 0x1, 0x2fd, 0x101, 0x8da, 0x10, 0x0, 0x2, 0xfffffeff, 0x400, 0x569f, 0x7, 0xae6, 0x200, 0x800, 0x3, 0x5, 0x6, 0x3, 0xfffffff9, 0x2, 0xde, 0xff, 0x0, 0x2119, 0x2, 0x6, 0x0, 0x1d, 0x3, 0x1, 0x7f, 0x81, 0x0, 0x5, 0x4, 0xfffffff7, 0x4, 0x1, 0xc83, 0x7, 0x8, 0x7, 0x7, 0x5, 0x5, 0x5, 0x100, 0x7, 0xb, 0x1, 0x6, 0x8, 0xa, 0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x8, 0x4, 0x80000001, 0x1235, 0x3, 0xfae, 0x0, 0x3, 0x6, 0x8, 0x1, 0x10000, 0x9, 0x7ff, 0x3, 0x0, 0x0, 0x10001, 0x2, 0x3, 0xfffffff8, 0x9, 0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0x92, 0x0, 0x7b, 0x9, 0x100, 0x951f, 0x10000]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x90c}}, 0x0) 85.198589ms ago: executing program 1 (id=2767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 84.057219ms ago: executing program 5 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$x25(r3, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r9, 0x5509, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 61.863169ms ago: executing program 2 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$x25(r3, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf1, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r9, 0x5509, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 55.671959ms ago: executing program 8 (id=2770): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305010000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800800010067726500100002800400120005001300b6e9e559"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) socket(0x11, 0x3, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 602.97µs ago: executing program 1 (id=2771): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0) 0s ago: executing program 1 (id=2772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = signalfd(r2, &(0x7f00000002c0)={[0x4f3]}, 0x8) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="e056f2b3", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf255d0000004000a6800a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000800a50000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4810}, 0xc015) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 77074][T12005] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 238.597318][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.672940][T12028] loop3: detected capacity change from 0 to 512 [ 238.717325][ T7159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.739077][T12029] loop1: detected capacity change from 0 to 1024 [ 238.767132][T12031] loop8: detected capacity change from 0 to 1024 [ 239.056223][T12036] SELinux: policydb magic number 0x9cea6000 does not match expected magic number 0xf97cff8c [ 239.074553][T12036] SELinux: failed to load policy [ 239.222038][T12047] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2366'. [ 239.242530][T12047] siw: device registration error -23 [ 239.634063][T12028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.649275][T12029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.689893][T12028] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.723998][T12054] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 239.730579][T12054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.738143][T12054] vhci_hcd vhci_hcd.0: Device attached [ 239.752133][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 239.752151][ T29] audit: type=1400 audit(2000000111.370:38128): avc: denied { setattr } for pid=12027 comm="syz.3.2362" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.869201][T12054] loop5: detected capacity change from 0 to 164 [ 239.884875][T12055] vhci_hcd: connection closed [ 239.885039][ T3534] vhci_hcd: stop threads [ 239.894199][ T3534] vhci_hcd: release socket [ 239.898622][ T3534] vhci_hcd: disconnect device [ 239.908391][T12028] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2362: corrupted inode contents [ 239.934448][T12028] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2362: mark_inode_dirty error [ 239.965521][T12028] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2362: corrupted inode contents [ 239.977140][ T29] audit: type=1400 audit(2000000111.500:38129): avc: denied { getopt } for pid=12053 comm="syz.5.2368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.993196][T12057] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2362: corrupted inode contents [ 239.997931][ T29] audit: type=1400 audit(2000000111.600:38130): avc: denied { create } for pid=12027 comm="syz.3.2362" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.023628][T12057] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2362: mark_inode_dirty error [ 240.042337][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.081772][T12063] netlink: 'syz.1.2370': attribute type 4 has an invalid length. [ 240.092966][T12062] netem: change failed [ 240.093516][T12057] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2362: corrupted inode contents [ 240.120111][T12057] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2362: mark_inode_dirty error [ 240.132035][T12057] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.2362: corrupted inode contents [ 240.144265][T12057] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.2362: mark_inode_dirty error [ 240.174219][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.218213][ T29] audit: type=1326 audit(2000000111.840:38131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.246354][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2375'. [ 240.255826][T12072] x_tables: ip_tables: udp match: only valid for protocol 17 [ 240.263465][ T29] audit: type=1326 audit(2000000111.870:38132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.287178][ T29] audit: type=1326 audit(2000000111.870:38133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.310830][ T29] audit: type=1326 audit(2000000111.870:38134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.334528][ T29] audit: type=1326 audit(2000000111.870:38135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.358197][ T29] audit: type=1326 audit(2000000111.870:38136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.382018][ T29] audit: type=1326 audit(2000000111.870:38137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12071 comm="syz.1.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 240.544584][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2378'. [ 240.574496][ T3549] nci: nci_rsp_packet: unknown rsp opcode 0x101 [ 240.616791][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2379'. [ 240.636167][T12092] x_tables: ip_tables: udp match: only valid for protocol 17 [ 240.745682][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2380'. [ 240.763333][T12093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 240.769969][T12093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.777734][T12093] vhci_hcd vhci_hcd.0: Device attached [ 240.840786][T12100] loop5: detected capacity change from 0 to 2048 [ 240.883632][T12100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.913909][T12100] EXT4-fs (loop5): shut down requested (0) [ 240.924853][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 240.933827][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 240.947128][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 240.965271][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 240.985092][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 241.004459][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 241.022052][T12100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 241.053186][ T3387] usb 8-1: SetAddress Request (6) to port 0 [ 241.059211][ T3387] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 241.078347][T12098] vhci_hcd: connection closed [ 241.078501][ T3726] vhci_hcd: stop threads [ 241.087544][ T3726] vhci_hcd: release socket [ 241.092123][ T3726] vhci_hcd: disconnect device [ 241.098781][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.104659][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.113282][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.223572][ T3387] usb 8-1: new SuperSpeed USB device number 6 using vhci_hcd [ 241.243324][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.248987][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.256884][ T3387] usb 8-1: enqueue for inactive port 0 [ 241.312868][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.313620][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 241.360321][T12110] bond1: entered promiscuous mode [ 241.365521][T12110] bond1: entered allmulticast mode [ 241.371109][T12110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.381654][T12110] bond1 (unregistering): Released all slaves [ 241.416761][T12116] loop1: detected capacity change from 0 to 1024 [ 241.437667][T12112] netlink: 'syz.5.2382': attribute type 4 has an invalid length. [ 241.496668][T12121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2386'. [ 241.520572][T12124] random: crng reseeded on system resumption [ 241.619726][T12123] loop1: detected capacity change from 0 to 1024 [ 241.739788][T12130] netlink: 'syz.5.2390': attribute type 4 has an invalid length. [ 241.765193][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2389'. [ 242.014955][T12140] SELinux: policydb magic number 0xffffffc3 does not match expected magic number 0xf97cff8c [ 242.089398][T12140] SELinux: failed to load policy [ 242.129276][T12152] FAULT_INJECTION: forcing a failure. [ 242.129276][T12152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.142546][T12152] CPU: 0 UID: 0 PID: 12152 Comm: syz.1.2397 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 242.142580][T12152] Tainted: [W]=WARN [ 242.142589][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.142604][T12152] Call Trace: [ 242.142611][T12152] [ 242.142618][T12152] __dump_stack+0x1d/0x30 [ 242.142640][T12152] dump_stack_lvl+0xe8/0x140 [ 242.142659][T12152] dump_stack+0x15/0x1b [ 242.142739][T12152] should_fail_ex+0x265/0x280 [ 242.142839][T12152] should_fail+0xb/0x20 [ 242.142867][T12152] should_fail_usercopy+0x1a/0x20 [ 242.142973][T12152] _copy_to_user+0x20/0xa0 [ 242.142996][T12152] simple_read_from_buffer+0xb5/0x130 [ 242.143029][T12152] proc_fail_nth_read+0x100/0x140 [ 242.143098][T12152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.143139][T12152] vfs_read+0x1a0/0x6f0 [ 242.143253][T12152] ? __rcu_read_unlock+0x4f/0x70 [ 242.143284][T12152] ? __fget_files+0x184/0x1c0 [ 242.143311][T12152] ksys_read+0xda/0x1a0 [ 242.143352][T12152] __x64_sys_read+0x40/0x50 [ 242.143408][T12152] x64_sys_call+0x2d77/0x2fb0 [ 242.143430][T12152] do_syscall_64+0xd2/0x200 [ 242.143511][T12152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.143537][T12152] ? clear_bhb_loop+0x40/0x90 [ 242.143566][T12152] ? clear_bhb_loop+0x40/0x90 [ 242.143588][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.143665][T12152] RIP: 0033:0x7f96fa13d33c [ 242.143682][T12152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.143700][T12152] RSP: 002b:00007f96f87a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.143730][T12152] RAX: ffffffffffffffda RBX: 00007f96fa365fa0 RCX: 00007f96fa13d33c [ 242.143744][T12152] RDX: 000000000000000f RSI: 00007f96f87a70a0 RDI: 0000000000000004 [ 242.143759][T12152] RBP: 00007f96f87a7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.143771][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.143782][T12152] R13: 0000000000000000 R14: 00007f96fa365fa0 R15: 00007ffc3a45ca38 [ 242.143817][T12152] [ 242.403322][ T3387] usb usb8-port1: attempt power cycle [ 242.480247][T12154] bond6: entered promiscuous mode [ 242.485371][T12154] bond6: entered allmulticast mode [ 242.517512][T12154] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.558761][T12154] bond6 (unregistering): Released all slaves [ 242.599817][ T3514] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 242.656920][T12156] loop2: detected capacity change from 0 to 1024 [ 242.832593][T12166] loop2: detected capacity change from 0 to 1024 [ 243.043098][T12172] loop8: detected capacity change from 0 to 1024 [ 243.064864][T12172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.091315][T12179] loop3: detected capacity change from 0 to 1024 [ 243.104750][T12179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.153803][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.517122][T12194] bond1: entered promiscuous mode [ 243.522219][T12194] bond1: entered allmulticast mode [ 243.527953][T12194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.539185][T12194] bond1 (unregistering): Released all slaves [ 243.549358][T12196] lo speed is unknown, defaulting to 1000 [ 243.561164][T12202] loop1: detected capacity change from 0 to 1024 [ 243.612353][T12205] binfmt_misc: register: failed to install interpreter file ./file2 [ 243.732350][T12217] loop1: detected capacity change from 0 to 1024 [ 243.764607][ T7159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.777961][T12220] loop2: detected capacity change from 0 to 1024 [ 243.799395][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2416'. [ 243.817391][T12220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.890546][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.915374][T12232] bond1: entered promiscuous mode [ 243.920526][T12232] bond1: entered allmulticast mode [ 243.927182][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 243.936314][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 243.945731][T12232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.963254][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 243.975181][T12232] bond1 (unregistering): Released all slaves [ 243.996720][T12237] netlink: 'syz.2.2419': attribute type 4 has an invalid length. [ 244.036463][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.045433][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.054612][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.075284][T12226] loop1: detected capacity change from 0 to 1024 [ 244.106316][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.115324][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.131099][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 244.155490][T12243] lo speed is unknown, defaulting to 1000 [ 244.228587][T12251] FAULT_INJECTION: forcing a failure. [ 244.228587][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 244.235371][ T3387] usb usb8-port1: unable to enumerate USB device [ 244.241305][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.5.2424 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 244.241356][T12251] Tainted: [W]=WARN [ 244.241365][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.241393][T12251] Call Trace: [ 244.241404][T12251] [ 244.241415][T12251] __dump_stack+0x1d/0x30 [ 244.241475][T12251] dump_stack_lvl+0xe8/0x140 [ 244.241504][T12251] dump_stack+0x15/0x1b [ 244.241528][T12251] should_fail_ex+0x265/0x280 [ 244.241574][T12251] should_failslab+0x8c/0xb0 [ 244.241608][T12251] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 244.241679][T12251] ? shmem_alloc_inode+0x34/0x50 [ 244.241707][T12251] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 244.241753][T12251] shmem_alloc_inode+0x34/0x50 [ 244.241779][T12251] alloc_inode+0x40/0x170 [ 244.241884][T12251] new_inode+0x1d/0xe0 [ 244.241910][T12251] shmem_get_inode+0x244/0x750 [ 244.241941][T12251] __shmem_file_setup+0x113/0x210 [ 244.242028][T12251] shmem_file_setup+0x3b/0x50 [ 244.242113][T12251] __se_sys_memfd_create+0x2c3/0x590 [ 244.242263][T12251] __x64_sys_memfd_create+0x31/0x40 [ 244.242306][T12251] x64_sys_call+0x122f/0x2fb0 [ 244.242338][T12251] do_syscall_64+0xd2/0x200 [ 244.242393][T12251] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.242432][T12251] ? clear_bhb_loop+0x40/0x90 [ 244.242496][T12251] ? clear_bhb_loop+0x40/0x90 [ 244.242602][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.242632][T12251] RIP: 0033:0x7f506c35e929 [ 244.242655][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.242680][T12251] RSP: 002b:00007f506a9c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 244.242710][T12251] RAX: ffffffffffffffda RBX: 00000000000001fa RCX: 00007f506c35e929 [ 244.242728][T12251] RDX: 00007f506a9c6ef0 RSI: 0000000000000000 RDI: 00007f506c3e14cc [ 244.242811][T12251] RBP: 0000200000000500 R08: 00007f506a9c6bb7 R09: 00007f506a9c6e40 [ 244.242829][T12251] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 244.242846][T12251] R13: 00007f506a9c6ef0 R14: 00007f506a9c6eb0 R15: 0000200000000700 [ 244.242873][T12251] [ 244.300218][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.356161][T12256] FAULT_INJECTION: forcing a failure. [ 244.356161][T12256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.379240][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.380624][T12256] CPU: 0 UID: 0 PID: 12256 Comm: syz.8.2426 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 244.380726][T12256] Tainted: [W]=WARN [ 244.380735][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.380753][T12256] Call Trace: [ 244.380762][T12256] [ 244.380773][T12256] __dump_stack+0x1d/0x30 [ 244.380801][T12256] dump_stack_lvl+0xe8/0x140 [ 244.380838][T12256] dump_stack+0x15/0x1b [ 244.380860][T12256] should_fail_ex+0x265/0x280 [ 244.380906][T12256] should_fail+0xb/0x20 [ 244.380945][T12256] should_fail_usercopy+0x1a/0x20 [ 244.381011][T12256] _copy_from_user+0x1c/0xb0 [ 244.381038][T12256] dev_ethtool+0x52/0x1650 [ 244.381067][T12256] ? full_name_hash+0x92/0xe0 [ 244.381120][T12256] ? strcmp+0x22/0x50 [ 244.381149][T12256] dev_ioctl+0x2e0/0x960 [ 244.381177][T12256] sock_do_ioctl+0x197/0x220 [ 244.381214][T12256] sock_ioctl+0x41b/0x610 [ 244.381245][T12256] ? __pfx_sock_ioctl+0x10/0x10 [ 244.381313][T12256] __se_sys_ioctl+0xce/0x140 [ 244.381356][T12256] __x64_sys_ioctl+0x43/0x50 [ 244.381456][T12256] x64_sys_call+0x19a8/0x2fb0 [ 244.381487][T12256] do_syscall_64+0xd2/0x200 [ 244.381510][T12256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.381615][T12256] ? clear_bhb_loop+0x40/0x90 [ 244.381645][T12256] ? clear_bhb_loop+0x40/0x90 [ 244.381682][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.381713][T12256] RIP: 0033:0x7f829e95e929 [ 244.381788][T12256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.381830][T12256] RSP: 002b:00007f829cfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.381875][T12256] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95e929 [ 244.381944][T12256] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 244.381962][T12256] RBP: 00007f829cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.381982][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.382014][T12256] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 244.382043][T12256] [ 244.738335][T12260] netlink: 'syz.3.2427': attribute type 4 has an invalid length. [ 244.755483][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 244.755500][ T29] audit: type=1326 audit(2000000116.380:38946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.785751][T12262] loop2: detected capacity change from 0 to 1024 [ 244.792273][ T29] audit: type=1326 audit(2000000116.390:38947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.792317][ T29] audit: type=1326 audit(2000000116.390:38948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.792353][ T29] audit: type=1326 audit(2000000116.390:38949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.863183][ T29] audit: type=1326 audit(2000000116.390:38950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.886797][ T29] audit: type=1326 audit(2000000116.390:38951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.910517][ T29] audit: type=1326 audit(2000000116.390:38952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.912794][T12266] bridge0: entered promiscuous mode [ 244.934090][ T29] audit: type=1326 audit(2000000116.390:38953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.939765][T12266] macsec1: entered promiscuous mode [ 244.962867][ T29] audit: type=1326 audit(2000000116.390:38954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.962910][ T29] audit: type=1326 audit(2000000116.390:38955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.2.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216c41e929 code=0x7ffc0000 [ 244.971085][T12266] bridge0: port 3(macsec1) entered blocking state [ 245.021839][T12266] bridge0: port 3(macsec1) entered disabled state [ 245.028797][T12266] macsec1: entered allmulticast mode [ 245.034178][T12266] bridge0: entered allmulticast mode [ 245.040843][T12266] macsec1: left allmulticast mode [ 245.046107][T12266] bridge0: left allmulticast mode [ 245.051883][T12266] bridge0: left promiscuous mode [ 245.167529][T12277] bond1: entered promiscuous mode [ 245.173017][T12277] bond1: entered allmulticast mode [ 245.180073][T12277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.200624][T12277] bond1 (unregistering): Released all slaves [ 245.208162][T12280] loop3: detected capacity change from 0 to 512 [ 245.221320][T12285] loop8: detected capacity change from 0 to 1024 [ 245.221393][T12280] EXT4-fs: Ignoring removed bh option [ 245.233380][T12280] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.240549][T12280] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 245.253061][T12280] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 245.268350][T12280] EXT4-fs (loop3): orphan cleanup on readonly fs [ 245.275643][T12280] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2435: Failed to acquire dquot type 1 [ 245.287655][T12280] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2435: Invalid block bitmap block 0 in block_group 0 [ 245.301930][T12280] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2435: Invalid block bitmap block 0 in block_group 0 [ 245.315920][T12280] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2435: Invalid block bitmap block 0 in block_group 0 [ 245.329747][T12280] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2435: Failed to acquire dquot type 1 [ 245.341899][T12280] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2435: Failed to acquire dquot type 1 [ 245.363072][T12280] EXT4-fs (loop3): 1 orphan inode deleted [ 245.377244][T12280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.392827][T12294] siw: device registration error -23 [ 245.439065][T12300] netlink: 'syz.2.2441': attribute type 4 has an invalid length. [ 245.496238][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.551733][T12310] macsec1: entered promiscuous mode [ 245.572699][T12310] bridge0: port 3(macsec1) entered blocking state [ 245.579461][T12310] bridge0: port 3(macsec1) entered disabled state [ 245.604304][T12310] macsec1: entered allmulticast mode [ 245.609722][T12310] bridge0: entered allmulticast mode [ 245.628169][T12310] macsec1: left allmulticast mode [ 245.633453][T12310] bridge0: left allmulticast mode [ 245.668036][T12314] loop2: detected capacity change from 0 to 1024 [ 245.693264][ T3514] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 245.864108][T12325] bond1: entered promiscuous mode [ 245.869296][T12325] bond1: entered allmulticast mode [ 245.875337][T12325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.886222][T12325] bond1 (unregistering): Released all slaves [ 245.916617][T12332] loop1: detected capacity change from 0 to 1024 [ 245.967451][T12336] loop1: detected capacity change from 0 to 1024 [ 245.985314][T12336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.039392][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.166469][T12348] x_tables: ip_tables: udp match: only valid for protocol 17 [ 246.270247][T12295] syz.8.2437 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 246.284806][T12295] CPU: 1 UID: 0 PID: 12295 Comm: syz.8.2437 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 246.284837][T12295] Tainted: [W]=WARN [ 246.284921][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.284932][T12295] Call Trace: [ 246.284939][T12295] [ 246.284946][T12295] __dump_stack+0x1d/0x30 [ 246.284965][T12295] dump_stack_lvl+0xe8/0x140 [ 246.285034][T12295] dump_stack+0x15/0x1b [ 246.285050][T12295] dump_header+0x81/0x220 [ 246.285082][T12295] oom_kill_process+0x334/0x3f0 [ 246.285112][T12295] out_of_memory+0x979/0xb80 [ 246.285168][T12295] try_charge_memcg+0x5e6/0x9e0 [ 246.285258][T12295] obj_cgroup_charge_pages+0xa6/0x150 [ 246.285293][T12295] __memcg_kmem_charge_page+0x9f/0x170 [ 246.285332][T12295] __alloc_frozen_pages_noprof+0x188/0x360 [ 246.285376][T12295] alloc_pages_mpol+0xb3/0x250 [ 246.285411][T12295] alloc_pages_noprof+0x90/0x130 [ 246.285484][T12295] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 246.285536][T12295] __kvmalloc_node_noprof+0x30f/0x4e0 [ 246.285570][T12295] ? ip_set_alloc+0x1f/0x30 [ 246.285596][T12295] ? ip_set_alloc+0x1f/0x30 [ 246.285686][T12295] ? __kmalloc_cache_noprof+0x189/0x320 [ 246.285763][T12295] ip_set_alloc+0x1f/0x30 [ 246.285894][T12295] hash_netiface_create+0x282/0x740 [ 246.285925][T12295] ? __pfx_hash_netiface_create+0x10/0x10 [ 246.285955][T12295] ip_set_create+0x3c9/0x960 [ 246.286002][T12295] ? __nla_parse+0x40/0x60 [ 246.286020][T12295] nfnetlink_rcv_msg+0x4c6/0x590 [ 246.286140][T12295] ? selinux_capable+0x1f9/0x270 [ 246.286259][T12295] netlink_rcv_skb+0x120/0x220 [ 246.286289][T12295] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.286332][T12295] nfnetlink_rcv+0x16b/0x1690 [ 246.286356][T12295] ? __kfree_skb+0x109/0x150 [ 246.286436][T12295] ? nlmon_xmit+0x4f/0x60 [ 246.286455][T12295] ? consume_skb+0x49/0x150 [ 246.286482][T12295] ? nlmon_xmit+0x4f/0x60 [ 246.286574][T12295] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 246.286605][T12295] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 246.286633][T12295] ? __dev_queue_xmit+0x182/0x1fb0 [ 246.286679][T12295] ? ref_tracker_free+0x37d/0x3e0 [ 246.286721][T12295] ? __netlink_deliver_tap+0x4dc/0x500 [ 246.286808][T12295] netlink_unicast+0x5a1/0x670 [ 246.286838][T12295] netlink_sendmsg+0x58b/0x6b0 [ 246.286857][T12295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.286874][T12295] __sock_sendmsg+0x145/0x180 [ 246.286907][T12295] ____sys_sendmsg+0x31e/0x4e0 [ 246.286939][T12295] ___sys_sendmsg+0x17b/0x1d0 [ 246.287016][T12295] __x64_sys_sendmsg+0xd4/0x160 [ 246.287058][T12295] x64_sys_call+0x2999/0x2fb0 [ 246.287102][T12295] do_syscall_64+0xd2/0x200 [ 246.287147][T12295] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 246.287171][T12295] ? clear_bhb_loop+0x40/0x90 [ 246.287190][T12295] ? clear_bhb_loop+0x40/0x90 [ 246.287209][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.287228][T12295] RIP: 0033:0x7f829e95e929 [ 246.287309][T12295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.287400][T12295] RSP: 002b:00007f829cfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.287422][T12295] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95e929 [ 246.287433][T12295] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 246.287444][T12295] RBP: 00007f829e9e0b39 R08: 0000000000000000 R09: 0000000000000000 [ 246.287455][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.287545][T12295] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 246.287563][T12295] [ 246.287578][T12295] memory: usage 307200kB, limit 307200kB, failcnt 519 [ 246.647363][T12295] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 246.655301][T12295] kmem: usage 295508kB, limit 9007199254740988kB, failcnt 0 [ 246.662600][T12295] Memory cgroup stats for /syz8: [ 246.668835][T12295] cache 4096 [ 246.677102][T12295] rss 11968512 [ 246.680507][T12295] shmem 0 [ 246.683498][T12295] mapped_file 4096 [ 246.687233][T12295] dirty 0 [ 246.690194][T12295] writeback 0 [ 246.693569][T12295] workingset_refault_anon 1062 [ 246.698355][T12295] workingset_refault_file 32 [ 246.702964][T12295] swap 0 [ 246.705859][T12295] swapcached 0 [ 246.709339][T12295] pgpgin 74167 [ 246.712874][T12295] pgpgout 71244 [ 246.716414][T12295] pgfault 92568 [ 246.719897][T12295] pgmajfault 145 [ 246.723491][T12295] inactive_anon 212992 [ 246.727573][T12295] active_anon 0 [ 246.731048][T12295] inactive_file 0 [ 246.731412][T12361] loop3: detected capacity change from 0 to 1024 [ 246.734710][T12295] active_file 11759616 [ 246.734728][T12295] unevictable 0 [ 246.734736][T12295] hierarchical_memory_limit 314572800 [ 246.734745][T12295] hierarchical_memsw_limit 9223372036854771712 [ 246.734754][T12295] total_cache 4096 [ 246.734761][T12295] total_rss 11968512 [ 246.734768][T12295] total_shmem 0 [ 246.734774][T12295] total_mapped_file 4096 [ 246.734781][T12295] total_dirty 0 [ 246.734788][T12295] total_writeback 0 [ 246.734870][T12295] total_workingset_refault_anon 1062 [ 246.754719][T12372] loop5: detected capacity change from 0 to 1024 [ 246.760392][T12295] total_workingset_refault_file 32 [ 246.800367][T12295] total_swap 0 [ 246.803788][T12295] total_swapcached 0 [ 246.807829][T12295] total_pgpgin 74167 [ 246.811767][T12295] total_pgpgout 71244 [ 246.815876][T12295] total_pgfault 92568 [ 246.819953][T12295] total_pgmajfault 145 [ 246.824110][T12295] total_inactive_anon 212992 [ 246.828717][T12295] total_active_anon 0 [ 246.832742][T12295] total_inactive_file 0 [ 246.836952][T12295] total_active_file 11759616 [ 246.841616][T12295] total_unevictable 0 [ 246.845702][T12295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2437,pid=12291,uid=0 [ 246.860469][T12295] Memory cgroup out of memory: Killed process 12295 (syz.8.2437) total-vm:93884kB, anon-rss:12456kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 246.902433][T12378] siw: device registration error -23 [ 246.927372][T12361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.945168][T12382] loop2: detected capacity change from 0 to 1024 [ 246.956584][T12359] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.2454: corrupted xattr block 161: invalid header [ 246.972076][T12359] EXT4-fs (loop3): Remounting filesystem read-only [ 246.975041][T12382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.020154][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.055032][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.085906][T12393] netlink: 'syz.3.2463': attribute type 4 has an invalid length. [ 247.129233][T12398] macsec1: entered promiscuous mode [ 247.136091][T12398] bridge0: port 3(macsec1) entered blocking state [ 247.142590][T12398] bridge0: port 3(macsec1) entered disabled state [ 247.149350][T12398] macsec1: entered allmulticast mode [ 247.154846][T12398] bridge0: entered allmulticast mode [ 247.160798][T12398] macsec1: left allmulticast mode [ 247.165982][T12398] bridge0: left allmulticast mode [ 247.248370][ T3718] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 247.296429][T12413] loop5: detected capacity change from 0 to 2048 [ 247.315623][T12413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.331812][T12413] EXT4-fs (loop5): shut down requested (0) [ 247.383010][T12421] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 247.557505][T12425] hub 6-0:1.0: USB hub found [ 247.562311][T12425] hub 6-0:1.0: 8 ports detected [ 248.004397][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.020602][T12428] siw: device registration error -23 [ 248.071994][T12432] loop8: detected capacity change from 0 to 1024 [ 248.084859][T12432] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 248.096127][T12432] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 248.108564][T12432] JBD2: no valid journal superblock found [ 248.114468][T12432] EXT4-fs (loop8): Could not load journal inode [ 248.164632][T12440] netlink: 'syz.8.2476': attribute type 9 has an invalid length. [ 248.172422][T12440] netlink: 'syz.8.2476': attribute type 6 has an invalid length. [ 248.180224][T12440] netlink: 'syz.8.2476': attribute type 7 has an invalid length. [ 248.188023][T12440] netlink: 'syz.8.2476': attribute type 8 has an invalid length. [ 248.320466][T12447] lo speed is unknown, defaulting to 1000 [ 248.327066][T12458] loop8: detected capacity change from 0 to 256 [ 248.457652][T12460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.496363][T12458] FAT-fs (loop8): Directory bread(block 1285) failed [ 248.550329][T12440] FAT-fs (loop8): Directory bread(block 1285) failed [ 248.560063][T12440] FAT-fs (loop8): Directory bread(block 1285) failed [ 248.572280][T12440] FAT-fs (loop8): Directory bread(block 1285) failed [ 248.614296][T12475] loop5: detected capacity change from 0 to 2048 [ 248.686736][T12475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.782280][T12482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 248.838617][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.327767][ T3718] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 249.443447][ T1038] usb usb6-port1: attempt power cycle [ 250.030774][T12494] syz.8.2488 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 250.045349][T12494] CPU: 0 UID: 0 PID: 12494 Comm: syz.8.2488 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 250.045452][T12494] Tainted: [W]=WARN [ 250.045461][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.045477][T12494] Call Trace: [ 250.045486][T12494] [ 250.045502][T12494] __dump_stack+0x1d/0x30 [ 250.045530][T12494] dump_stack_lvl+0xe8/0x140 [ 250.045616][T12494] dump_stack+0x15/0x1b [ 250.045638][T12494] dump_header+0x81/0x220 [ 250.045703][T12494] oom_kill_process+0x334/0x3f0 [ 250.045783][T12494] out_of_memory+0x979/0xb80 [ 250.045906][T12494] try_charge_memcg+0x5e6/0x9e0 [ 250.045933][T12494] obj_cgroup_charge_pages+0xa6/0x150 [ 250.046037][T12494] __memcg_kmem_charge_page+0x9f/0x170 [ 250.046078][T12494] __alloc_frozen_pages_noprof+0x188/0x360 [ 250.046150][T12494] alloc_pages_mpol+0xb3/0x250 [ 250.046234][T12494] alloc_pages_noprof+0x90/0x130 [ 250.046267][T12494] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 250.046314][T12494] __kvmalloc_node_noprof+0x30f/0x4e0 [ 250.046348][T12494] ? ip_set_alloc+0x1f/0x30 [ 250.046423][T12494] ? ip_set_alloc+0x1f/0x30 [ 250.046456][T12494] ? __kmalloc_cache_noprof+0x189/0x320 [ 250.046499][T12494] ip_set_alloc+0x1f/0x30 [ 250.046589][T12494] hash_netiface_create+0x282/0x740 [ 250.046671][T12494] ? __pfx_hash_netiface_create+0x10/0x10 [ 250.046746][T12494] ip_set_create+0x3c9/0x960 [ 250.046795][T12494] ? __nla_parse+0x40/0x60 [ 250.046817][T12494] nfnetlink_rcv_msg+0x4c6/0x590 [ 250.046932][T12494] ? selinux_capable+0x1f9/0x270 [ 250.046965][T12494] netlink_rcv_skb+0x120/0x220 [ 250.047007][T12494] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.047050][T12494] nfnetlink_rcv+0x16b/0x1690 [ 250.047080][T12494] ? __kfree_skb+0x109/0x150 [ 250.047110][T12494] ? nlmon_xmit+0x4f/0x60 [ 250.047167][T12494] ? consume_skb+0x49/0x150 [ 250.047268][T12494] ? nlmon_xmit+0x4f/0x60 [ 250.047317][T12494] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 250.047381][T12494] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 250.047413][T12494] ? __dev_queue_xmit+0x182/0x1fb0 [ 250.047454][T12494] ? trace_event_reg+0xdc/0x170 [ 250.047539][T12494] ? ref_tracker_free+0x37d/0x3e0 [ 250.047575][T12494] ? __netlink_deliver_tap+0x4dc/0x500 [ 250.047650][T12494] netlink_unicast+0x5a1/0x670 [ 250.047718][T12494] netlink_sendmsg+0x58b/0x6b0 [ 250.047739][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.047829][T12494] __sock_sendmsg+0x145/0x180 [ 250.047862][T12494] ____sys_sendmsg+0x31e/0x4e0 [ 250.047900][T12494] ___sys_sendmsg+0x17b/0x1d0 [ 250.048021][T12494] __x64_sys_sendmsg+0xd4/0x160 [ 250.048066][T12494] x64_sys_call+0x2999/0x2fb0 [ 250.048087][T12494] do_syscall_64+0xd2/0x200 [ 250.048185][T12494] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.048214][T12494] ? clear_bhb_loop+0x40/0x90 [ 250.048312][T12494] ? clear_bhb_loop+0x40/0x90 [ 250.048340][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.048369][T12494] RIP: 0033:0x7f829e95e929 [ 250.048387][T12494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.048434][T12494] RSP: 002b:00007f829cfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.048458][T12494] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95e929 [ 250.048474][T12494] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 250.048487][T12494] RBP: 00007f829e9e0b39 R08: 0000000000000000 R09: 0000000000000000 [ 250.048503][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.048525][T12494] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 250.048549][T12494] [ 250.048557][T12494] memory: usage 307200kB, limit 307200kB, failcnt 586 [ 250.315796][ T29] kauditd_printk_skb: 1568 callbacks suppressed [ 250.315810][ T29] audit: type=1326 audit(2000000121.930:40518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.320479][T12494] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 250.320501][T12494] kmem: usage 295504kB, limit 9007199254740988kB, failcnt 0 [ 250.325260][ T29] audit: type=1326 audit(2000000121.930:40519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12485 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.331085][T12494] Memory cgroup stats for /syz8: [ 250.482495][T12494] cache 4096 [ 250.490842][T12494] rss 11968512 [ 250.494388][T12494] shmem 0 [ 250.497496][T12494] mapped_file 4096 [ 250.501522][T12494] dirty 0 [ 250.504538][T12494] writeback 0 [ 250.507947][T12494] workingset_refault_anon 1062 [ 250.507963][T12506] __nla_validate_parse: 49 callbacks suppressed [ 250.507975][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'. [ 250.528090][T12494] workingset_refault_file 32 [ 250.532692][T12494] swap 0 [ 250.535725][T12494] swapcached 0 [ 250.539205][T12494] pgpgin 81550 [ 250.542588][T12494] pgpgout 78627 [ 250.546102][T12494] pgfault 100226 [ 250.549659][T12494] pgmajfault 145 [ 250.553376][T12494] inactive_anon 49152 [ 250.557374][T12494] active_anon 163840 [ 250.561339][T12494] inactive_file 0 [ 250.565002][T12494] active_file 11759616 [ 250.569083][T12494] unevictable 0 [ 250.572555][T12494] hierarchical_memory_limit 314572800 [ 250.577957][T12494] hierarchical_memsw_limit 9223372036854771712 [ 250.584187][T12494] total_cache 4096 [ 250.585577][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.587944][T12494] total_rss 11968512 [ 250.587956][T12494] total_shmem 0 [ 250.587966][T12494] total_mapped_file 4096 [ 250.596904][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.600741][T12494] total_dirty 0 [ 250.600752][T12494] total_writeback 0 [ 250.606566][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.608451][T12494] total_workingset_refault_anon 1062 [ 250.608465][T12494] total_workingset_refault_file 32 [ 250.608477][T12494] total_swap 0 [ 250.647407][T12494] total_swapcached 0 [ 250.651308][T12494] total_pgpgin 81550 [ 250.655255][T12494] total_pgpgout 78627 [ 250.659260][T12494] total_pgfault 100226 [ 250.659722][ T29] audit: type=1326 audit(2000000122.280:40520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.663350][T12494] total_pgmajfault 145 [ 250.663362][T12494] total_inactive_anon 49152 [ 250.663372][T12494] total_active_anon 163840 [ 250.688050][ T29] audit: type=1326 audit(2000000122.320:40521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.691123][T12494] total_inactive_file 0 [ 250.691132][T12494] total_active_file 11759616 [ 250.691139][T12494] total_unevictable 0 [ 250.691147][T12494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8 [ 250.695687][ T29] audit: type=1326 audit(2000000122.320:40522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.700095][T12494] ,task_memcg=/syz8 [ 250.723648][ T29] audit: type=1326 audit(2000000122.320:40523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.727866][T12494] ,task=syz.8.2488,pid=12492,uid=0 [ 250.803180][T12494] Memory cgroup out of memory: Killed process 12492 (syz.8.2488) total-vm:93884kB, anon-rss:12584kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 250.833814][ T29] audit: type=1326 audit(2000000122.450:40524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.857567][ T29] audit: type=1326 audit(2000000122.450:40525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.881342][ T29] audit: type=1326 audit(2000000122.450:40526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.904993][ T29] audit: type=1326 audit(2000000122.450:40527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12507 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fa13e929 code=0x7ffc0000 [ 250.943723][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.952809][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.965319][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 250.991073][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 251.000051][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 251.013786][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 251.068497][T12513] loop5: detected capacity change from 0 to 2048 [ 251.075907][T12524] FAULT_INJECTION: forcing a failure. [ 251.075907][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 251.088718][T12524] CPU: 0 UID: 0 PID: 12524 Comm: syz.1.2497 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 251.088782][T12524] Tainted: [W]=WARN [ 251.088791][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.088807][T12524] Call Trace: [ 251.088816][T12524] [ 251.088825][T12524] __dump_stack+0x1d/0x30 [ 251.088852][T12524] dump_stack_lvl+0xe8/0x140 [ 251.088951][T12524] dump_stack+0x15/0x1b [ 251.088974][T12524] should_fail_ex+0x265/0x280 [ 251.089017][T12524] should_failslab+0x8c/0xb0 [ 251.089082][T12524] kmem_cache_alloc_noprof+0x50/0x310 [ 251.089114][T12524] ? dst_alloc+0xbd/0x100 [ 251.089146][T12524] dst_alloc+0xbd/0x100 [ 251.089184][T12524] ? ip_vs_sip_ct_match+0x122/0x360 [ 251.089298][T12524] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 251.089334][T12524] ? ip_route_output_key_hash_rcu+0x12b1/0x1440 [ 251.089381][T12524] ip_route_output_key_hash+0x7a/0xb0 [ 251.089547][T12524] tcp_v4_connect+0x3d5/0xac0 [ 251.089585][T12524] __inet_stream_connect+0x166/0x7e0 [ 251.089646][T12524] ? _raw_spin_unlock_bh+0x36/0x40 [ 251.089727][T12524] ? release_sock+0x116/0x150 [ 251.089759][T12524] ? _raw_spin_unlock_bh+0x36/0x40 [ 251.089782][T12524] ? lock_sock_nested+0x112/0x140 [ 251.089875][T12524] ? selinux_netlbl_socket_connect+0x115/0x130 [ 251.089906][T12524] inet_stream_connect+0x44/0x70 [ 251.089993][T12524] ? __pfx_inet_stream_connect+0x10/0x10 [ 251.090104][T12524] __sys_connect+0x1ef/0x2b0 [ 251.090192][T12524] __x64_sys_connect+0x3f/0x50 [ 251.090230][T12524] x64_sys_call+0x1daa/0x2fb0 [ 251.090258][T12524] do_syscall_64+0xd2/0x200 [ 251.090281][T12524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 251.090414][T12524] ? clear_bhb_loop+0x40/0x90 [ 251.090475][T12524] ? clear_bhb_loop+0x40/0x90 [ 251.090541][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.090568][T12524] RIP: 0033:0x7f96fa13e929 [ 251.090587][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.090688][T12524] RSP: 002b:00007f96f87a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 251.090708][T12524] RAX: ffffffffffffffda RBX: 00007f96fa365fa0 RCX: 00007f96fa13e929 [ 251.090720][T12524] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 251.090734][T12524] RBP: 00007f96f87a7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.090750][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.090766][T12524] R13: 0000000000000000 R14: 00007f96fa365fa0 R15: 00007ffc3a45ca38 [ 251.090790][T12524] [ 251.355549][T12527] x_tables: ip_tables: udp match: only valid for protocol 17 [ 251.393605][T12535] ipt_REJECT: TCP_RESET invalid for non-tcp [ 251.400277][T12513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.401345][T12535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12535 comm=syz.3.2500 [ 251.416191][T12532] loop1: detected capacity change from 0 to 2048 [ 251.442715][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.453633][T12532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.621847][T12548] wireguard0: entered promiscuous mode [ 251.635059][T12544] bond2: entered promiscuous mode [ 251.640192][T12544] bond2: entered allmulticast mode [ 251.653297][T12544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.664896][T12544] bond2 (unregistering): Released all slaves [ 251.695162][T12556] loop5: detected capacity change from 0 to 1024 [ 251.799868][T12559] bond2: entered promiscuous mode [ 251.805096][T12559] bond2: entered allmulticast mode [ 251.810846][T12559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.854635][T12559] bond2 (unregistering): Released all slaves [ 251.893010][T12561] loop3: detected capacity change from 0 to 1024 [ 252.213868][ T1038] usb usb6-port1: unable to enumerate USB device [ 252.300372][T12573] netlink: 'syz.3.2509': attribute type 4 has an invalid length. [ 252.534167][T12575] netlink: 'syz.5.2510': attribute type 4 has an invalid length. [ 252.586131][T12577] x_tables: ip_tables: udp match: only valid for protocol 17 [ 252.632012][T12579] netlink: 'syz.5.2512': attribute type 4 has an invalid length. [ 252.663627][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.680590][T12581] loop2: detected capacity change from 0 to 2048 [ 252.755835][T12587] netlink: 'syz.5.2515': attribute type 4 has an invalid length. [ 252.771688][T12581] Alternate GPT is invalid, using primary GPT. [ 252.778216][T12581] loop2: p2 p3 p7 [ 252.788575][T12588] loop1: detected capacity change from 0 to 2048 [ 252.816912][T12588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.843909][T12595] netlink: 'syz.3.2516': attribute type 5 has an invalid length. [ 252.871972][T12594] Cannot find set identified by id 0 to match [ 252.996392][T12605] bond2: entered promiscuous mode [ 253.001544][T12605] bond2: entered allmulticast mode [ 253.019322][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.044158][T12605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.071533][T12614] random: crng reseeded on system resumption [ 253.104453][T12605] bond2 (unregistering): Released all slaves [ 253.158296][T12613] loop3: detected capacity change from 0 to 1024 [ 253.381330][T12630] bond2: entered promiscuous mode [ 253.386493][T12630] bond2: entered allmulticast mode [ 253.391974][T12630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.406030][T12630] bond2 (unregistering): Released all slaves [ 253.417667][T12637] netlink: 'syz.1.2528': attribute type 4 has an invalid length. [ 253.430763][T12637] : renamed from bond0 (while UP) [ 253.443727][T12640] loop3: detected capacity change from 0 to 1024 [ 253.453905][T12642] FAULT_INJECTION: forcing a failure. [ 253.453905][T12642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.467123][T12642] CPU: 0 UID: 0 PID: 12642 Comm: syz.2.2530 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 253.467162][T12642] Tainted: [W]=WARN [ 253.467169][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.467182][T12642] Call Trace: [ 253.467188][T12642] [ 253.467269][T12642] __dump_stack+0x1d/0x30 [ 253.467293][T12642] dump_stack_lvl+0xe8/0x140 [ 253.467316][T12642] dump_stack+0x15/0x1b [ 253.467338][T12642] should_fail_ex+0x265/0x280 [ 253.467394][T12642] should_fail+0xb/0x20 [ 253.467441][T12642] should_fail_usercopy+0x1a/0x20 [ 253.467480][T12642] _copy_to_user+0x20/0xa0 [ 253.467508][T12642] simple_read_from_buffer+0xb5/0x130 [ 253.467578][T12642] proc_fail_nth_read+0x100/0x140 [ 253.467649][T12642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.467688][T12642] vfs_read+0x1a0/0x6f0 [ 253.467728][T12642] ? __rcu_read_unlock+0x4f/0x70 [ 253.467796][T12642] ? __fget_files+0x184/0x1c0 [ 253.467821][T12642] ksys_read+0xda/0x1a0 [ 253.467939][T12642] __x64_sys_read+0x40/0x50 [ 253.467980][T12642] x64_sys_call+0x2d77/0x2fb0 [ 253.468008][T12642] do_syscall_64+0xd2/0x200 [ 253.468029][T12642] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.468154][T12642] ? clear_bhb_loop+0x40/0x90 [ 253.468181][T12642] ? clear_bhb_loop+0x40/0x90 [ 253.468237][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.468258][T12642] RIP: 0033:0x7f216c41d33c [ 253.468273][T12642] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.468344][T12642] RSP: 002b:00007f216aa87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.468406][T12642] RAX: ffffffffffffffda RBX: 00007f216c645fa0 RCX: 00007f216c41d33c [ 253.468422][T12642] RDX: 000000000000000f RSI: 00007f216aa870a0 RDI: 0000000000000004 [ 253.468445][T12642] RBP: 00007f216aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 253.468457][T12642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.468471][T12642] R13: 0000000000000000 R14: 00007f216c645fa0 R15: 00007ffda61b3418 [ 253.468542][T12642] [ 253.821665][ T3718] nci: nci_rsp_packet: unknown rsp opcode 0x101 [ 253.831520][T12646] loop2: detected capacity change from 0 to 8192 [ 253.903721][T12646] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 253.908983][T12646] loop2: partition table partially beyond EOD, truncated [ 253.928892][T12646] loop2: p1 start 67108864 is beyond EOD, truncated [ 253.935763][T12646] loop2: p2 size 61546 extends beyond EOD, truncated [ 253.944196][T12646] loop2: p3 start 100859904 is beyond EOD, truncated [ 253.951348][T12646] loop2: p5 start 67108864 is beyond EOD, truncated [ 253.958149][T12646] loop2: p6 size 61546 extends beyond EOD, truncated [ 253.971257][T12661] loop3: detected capacity change from 0 to 512 [ 253.986531][T12661] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 253.996730][T12660] bond2: entered promiscuous mode [ 254.001984][T12660] bond2: entered allmulticast mode [ 254.009010][T12660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.020021][T12660] bond2 (unregistering): Released all slaves [ 254.026407][T12661] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 254.053028][T12668] loop5: detected capacity change from 0 to 1024 [ 254.065130][T12671] Cannot find set identified by id 0 to match [ 254.093067][T12675] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2540' sets config #0 [ 254.114037][T12673] loop2: detected capacity change from 0 to 8192 [ 254.121987][T12673] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 254.171550][T12675] lo speed is unknown, defaulting to 1000 [ 254.599596][T12696] x_tables: ip_tables: udp match: only valid for protocol 17 [ 254.654635][T12698] bond1: entered promiscuous mode [ 254.659822][T12698] bond1: entered allmulticast mode [ 254.665659][T12698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.705573][T12698] bond1 (unregistering): Released all slaves [ 254.727591][T12694] netlink: 'syz.5.2543': attribute type 1 has an invalid length. [ 254.742006][T12706] loop8: detected capacity change from 0 to 1024 [ 254.972295][T12721] bond1: entered promiscuous mode [ 254.977425][T12721] bond1: entered allmulticast mode [ 254.982914][T12721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.005618][T12721] bond1 (unregistering): Released all slaves [ 255.036761][T12731] loop8: detected capacity change from 0 to 1024 [ 255.055136][T12737] x_tables: ip_tables: udp match: only valid for protocol 17 [ 255.075563][ T3718] nci: nci_rsp_packet: unknown rsp opcode 0x101 [ 255.091416][T12687] syz.3.2542 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 255.106138][T12687] CPU: 0 UID: 0 PID: 12687 Comm: syz.3.2542 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 255.106178][T12687] Tainted: [W]=WARN [ 255.106187][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.106202][T12687] Call Trace: [ 255.106210][T12687] [ 255.106220][T12687] __dump_stack+0x1d/0x30 [ 255.106245][T12687] dump_stack_lvl+0xe8/0x140 [ 255.106365][T12687] dump_stack+0x15/0x1b [ 255.106387][T12687] dump_header+0x81/0x220 [ 255.106430][T12687] oom_kill_process+0x334/0x3f0 [ 255.106499][T12687] out_of_memory+0x979/0xb80 [ 255.106607][T12687] try_charge_memcg+0x5e6/0x9e0 [ 255.106676][T12687] obj_cgroup_charge_pages+0xa6/0x150 [ 255.106716][T12687] __memcg_kmem_charge_page+0x9f/0x170 [ 255.106755][T12687] __alloc_frozen_pages_noprof+0x188/0x360 [ 255.106858][T12687] alloc_pages_mpol+0xb3/0x250 [ 255.106929][T12687] alloc_pages_noprof+0x90/0x130 [ 255.107028][T12687] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 255.107085][T12687] __kvmalloc_node_noprof+0x30f/0x4e0 [ 255.107186][T12687] ? ip_set_alloc+0x1f/0x30 [ 255.107224][T12687] ? ip_set_alloc+0x1f/0x30 [ 255.107261][T12687] ? __kmalloc_cache_noprof+0x189/0x320 [ 255.107321][T12687] ip_set_alloc+0x1f/0x30 [ 255.107358][T12687] hash_netiface_create+0x282/0x740 [ 255.107401][T12687] ? __pfx_hash_netiface_create+0x10/0x10 [ 255.107478][T12687] ip_set_create+0x3c9/0x960 [ 255.107533][T12687] ? __nla_parse+0x40/0x60 [ 255.107559][T12687] nfnetlink_rcv_msg+0x4c6/0x590 [ 255.107614][T12687] ? selinux_capable+0x1f9/0x270 [ 255.107734][T12687] netlink_rcv_skb+0x120/0x220 [ 255.107806][T12687] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 255.107890][T12687] nfnetlink_rcv+0x16b/0x1690 [ 255.107923][T12687] ? __kfree_skb+0x109/0x150 [ 255.107962][T12687] ? nlmon_xmit+0x4f/0x60 [ 255.108030][T12687] ? consume_skb+0x49/0x150 [ 255.108071][T12687] ? nlmon_xmit+0x4f/0x60 [ 255.108101][T12687] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 255.108195][T12687] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 255.108231][T12687] ? __dev_queue_xmit+0x182/0x1fb0 [ 255.108274][T12687] ? ref_tracker_free+0x37d/0x3e0 [ 255.108338][T12687] ? __netlink_deliver_tap+0x4dc/0x500 [ 255.108386][T12687] netlink_unicast+0x5a1/0x670 [ 255.108491][T12687] netlink_sendmsg+0x58b/0x6b0 [ 255.108519][T12687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.108544][T12687] __sock_sendmsg+0x145/0x180 [ 255.108577][T12687] ____sys_sendmsg+0x31e/0x4e0 [ 255.108757][T12687] ___sys_sendmsg+0x17b/0x1d0 [ 255.108818][T12687] __x64_sys_sendmsg+0xd4/0x160 [ 255.108924][T12687] x64_sys_call+0x2999/0x2fb0 [ 255.108954][T12687] do_syscall_64+0xd2/0x200 [ 255.109031][T12687] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.109061][T12687] ? clear_bhb_loop+0x40/0x90 [ 255.109085][T12687] ? clear_bhb_loop+0x40/0x90 [ 255.109178][T12687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.109202][T12687] RIP: 0033:0x7fec1adae929 [ 255.109219][T12687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.109293][T12687] RSP: 002b:00007fec19417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.109317][T12687] RAX: ffffffffffffffda RBX: 00007fec1afd5fa0 RCX: 00007fec1adae929 [ 255.109334][T12687] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 255.109365][T12687] RBP: 00007fec1ae30b39 R08: 0000000000000000 R09: 0000000000000000 [ 255.109381][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.109396][T12687] R13: 0000000000000000 R14: 00007fec1afd5fa0 R15: 00007ffcf87fd818 [ 255.109420][T12687] [ 255.109429][T12687] memory: usage 307200kB, limit 307200kB, failcnt 454 [ 255.468853][T12687] memory+swap: usage 307604kB, limit 9007199254740988kB, failcnt 0 [ 255.476782][T12687] kmem: usage 296168kB, limit 9007199254740988kB, failcnt 0 [ 255.484184][T12687] Memory cgroup stats for /syz3: [ 255.484511][T12687] cache 0 [ 255.492420][T12687] rss 11288576 [ 255.495862][T12687] shmem 0 [ 255.498829][T12687] mapped_file 0 [ 255.502478][T12687] dirty 0 [ 255.505502][T12687] writeback 0 [ 255.508823][T12687] workingset_refault_anon 842 [ 255.513656][T12687] workingset_refault_file 174 [ 255.518484][T12687] swap 413696 [ 255.521791][T12687] swapcached 131072 [ 255.525630][T12687] pgpgin 125404 [ 255.529100][T12687] pgpgout 122647 [ 255.532644][T12687] pgfault 150385 [ 255.536233][T12687] pgmajfault 147 [ 255.539913][T12687] inactive_anon 24576 [ 255.543947][T12687] active_anon 126976 [ 255.547940][T12687] inactive_file 11141120 [ 255.552181][T12687] active_file 0 [ 255.555679][T12687] unevictable 0 [ 255.559171][T12687] hierarchical_memory_limit 314572800 [ 255.564596][T12687] hierarchical_memsw_limit 9223372036854771712 [ 255.570823][T12687] total_cache 0 [ 255.574318][T12687] total_rss 11288576 [ 255.578254][T12687] total_shmem 0 [ 255.581761][T12687] total_mapped_file 0 [ 255.585778][T12687] total_dirty 0 [ 255.589254][T12687] total_writeback 0 [ 255.593061][T12687] total_workingset_refault_anon 842 [ 255.598316][T12687] total_workingset_refault_file 174 [ 255.603539][T12687] total_swap 413696 [ 255.607346][T12687] total_swapcached 131072 [ 255.611684][T12687] total_pgpgin 125404 [ 255.615780][T12687] total_pgpgout 122647 [ 255.619864][T12687] total_pgfault 150385 [ 255.623960][T12687] total_pgmajfault 147 [ 255.628094][T12687] total_inactive_anon 24576 [ 255.632637][T12687] total_active_anon 126976 [ 255.637177][T12687] total_inactive_file 11141120 [ 255.641970][T12687] total_active_file 0 [ 255.645997][T12687] total_unevictable 0 [ 255.650037][T12687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2542,pid=12686,uid=0 [ 255.664847][T12687] Memory cgroup out of memory: Killed process 12686 (syz.3.2542) total-vm:100168kB, anon-rss:11816kB, file-rss:26192kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 255.727514][T12748] lo speed is unknown, defaulting to 1000 [ 255.807335][T12751] __nla_validate_parse: 24 callbacks suppressed [ 255.807357][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2559'. [ 255.868841][T12753] bridge0: entered promiscuous mode [ 255.880509][T12753] macsec1: entered promiscuous mode [ 255.887414][T12753] bridge0: port 3(macsec1) entered blocking state [ 255.894012][T12753] bridge0: port 3(macsec1) entered disabled state [ 255.900720][T12753] macsec1: entered allmulticast mode [ 255.906158][T12753] bridge0: entered allmulticast mode [ 255.934337][T12753] macsec1: left allmulticast mode [ 255.939433][T12753] bridge0: left allmulticast mode [ 255.944480][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 255.944496][ T29] audit: type=1326 audit(2000000127.560:41293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 255.974373][ T29] audit: type=1326 audit(2000000127.560:41294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 255.998101][ T29] audit: type=1326 audit(2000000127.560:41295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.021798][ T29] audit: type=1326 audit(2000000127.560:41296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.030817][ T3718] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 256.045498][ T29] audit: type=1326 audit(2000000127.560:41297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.075374][ T29] audit: type=1326 audit(2000000127.560:41298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.099036][ T29] audit: type=1326 audit(2000000127.560:41299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.122685][ T29] audit: type=1326 audit(2000000127.560:41300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.125589][T12770] netlink: 'syz.2.2564': attribute type 11 has an invalid length. [ 256.146444][ T29] audit: type=1326 audit(2000000127.560:41301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.154307][T12770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2564'. [ 256.177852][ T29] audit: type=1326 audit(2000000127.560:41302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12752 comm="syz.8.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 256.190066][T12753] bridge0: left promiscuous mode [ 256.214637][T12771] FAULT_INJECTION: forcing a failure. [ 256.214637][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 256.228474][T12771] CPU: 1 UID: 0 PID: 12771 Comm: syz.5.2563 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 256.228528][T12771] Tainted: [W]=WARN [ 256.228536][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.228552][T12771] Call Trace: [ 256.228560][T12771] [ 256.228569][T12771] __dump_stack+0x1d/0x30 [ 256.228596][T12771] dump_stack_lvl+0xe8/0x140 [ 256.228641][T12771] dump_stack+0x15/0x1b [ 256.228661][T12771] should_fail_ex+0x265/0x280 [ 256.228699][T12771] should_failslab+0x8c/0xb0 [ 256.228785][T12771] kmem_cache_alloc_noprof+0x50/0x310 [ 256.228815][T12771] ? skb_clone+0x151/0x1f0 [ 256.228836][T12771] skb_clone+0x151/0x1f0 [ 256.228887][T12771] __netlink_deliver_tap+0x2c9/0x500 [ 256.228928][T12771] netlink_unicast+0x64c/0x670 [ 256.228972][T12771] netlink_sendmsg+0x58b/0x6b0 [ 256.228994][T12771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.229068][T12771] __sock_sendmsg+0x145/0x180 [ 256.229138][T12771] ____sys_sendmsg+0x31e/0x4e0 [ 256.229177][T12771] ___sys_sendmsg+0x17b/0x1d0 [ 256.229278][T12771] __x64_sys_sendmsg+0xd4/0x160 [ 256.229318][T12771] x64_sys_call+0x2999/0x2fb0 [ 256.229341][T12771] do_syscall_64+0xd2/0x200 [ 256.229359][T12771] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.229459][T12771] ? clear_bhb_loop+0x40/0x90 [ 256.229543][T12771] ? clear_bhb_loop+0x40/0x90 [ 256.229567][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.229589][T12771] RIP: 0033:0x7f506c35e929 [ 256.229605][T12771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.229624][T12771] RSP: 002b:00007f506a9a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.229643][T12771] RAX: ffffffffffffffda RBX: 00007f506c586080 RCX: 00007f506c35e929 [ 256.229692][T12771] RDX: 0000000024044044 RSI: 0000200000000340 RDI: 0000000000000005 [ 256.229705][T12771] RBP: 00007f506a9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.229791][T12771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.229803][T12771] R13: 0000000000000001 R14: 00007f506c586080 R15: 00007ffda5125da8 [ 256.229823][T12771] [ 256.456822][T12772] loop2: detected capacity change from 0 to 1024 [ 256.474290][T12772] EXT4-fs: Ignoring removed nobh option [ 256.479970][T12772] EXT4-fs: Ignoring removed nobh option [ 256.487031][T12770] FAULT_INJECTION: forcing a failure. [ 256.487031][T12770] name failslab, interval 1, probability 0, space 0, times 0 [ 256.499840][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.2.2564 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 256.499952][T12770] Tainted: [W]=WARN [ 256.499961][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.499976][T12770] Call Trace: [ 256.499985][T12770] [ 256.499995][T12770] __dump_stack+0x1d/0x30 [ 256.500020][T12770] dump_stack_lvl+0xe8/0x140 [ 256.500045][T12770] dump_stack+0x15/0x1b [ 256.500068][T12770] should_fail_ex+0x265/0x280 [ 256.500196][T12770] ? inet_rtm_newaddr+0x32a/0xc30 [ 256.500248][T12770] should_failslab+0x8c/0xb0 [ 256.500276][T12770] __kmalloc_cache_noprof+0x4c/0x320 [ 256.500312][T12770] inet_rtm_newaddr+0x32a/0xc30 [ 256.500358][T12770] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 256.500408][T12770] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 256.500445][T12770] ? avc_has_perm_noaudit+0x1b1/0x200 [ 256.500484][T12770] netlink_rcv_skb+0x120/0x220 [ 256.500548][T12770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.500583][T12770] rtnetlink_rcv+0x1c/0x30 [ 256.500607][T12770] netlink_unicast+0x5a1/0x670 [ 256.500718][T12770] netlink_sendmsg+0x58b/0x6b0 [ 256.500786][T12770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.500808][T12770] __sock_sendmsg+0x145/0x180 [ 256.500837][T12770] ____sys_sendmsg+0x31e/0x4e0 [ 256.500884][T12770] ___sys_sendmsg+0x17b/0x1d0 [ 256.500947][T12770] __x64_sys_sendmsg+0xd4/0x160 [ 256.501039][T12770] x64_sys_call+0x2999/0x2fb0 [ 256.501083][T12770] do_syscall_64+0xd2/0x200 [ 256.501103][T12770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.501133][T12770] ? clear_bhb_loop+0x40/0x90 [ 256.501158][T12770] ? clear_bhb_loop+0x40/0x90 [ 256.501190][T12770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.501247][T12770] RIP: 0033:0x7f216c41e929 [ 256.501265][T12770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.501365][T12770] RSP: 002b:00007f216aa87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.501388][T12770] RAX: ffffffffffffffda RBX: 00007f216c645fa0 RCX: 00007f216c41e929 [ 256.501402][T12770] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 256.501416][T12770] RBP: 00007f216aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 256.501430][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.501444][T12770] R13: 0000000000000000 R14: 00007f216c645fa0 R15: 00007ffda61b3418 [ 256.501467][T12770] [ 256.509095][T12772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.761082][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2564'. [ 256.807575][T12782] bond0: entered promiscuous mode [ 256.812744][T12782] bond0: entered allmulticast mode [ 256.819225][T12782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.829713][T12782] bond0 (unregistering): Released all slaves [ 256.854923][T12789] macsec1: entered promiscuous mode [ 256.861498][T12789] bridge0: port 3(macsec1) entered blocking state [ 256.868044][T12789] bridge0: port 3(macsec1) entered disabled state [ 256.875172][T12789] macsec1: entered allmulticast mode [ 256.880484][T12789] bridge0: entered allmulticast mode [ 256.886801][T12789] macsec1: left allmulticast mode [ 256.891905][T12789] bridge0: left allmulticast mode [ 256.909760][T12788] loop1: detected capacity change from 0 to 1024 [ 256.924883][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.933873][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.935390][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.942981][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.971832][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.973062][T12798] netlink: 'syz.2.2571': attribute type 4 has an invalid length. [ 256.980850][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.981072][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'. [ 256.988664][T12798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2571'. [ 256.989655][T12798] : renamed from bond0 [ 257.016537][ T3567] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 257.771239][T12833] FAULT_INJECTION: forcing a failure. [ 257.771239][T12833] name failslab, interval 1, probability 0, space 0, times 0 [ 257.783991][T12833] CPU: 1 UID: 0 PID: 12833 Comm: syz.2.2579 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 257.784058][T12833] Tainted: [W]=WARN [ 257.784066][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.784083][T12833] Call Trace: [ 257.784091][T12833] [ 257.784126][T12833] __dump_stack+0x1d/0x30 [ 257.784226][T12833] dump_stack_lvl+0xe8/0x140 [ 257.784252][T12833] dump_stack+0x15/0x1b [ 257.784274][T12833] should_fail_ex+0x265/0x280 [ 257.784306][T12833] should_failslab+0x8c/0xb0 [ 257.784336][T12833] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 257.784372][T12833] ? sock_alloc_inode+0x34/0xa0 [ 257.784406][T12833] ? __pfx_sock_alloc_inode+0x10/0x10 [ 257.784437][T12833] sock_alloc_inode+0x34/0xa0 [ 257.784533][T12833] alloc_inode+0x40/0x170 [ 257.784576][T12833] __sock_create+0x122/0x5b0 [ 257.784612][T12833] __sys_socketpair+0x1bc/0x430 [ 257.784712][T12833] __x64_sys_socketpair+0x52/0x60 [ 257.784748][T12833] x64_sys_call+0x23f2/0x2fb0 [ 257.784784][T12833] do_syscall_64+0xd2/0x200 [ 257.784808][T12833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.784842][T12833] ? clear_bhb_loop+0x40/0x90 [ 257.784902][T12833] ? clear_bhb_loop+0x40/0x90 [ 257.784927][T12833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.785030][T12833] RIP: 0033:0x7f216c42087a [ 257.785051][T12833] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.785075][T12833] RSP: 002b:00007f216aa86f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 257.785099][T12833] RAX: ffffffffffffffda RBX: 00007f216c645f00 RCX: 00007f216c42087a [ 257.785115][T12833] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 257.785130][T12833] RBP: 00007f216aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 257.785146][T12833] R10: 00007f216aa86f98 R11: 0000000000000246 R12: 0000000000000002 [ 257.785237][T12833] R13: 0000000000000000 R14: 00007f216c645fa0 R15: 00007ffda61b3418 [ 257.785261][T12833] [ 257.785269][T12833] socket: no more sockets [ 257.837682][T12832] loop1: detected capacity change from 0 to 2048 [ 258.024771][T12832] EXT4-fs (loop1): failed to initialize system zone (-117) [ 258.032133][T12832] EXT4-fs (loop1): mount failed [ 258.193981][T12842] wireguard0: entered promiscuous mode [ 258.229472][T12848] bond2: entered promiscuous mode [ 258.234774][T12848] bond2: entered allmulticast mode [ 258.240079][T12852] loop1: detected capacity change from 0 to 1024 [ 258.241007][T12848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.247825][T12852] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 258.309369][T12858] loop3: detected capacity change from 0 to 1024 [ 258.322449][T12852] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.2585: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.340166][T12858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.369891][T12862] loop5: detected capacity change from 0 to 1024 [ 258.377459][T12852] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2585: Failed to acquire dquot type 0 [ 258.395410][T12852] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2585: Freeing blocks not in datazone - block = 0, count = 4096 [ 258.411769][T12848] bond2 (unregistering): Released all slaves [ 258.425097][T12852] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2585: Invalid inode bitmap blk 0 in block_group 0 [ 258.443946][T12852] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 258.459600][T12852] EXT4-fs (loop1): 1 orphan inode deleted [ 258.467157][T12852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.492246][T12852] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.2585: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 258.696442][T12866] loop2: detected capacity change from 0 to 1024 [ 258.728509][T12866] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 258.785506][T12866] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.2586: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.835873][ T1721] nci: nci_rsp_packet: unknown rsp opcode 0x101 [ 258.850362][T12866] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2586: Failed to acquire dquot type 0 [ 258.892125][T12866] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.2586: Freeing blocks not in datazone - block = 0, count = 4096 [ 258.979499][T12866] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2586: Invalid inode bitmap blk 0 in block_group 0 [ 259.018138][T12866] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 259.047125][T12866] EXT4-fs (loop2): 1 orphan inode deleted [ 259.061514][T12866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.147024][T12866] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.2586: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 259.217423][ T3718] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.232863][ T3718] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0 [ 259.244889][ T3718] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.259447][ T3718] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0 [ 259.272211][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.286656][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.321548][T12884] FAULT_INJECTION: forcing a failure. [ 259.321548][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.334852][T12884] CPU: 1 UID: 0 PID: 12884 Comm: syz.1.2588 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 259.334950][T12884] Tainted: [W]=WARN [ 259.334957][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.334971][T12884] Call Trace: [ 259.334977][T12884] [ 259.334986][T12884] __dump_stack+0x1d/0x30 [ 259.335007][T12884] dump_stack_lvl+0xe8/0x140 [ 259.335032][T12884] dump_stack+0x15/0x1b [ 259.335054][T12884] should_fail_ex+0x265/0x280 [ 259.335134][T12884] should_fail+0xb/0x20 [ 259.335171][T12884] should_fail_usercopy+0x1a/0x20 [ 259.335241][T12884] _copy_from_iter+0xcf/0xe40 [ 259.335286][T12884] ? _copy_from_iter+0x16d/0xe40 [ 259.335349][T12884] copy_page_from_iter+0x178/0x2a0 [ 259.335416][T12884] skb_copy_datagram_from_iter+0x232/0x490 [ 259.335450][T12884] tun_get_user+0xa0e/0x2500 [ 259.335493][T12884] ? ref_tracker_alloc+0x1f2/0x2f0 [ 259.335597][T12884] ? selinux_file_permission+0x1e4/0x320 [ 259.335622][T12884] tun_chr_write_iter+0x15e/0x210 [ 259.335649][T12884] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 259.335679][T12884] vfs_write+0x4a0/0x8e0 [ 259.335820][T12884] ksys_write+0xda/0x1a0 [ 259.335864][T12884] __x64_sys_write+0x40/0x50 [ 259.335906][T12884] x64_sys_call+0x2cdd/0x2fb0 [ 259.335929][T12884] do_syscall_64+0xd2/0x200 [ 259.335952][T12884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 259.335987][T12884] ? clear_bhb_loop+0x40/0x90 [ 259.336036][T12884] ? clear_bhb_loop+0x40/0x90 [ 259.336059][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.336142][T12884] RIP: 0033:0x7f96fa13e929 [ 259.336157][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.336179][T12884] RSP: 002b:00007f96f87a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.336200][T12884] RAX: ffffffffffffffda RBX: 00007f96fa365fa0 RCX: 00007f96fa13e929 [ 259.336219][T12884] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000004 [ 259.336234][T12884] RBP: 00007f96f87a7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.336250][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.336266][T12884] R13: 0000000000000000 R14: 00007f96fa365fa0 R15: 00007ffc3a45ca38 [ 259.336316][T12884] [ 259.828563][T12891] netlink: 'syz.5.2594': attribute type 4 has an invalid length. [ 259.843784][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.956791][T12894] ucma_write: process 592 (syz.1.2593) changed security contexts after opening file descriptor, this is not allowed. [ 260.101672][T12893] loop5: detected capacity change from 0 to 1024 [ 260.184645][T12893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.413037][T12910] bond0: entered promiscuous mode [ 260.418375][T12910] bond0: entered allmulticast mode [ 260.424126][T12910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.442502][T12910] bond0 (unregistering): Released all slaves [ 260.450113][T12903] loop8: detected capacity change from 0 to 1024 [ 260.497363][T12912] loop2: detected capacity change from 0 to 1024 [ 260.509221][T12914] macsec1: entered promiscuous mode [ 260.522117][T12914] bridge0: port 3(macsec1) entered blocking state [ 260.528670][T12914] bridge0: port 3(macsec1) entered disabled state [ 260.536253][T12914] macsec1: entered allmulticast mode [ 260.541583][T12914] bridge0: entered allmulticast mode [ 260.548373][T12914] macsec1: left allmulticast mode [ 260.553468][T12914] bridge0: left allmulticast mode [ 260.619671][ T3547] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 260.685720][T12923] x_tables: ip_tables: udp match: only valid for protocol 17 [ 260.790662][T12930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.857586][T12928] loop2: detected capacity change from 0 to 1024 [ 260.953579][ T29] kauditd_printk_skb: 2614 callbacks suppressed [ 260.953597][ T29] audit: type=1326 audit(2000000132.570:43911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216c4158e7 code=0x7ffc0000 [ 260.989224][ T29] audit: type=1326 audit(2000000132.610:43912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216c3bab19 code=0x7ffc0000 [ 261.012815][ T29] audit: type=1326 audit(2000000132.610:43913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216c4158e7 code=0x7ffc0000 [ 261.036431][ T29] audit: type=1326 audit(2000000132.610:43914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216c3bab19 code=0x7ffc0000 [ 261.060042][ T29] audit: type=1326 audit(2000000132.610:43915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216c4158e7 code=0x7ffc0000 [ 261.083638][ T29] audit: type=1326 audit(2000000132.610:43916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216c3bab19 code=0x7ffc0000 [ 261.107315][ T29] audit: type=1326 audit(2000000132.610:43917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216c4158e7 code=0x7ffc0000 [ 261.130864][ T29] audit: type=1326 audit(2000000132.610:43918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216c3bab19 code=0x7ffc0000 [ 261.154461][ T29] audit: type=1326 audit(2000000132.610:43919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f216c4158e7 code=0x7ffc0000 [ 261.178145][ T29] audit: type=1326 audit(2000000132.610:43920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f216c3bab19 code=0x7ffc0000 [ 261.410325][T12943] netlink: 'syz.8.2607': attribute type 4 has an invalid length. [ 261.861387][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.905130][T12963] netlink: 'syz.1.2612': attribute type 11 has an invalid length. [ 261.913067][T12963] __nla_validate_parse: 18 callbacks suppressed [ 261.913081][T12963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2612'. [ 261.935398][T12961] loop5: detected capacity change from 0 to 1024 [ 261.949234][T12963] loop1: detected capacity change from 0 to 1024 [ 261.956612][T12963] EXT4-fs: Ignoring removed nobh option [ 261.962231][T12963] EXT4-fs: Ignoring removed nobh option [ 261.975479][T12963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.991852][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'. [ 262.324391][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.329296][T12972] bond2: entered promiscuous mode [ 262.338910][T12972] bond2: entered allmulticast mode [ 262.344612][T12972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.355916][T12972] bond2 (unregistering): Released all slaves [ 262.397280][T12977] loop3: detected capacity change from 0 to 1024 [ 262.456602][T12979] bond0: entered promiscuous mode [ 262.461704][T12979] bond0: entered allmulticast mode [ 262.483334][T12979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.496837][T12979] bond0 (unregistering): Released all slaves [ 262.525070][T12978] loop1: detected capacity change from 0 to 1024 [ 262.666091][T12988] netlink: 'syz.1.2618': attribute type 4 has an invalid length. [ 262.716275][T12994] loop3: detected capacity change from 0 to 164 [ 262.728258][T12994] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 262.739939][T12996] netlink: 'syz.1.2621': attribute type 4 has an invalid length. [ 262.757037][T12994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2617'. [ 262.778919][T12994] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 262.787647][T12994] Symlink component flag not implemented [ 262.793453][T12994] Symlink component flag not implemented [ 262.799816][T12994] Symlink component flag not implemented (7) [ 262.806037][T12994] Symlink component flag not implemented (116) [ 263.059609][T13005] random: crng reseeded on system resumption [ 263.128123][T13010] loop1: detected capacity change from 0 to 2048 [ 263.166083][T13010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.182350][T13010] EXT4-fs (loop1): shut down requested (0) [ 263.199010][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.210534][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.220066][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.229141][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.238113][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.247041][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.255965][T13010] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 263.282915][ T8691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.319969][T13019] bridge0: entered promiscuous mode [ 263.326789][T13019] macsec1: entered promiscuous mode [ 263.333061][T13019] bridge0: port 3(macsec1) entered blocking state [ 263.339798][T13019] bridge0: port 3(macsec1) entered disabled state [ 263.346915][T13019] macsec1: entered allmulticast mode [ 263.352243][T13019] bridge0: entered allmulticast mode [ 263.358352][T13019] macsec1: left allmulticast mode [ 263.363452][T13019] bridge0: left allmulticast mode [ 263.369213][T13019] bridge0: left promiscuous mode [ 263.374568][ T36] usb usb6-port1: attempt power cycle [ 263.436507][ T1721] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 263.638821][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 263.651227][T13036] wireguard1: entered promiscuous mode [ 263.676821][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2630'. [ 263.686115][T13039] x_tables: ip_tables: udp match: only valid for protocol 17 [ 263.701632][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2632'. [ 263.711047][T13043] x_tables: ip_tables: udp match: only valid for protocol 17 [ 263.767866][T13051] loop3: detected capacity change from 0 to 2048 [ 263.784556][T13051] EXT4-fs (loop3): failed to initialize system zone (-117) [ 263.791874][T13051] EXT4-fs (loop3): mount failed [ 263.812174][T13054] loop2: detected capacity change from 0 to 2048 [ 263.824573][T13054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.838239][T13054] EXT4-fs (loop2): shut down requested (0) [ 263.845182][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.854468][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.863447][T13056] loop3: detected capacity change from 0 to 8192 [ 263.863668][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.870222][T13056] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 263.878878][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.893626][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.902554][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 263.911713][T13054] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 264.162790][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.208804][T13065] bond2: entered promiscuous mode [ 264.214081][T13065] bond2: entered allmulticast mode [ 264.219502][T13065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.230145][T13065] bond2 (unregistering): Released all slaves [ 264.239936][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2639'. [ 264.249960][T13068] siw: device registration error -23 [ 264.279729][T13070] loop5: detected capacity change from 0 to 1024 [ 264.295569][T13072] loop2: detected capacity change from 0 to 1024 [ 264.339314][T13074] wireguard0: entered promiscuous mode [ 264.388536][T13079] FAULT_INJECTION: forcing a failure. [ 264.388536][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.401922][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.5.2643 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 264.401996][T13079] Tainted: [W]=WARN [ 264.402003][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.402017][T13079] Call Trace: [ 264.402024][T13079] [ 264.402032][T13079] __dump_stack+0x1d/0x30 [ 264.402126][T13079] dump_stack_lvl+0xe8/0x140 [ 264.402151][T13079] dump_stack+0x15/0x1b [ 264.402170][T13079] should_fail_ex+0x265/0x280 [ 264.402276][T13079] should_fail+0xb/0x20 [ 264.402359][T13079] should_fail_usercopy+0x1a/0x20 [ 264.402434][T13079] _copy_from_iter+0xcf/0xe40 [ 264.402496][T13079] ? do_user_addr_fault+0xdaf/0x1090 [ 264.402532][T13079] ? mntput+0x4b/0x80 [ 264.402560][T13079] tun_get_user+0x144/0x2500 [ 264.402598][T13079] ? ref_tracker_alloc+0x1f2/0x2f0 [ 264.402664][T13079] ? selinux_file_permission+0x1e4/0x320 [ 264.402710][T13079] tun_chr_write_iter+0x15e/0x210 [ 264.402746][T13079] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 264.402841][T13079] vfs_write+0x4a0/0x8e0 [ 264.402890][T13079] ksys_write+0xda/0x1a0 [ 264.402989][T13079] __x64_sys_write+0x40/0x50 [ 264.403025][T13079] x64_sys_call+0x2cdd/0x2fb0 [ 264.403052][T13079] do_syscall_64+0xd2/0x200 [ 264.403081][T13079] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.403115][T13079] ? clear_bhb_loop+0x40/0x90 [ 264.403147][T13079] ? clear_bhb_loop+0x40/0x90 [ 264.403188][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.403214][T13079] RIP: 0033:0x7f506c35e929 [ 264.403297][T13079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.403316][T13079] RSP: 002b:00007f506a9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.403337][T13079] RAX: ffffffffffffffda RBX: 00007f506c585fa0 RCX: 00007f506c35e929 [ 264.403361][T13079] RDX: 0000000000000052 RSI: 0000200000000a40 RDI: 0000000000000003 [ 264.403375][T13079] RBP: 00007f506a9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.403388][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.403400][T13079] R13: 0000000000000000 R14: 00007f506c585fa0 R15: 00007ffda5125da8 [ 264.403420][T13079] [ 264.649535][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'. [ 264.708276][T13085] loop5: detected capacity change from 0 to 2048 [ 264.724159][T13085] EXT4-fs (loop5): failed to initialize system zone (-117) [ 264.731474][T13085] EXT4-fs (loop5): mount failed [ 264.778749][T13092] netlink: 'syz.5.2648': attribute type 4 has an invalid length. [ 264.853573][T13093] loop3: detected capacity change from 0 to 2048 [ 264.880185][T13097] loop2: detected capacity change from 0 to 2048 [ 264.915005][T13093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.944344][T13093] EXT4-fs (loop3): shut down requested (0) [ 264.951316][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 264.962060][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 264.974194][T13097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.001493][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 265.010360][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 265.021826][T13097] EXT4-fs (loop2): shut down requested (0) [ 265.042021][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 265.051448][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 265.061086][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.071327][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.092307][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.101561][T13093] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 265.112044][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.127815][T13105] random: crng reseeded on system resumption [ 265.133270][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.143246][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.143952][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.152424][T13097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 265.193645][ T36] usb usb6-port1: unable to enumerate USB device [ 265.227276][T13112] wireguard1: entered promiscuous mode [ 265.247945][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.287633][T13119] loop3: detected capacity change from 0 to 512 [ 265.303526][T13118] loop8: detected capacity change from 0 to 8192 [ 265.310456][T13118] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 265.361666][T13119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.361719][T13126] random: crng reseeded on system resumption [ 265.384641][T13119] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.401460][T13119] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 265.415923][T13119] EXT4-fs (loop3): Remounting filesystem read-only [ 265.495392][T13135] netlink: 'syz.2.2660': attribute type 4 has an invalid length. [ 265.517218][ T7433] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.566996][T13141] loop2: detected capacity change from 0 to 1024 [ 265.584049][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 265.604417][T13141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.650687][T13146] loop1: detected capacity change from 0 to 2048 [ 265.665466][T13146] EXT4-fs (loop1): failed to initialize system zone (-117) [ 265.674411][T13146] EXT4-fs (loop1): mount failed [ 265.681154][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.733341][T13157] bond0: entered promiscuous mode [ 265.738463][T13157] bond0: entered allmulticast mode [ 265.743983][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.756673][T13157] bond0 (unregistering): Released all slaves [ 265.787766][T13163] loop1: detected capacity change from 0 to 1024 [ 265.805586][T13165] wireguard0: entered promiscuous mode [ 265.814722][T13167] macsec1: entered promiscuous mode [ 265.825245][T13167] bridge0: port 3(macsec1) entered blocking state [ 265.831915][T13167] bridge0: port 3(macsec1) entered disabled state [ 265.838917][T13167] macsec1: entered allmulticast mode [ 265.844346][T13167] bridge0: entered allmulticast mode [ 265.851430][T13167] macsec1: left allmulticast mode [ 265.856700][T13167] bridge0: left allmulticast mode [ 265.862471][T13174] netlink: 'syz.2.2672': attribute type 4 has an invalid length. [ 265.931013][ T3718] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 266.149659][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 266.149705][ T29] audit: type=1326 audit(2000000137.770:44717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.181234][ T29] audit: type=1326 audit(2000000137.770:44718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.205085][ T29] audit: type=1326 audit(2000000137.770:44719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.228739][ T29] audit: type=1326 audit(2000000137.770:44720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.252414][ T29] audit: type=1326 audit(2000000137.770:44721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.276120][ T29] audit: type=1326 audit(2000000137.770:44722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.299922][ T29] audit: type=1326 audit(2000000137.770:44723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.323521][ T29] audit: type=1326 audit(2000000137.770:44724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.347181][ T29] audit: type=1326 audit(2000000137.770:44725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.370672][ T29] audit: type=1326 audit(2000000137.790:44726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13193 comm="syz.8.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829e95e929 code=0x7ffc0000 [ 266.511561][T13200] FAULT_INJECTION: forcing a failure. [ 266.511561][T13200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.524679][T13200] CPU: 1 UID: 0 PID: 13200 Comm: syz.8.2678 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 266.524717][T13200] Tainted: [W]=WARN [ 266.524724][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.524814][T13200] Call Trace: [ 266.524819][T13200] [ 266.524826][T13200] __dump_stack+0x1d/0x30 [ 266.524845][T13200] dump_stack_lvl+0xe8/0x140 [ 266.524863][T13200] dump_stack+0x15/0x1b [ 266.524881][T13200] should_fail_ex+0x265/0x280 [ 266.524910][T13200] should_fail+0xb/0x20 [ 266.524934][T13200] should_fail_usercopy+0x1a/0x20 [ 266.525004][T13200] _copy_from_iter+0xcf/0xe40 [ 266.525036][T13200] ? do_user_addr_fault+0xdaf/0x1090 [ 266.525130][T13200] ? mntput+0x4b/0x80 [ 266.525155][T13200] tun_get_user+0x144/0x2500 [ 266.525186][T13200] ? ref_tracker_alloc+0x1f2/0x2f0 [ 266.525305][T13200] ? selinux_file_permission+0x1e4/0x320 [ 266.525330][T13200] tun_chr_write_iter+0x15e/0x210 [ 266.525355][T13200] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 266.525379][T13200] vfs_write+0x4a0/0x8e0 [ 266.525455][T13200] ksys_write+0xda/0x1a0 [ 266.525485][T13200] __x64_sys_write+0x40/0x50 [ 266.525522][T13200] x64_sys_call+0x2cdd/0x2fb0 [ 266.525552][T13200] do_syscall_64+0xd2/0x200 [ 266.525577][T13200] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.525632][T13200] ? clear_bhb_loop+0x40/0x90 [ 266.525686][T13200] ? clear_bhb_loop+0x40/0x90 [ 266.525707][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.525726][T13200] RIP: 0033:0x7f829e95e929 [ 266.525740][T13200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.525773][T13200] RSP: 002b:00007f829cfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.525789][T13200] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95e929 [ 266.525801][T13200] RDX: 0000000000000052 RSI: 0000200000000a40 RDI: 0000000000000003 [ 266.525812][T13200] RBP: 00007f829cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.525823][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.525834][T13200] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 266.525931][T13200] [ 266.822180][T13208] wireguard2: entered promiscuous mode [ 266.830336][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2680'. [ 266.859441][T13204] x_tables: ip_tables: udp match: only valid for protocol 17 [ 266.869846][T13212] loop8: detected capacity change from 0 to 164 [ 266.890330][T13212] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 266.921015][T13212] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 266.929974][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 266.949194][T13212] Symlink component flag not implemented [ 266.954976][T13212] Symlink component flag not implemented [ 266.974107][T13212] Symlink component flag not implemented (7) [ 266.980194][T13212] Symlink component flag not implemented (116) [ 267.057824][T13239] loop8: detected capacity change from 0 to 2048 [ 267.069375][T13239] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 267.099869][T13239] xt_hashlimit: max too large, truncated to 1048576 [ 267.167485][T13219] lo speed is unknown, defaulting to 1000 [ 267.249436][T13246] lo speed is unknown, defaulting to 1000 [ 267.278961][T13219] chnl_net:caif_netlink_parms(): no params data found [ 267.337938][T13219] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.345179][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.353229][T13219] bridge_slave_0: entered allmulticast mode [ 267.359750][T13219] bridge_slave_0: entered promiscuous mode [ 267.367435][T13219] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.374663][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.381915][T13219] bridge_slave_1: entered allmulticast mode [ 267.388808][T13219] bridge_slave_1: entered promiscuous mode [ 267.432836][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2697'. [ 267.444120][T13276] x_tables: ip_tables: udp match: only valid for protocol 17 [ 267.444683][T13219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.461099][T13278] loop8: detected capacity change from 0 to 164 [ 267.468446][T13278] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.477906][T13278] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.488429][T13219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.497898][T13278] Symlink component flag not implemented [ 267.503640][T13278] Symlink component flag not implemented [ 267.509416][T13278] Symlink component flag not implemented (7) [ 267.515500][T13278] Symlink component flag not implemented (116) [ 267.541945][T13219] team0: Port device team_slave_0 added [ 267.549125][T13282] FAULT_INJECTION: forcing a failure. [ 267.549125][T13282] name failslab, interval 1, probability 0, space 0, times 0 [ 267.562128][T13282] CPU: 0 UID: 0 PID: 13282 Comm: syz.8.2699 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 267.562176][T13282] Tainted: [W]=WARN [ 267.562185][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.562342][T13282] Call Trace: [ 267.562350][T13282] [ 267.562359][T13282] __dump_stack+0x1d/0x30 [ 267.562384][T13282] dump_stack_lvl+0xe8/0x140 [ 267.562408][T13282] dump_stack+0x15/0x1b [ 267.562428][T13282] should_fail_ex+0x265/0x280 [ 267.562518][T13282] should_failslab+0x8c/0xb0 [ 267.562546][T13282] kmem_cache_alloc_node_noprof+0x57/0x320 [ 267.562579][T13282] ? __alloc_skb+0x101/0x320 [ 267.562618][T13282] __alloc_skb+0x101/0x320 [ 267.562718][T13282] alloc_skb_with_frags+0x7d/0x470 [ 267.562786][T13282] ? __rcu_read_unlock+0x4f/0x70 [ 267.562813][T13282] ? handle_mm_fault+0x2264/0x2be0 [ 267.562841][T13282] sock_alloc_send_pskb+0x43a/0x4f0 [ 267.562931][T13282] unix_dgram_sendmsg+0x394/0xfa0 [ 267.562963][T13282] ? selinux_socket_sendmsg+0x175/0x1b0 [ 267.563064][T13282] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 267.563113][T13282] __sock_sendmsg+0x145/0x180 [ 267.563145][T13282] ____sys_sendmsg+0x345/0x4e0 [ 267.563235][T13282] ___sys_sendmsg+0x17b/0x1d0 [ 267.563285][T13282] __sys_sendmmsg+0x178/0x300 [ 267.563327][T13282] __x64_sys_sendmmsg+0x57/0x70 [ 267.563385][T13282] x64_sys_call+0x2f2f/0x2fb0 [ 267.563441][T13282] do_syscall_64+0xd2/0x200 [ 267.563462][T13282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.563494][T13282] ? clear_bhb_loop+0x40/0x90 [ 267.563617][T13282] ? clear_bhb_loop+0x40/0x90 [ 267.563674][T13282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.563702][T13282] RIP: 0033:0x7f829e95e929 [ 267.563722][T13282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.563757][T13282] RSP: 002b:00007f829cfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.563781][T13282] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95e929 [ 267.563798][T13282] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 267.563814][T13282] RBP: 00007f829cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.563834][T13282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.563846][T13282] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 267.563864][T13282] [ 267.581863][T13219] team0: Port device team_slave_1 added [ 267.820108][T13219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.827247][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.853308][T13219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.864753][T13219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.871717][T13219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.898118][T13219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.925621][T13219] hsr_slave_0: entered promiscuous mode [ 267.931733][T13219] hsr_slave_1: entered promiscuous mode [ 268.112579][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2705'. [ 268.121860][T13298] x_tables: ip_tables: udp match: only valid for protocol 17 [ 268.172413][T13219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.185091][T13219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.206498][T13219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.226074][T13219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.323252][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2708'. [ 268.339049][T13219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.362037][T13219] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.375891][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.383116][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.395963][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.403149][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.479304][T13328] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 268.490321][T13328] SELinux: failed to load policy [ 268.530560][T13219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.855701][T13219] veth0_vlan: entered promiscuous mode [ 268.875817][T13219] veth1_vlan: entered promiscuous mode [ 268.929416][T13219] veth0_macvtap: entered promiscuous mode [ 268.958171][T13219] veth1_macvtap: entered promiscuous mode [ 268.996365][T13219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.021034][T13219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.042973][T13219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.051899][T13219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.060744][T13219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.069512][T13219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.196602][T13351] netlink: 'syz.2.2683': attribute type 4 has an invalid length. [ 269.301383][T13357] netlink: 'syz.8.2717': attribute type 4 has an invalid length. [ 269.372672][T13360] loop5: detected capacity change from 0 to 1024 [ 269.430281][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 269.446627][T13360] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 269.457666][T13360] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 269.516250][T13360] JBD2: no valid journal superblock found [ 269.522339][T13360] EXT4-fs (loop5): Could not load journal inode [ 269.573869][T13360] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 269.675909][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2726'. [ 269.685109][T13381] x_tables: ip_tables: udp match: only valid for protocol 17 [ 269.730008][T13387] loop1: detected capacity change from 0 to 164 [ 269.744337][T13391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2730'. [ 269.753864][T13387] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 269.761573][T13391] siw: device registration error -23 [ 269.766284][T13387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2727'. [ 269.800118][T13394] loop5: detected capacity change from 0 to 164 [ 269.814607][T13394] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 269.824774][T13394] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2731'. [ 269.969932][T13407] lo speed is unknown, defaulting to 1000 [ 270.110573][T13412] bond4: entered promiscuous mode [ 270.115748][T13412] bond4: entered allmulticast mode [ 270.147795][T13412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.190401][T13415] loop3: detected capacity change from 0 to 1024 [ 270.216479][T13412] bond4 (unregistering): Released all slaves [ 270.637526][T13433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2743'. [ 270.669931][T13433] siw: device registration error -23 [ 270.765354][T13430] set match dimension is over the limit! [ 270.839412][T13440] loop5: detected capacity change from 0 to 164 [ 270.854047][T13440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.865567][T13442] FAULT_INJECTION: forcing a failure. [ 270.865567][T13442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.878803][T13442] CPU: 0 UID: 0 PID: 13442 Comm: syz.8.2747 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 270.878861][T13442] Tainted: [W]=WARN [ 270.878923][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.878941][T13442] Call Trace: [ 270.878949][T13442] [ 270.878959][T13442] __dump_stack+0x1d/0x30 [ 270.878987][T13442] dump_stack_lvl+0xe8/0x140 [ 270.879012][T13442] dump_stack+0x15/0x1b [ 270.879035][T13442] should_fail_ex+0x265/0x280 [ 270.879087][T13442] should_fail+0xb/0x20 [ 270.879125][T13442] should_fail_usercopy+0x1a/0x20 [ 270.879249][T13442] _copy_to_user+0x20/0xa0 [ 270.879279][T13442] simple_read_from_buffer+0xb5/0x130 [ 270.879323][T13442] proc_fail_nth_read+0x100/0x140 [ 270.879401][T13442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 270.879500][T13442] vfs_read+0x1a0/0x6f0 [ 270.879575][T13442] ? __rcu_read_unlock+0x4f/0x70 [ 270.879606][T13442] ? __fget_files+0x184/0x1c0 [ 270.879636][T13442] ksys_read+0xda/0x1a0 [ 270.879719][T13442] __x64_sys_read+0x40/0x50 [ 270.879763][T13442] x64_sys_call+0x2d77/0x2fb0 [ 270.879792][T13442] do_syscall_64+0xd2/0x200 [ 270.879816][T13442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.879961][T13442] ? clear_bhb_loop+0x40/0x90 [ 270.879990][T13442] ? clear_bhb_loop+0x40/0x90 [ 270.880025][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.880054][T13442] RIP: 0033:0x7f829e95d33c [ 270.880074][T13442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.880098][T13442] RSP: 002b:00007f829cfc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.880182][T13442] RAX: ffffffffffffffda RBX: 00007f829eb85fa0 RCX: 00007f829e95d33c [ 270.880199][T13442] RDX: 000000000000000f RSI: 00007f829cfc70a0 RDI: 0000000000000005 [ 270.880212][T13442] RBP: 00007f829cfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.880282][T13442] R10: 0000000000000091 R11: 0000000000000246 R12: 0000000000000001 [ 270.880299][T13442] R13: 0000000000000000 R14: 00007f829eb85fa0 R15: 00007ffe67a1bd88 [ 270.880320][T13442] [ 270.882638][T13440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 271.024498][T13444] loop8: detected capacity change from 0 to 2048 [ 271.074196][T13440] Symlink component flag not implemented [ 271.113710][T13440] Symlink component flag not implemented [ 271.119702][T13440] Symlink component flag not implemented (7) [ 271.125817][T13440] Symlink component flag not implemented (116) [ 271.132773][T13444] EXT4-fs (loop8): failed to initialize system zone (-117) [ 271.141029][T13444] EXT4-fs (loop8): mount failed [ 271.173406][T13448] loop5: detected capacity change from 0 to 164 [ 271.187946][T13448] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 271.242357][T13450] loop8: detected capacity change from 0 to 2048 [ 271.252120][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 271.252138][ T29] audit: type=1326 audit(2000000142.870:45427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.256849][T13452] x_tables: ip_tables: udp match: only valid for protocol 17 [ 271.264190][ T29] audit: type=1326 audit(2000000142.870:45428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.313256][ T29] audit: type=1326 audit(2000000142.870:45429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.336880][ T29] audit: type=1326 audit(2000000142.870:45430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.360511][ T29] audit: type=1326 audit(2000000142.870:45431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.384340][ T29] audit: type=1326 audit(2000000142.870:45432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.407999][ T29] audit: type=1326 audit(2000000142.870:45433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.431738][ T29] audit: type=1326 audit(2000000142.870:45434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.455579][ T29] audit: type=1326 audit(2000000142.870:45435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.479303][ T29] audit: type=1326 audit(2000000142.870:45436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.5.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f506c35e929 code=0x7ffc0000 [ 271.510221][T13450] EXT4-fs (loop8): failed to initialize system zone (-117) [ 271.517794][T13450] EXT4-fs (loop8): mount failed [ 271.610141][T13464] random: crng reseeded on system resumption [ 271.639376][T13470] bridge0: entered promiscuous mode [ 271.654754][T13470] macsec1: entered promiscuous mode [ 271.671891][T13470] bridge0: port 3(macsec1) entered blocking state [ 271.678580][T13470] bridge0: port 3(macsec1) entered disabled state [ 271.693200][T13470] macsec1: entered allmulticast mode [ 271.698676][T13470] bridge0: entered allmulticast mode [ 271.706266][T13470] macsec1: left allmulticast mode [ 271.711446][T13470] bridge0: left allmulticast mode [ 271.726445][T13470] bridge0: left promiscuous mode [ 271.735157][T13480] loop5: detected capacity change from 0 to 164 [ 271.743457][T13480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 271.761227][T13423] lo speed is unknown, defaulting to 1000 [ 271.771372][ T3718] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 271.789227][T13483] loop5: detected capacity change from 0 to 164 [ 271.798405][T13483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 271.807871][T13483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 271.816463][T13483] Symlink component flag not implemented [ 271.822483][T13483] Symlink component flag not implemented [ 271.828803][T13483] Symlink component flag not implemented (7) [ 271.834937][T13483] Symlink component flag not implemented (116) [ 271.866535][T13485] x_tables: ip_tables: udp match: only valid for protocol 17 [ 271.949673][T13491] IPv6: Can't replace route, no match found [ 272.019665][T13493] loop5: detected capacity change from 0 to 1024 [ 272.026467][T13493] EXT4-fs: Ignoring removed bh option [ 272.032089][T13493] EXT4-fs: inline encryption not supported [ 272.038172][T13493] ext4: Unknown parameter 'smackfsroot' [ 272.065159][T13493] rdma_op ffff888119026180 conn xmit_rdma 0000000000000000 [ 272.101764][T13495] loop2: detected capacity change from 0 to 2048 [ 272.124282][T13495] EXT4-fs (loop2): failed to initialize system zone (-117) [ 272.131727][T13495] EXT4-fs (loop2): mount failed [ 272.159561][T13499] __nla_validate_parse: 5 callbacks suppressed [ 272.159575][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2764'. [ 272.175067][T13499] x_tables: ip_tables: udp match: only valid for protocol 17 [ 272.468245][T13505] netlink: 'syz.8.2766': attribute type 4 has an invalid length. [ 272.588210][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2770'. [ 272.598830][T13507] ================================================================== [ 272.606956][T13507] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 272.615927][T13507] [ 272.618267][T13507] read to 0xffff88814d7c60a0 of 4 bytes by task 13518 on cpu 1: [ 272.625925][T13507] selinux_inode_permission+0x2a7/0x620 [ 272.631516][T13507] security_inode_permission+0x6d/0xb0 [ 272.637021][T13507] inode_permission+0x106/0x310 [ 272.641901][T13507] link_path_walk+0x162/0x900 [ 272.643249][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 272.646602][T13507] path_openat+0x1de/0x2170 [ 272.660098][T13507] do_filp_open+0x109/0x230 [ 272.664648][T13507] io_openat2+0x272/0x390 [ 272.666232][T13524] x_tables: ip_tables: udp match: only valid for protocol 17 [ 272.668991][T13507] io_openat+0x1b/0x30 [ 272.680468][T13507] __io_issue_sqe+0xfe/0x2e0 [ 272.685110][T13507] io_issue_sqe+0x53/0x970 [ 272.689562][T13507] io_wq_submit_work+0x3f7/0x5f0 [ 272.694562][T13507] io_worker_handle_work+0x44e/0x9b0 [ 272.699890][T13507] io_wq_worker+0x22e/0x870 [ 272.704430][T13507] ret_from_fork+0xda/0x150 [ 272.708966][T13507] ret_from_fork_asm+0x1a/0x30 [ 272.713765][T13507] [ 272.716108][T13507] write to 0xffff88814d7c60a0 of 4 bytes by task 13507 on cpu 0: [ 272.723848][T13507] selinux_inode_permission+0x31b/0x620 [ 272.729421][T13507] security_inode_permission+0x6d/0xb0 [ 272.734924][T13507] inode_permission+0x106/0x310 [ 272.739812][T13507] link_path_walk+0x162/0x900 [ 272.744502][T13507] path_openat+0x1de/0x2170 [ 272.749063][T13507] do_filp_open+0x109/0x230 [ 272.753581][T13507] io_openat2+0x272/0x390 [ 272.757922][T13507] io_openat+0x1b/0x30 [ 272.761998][T13507] __io_issue_sqe+0xfe/0x2e0 [ 272.766598][T13507] io_issue_sqe+0x53/0x970 [ 272.771025][T13507] io_submit_sqes+0x667/0xfd0 [ 272.775745][T13507] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 272.781341][T13507] __x64_sys_io_uring_enter+0x78/0x90 [ 272.786757][T13507] x64_sys_call+0x28c8/0x2fb0 [ 272.791468][T13507] do_syscall_64+0xd2/0x200 [ 272.796002][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.801924][T13507] [ 272.804257][T13507] value changed: 0x00000002 -> 0x00000003 [ 272.809983][T13507] [ 272.812392][T13507] Reported by Kernel Concurrency Sanitizer on: [ 272.818565][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.5.2768 Tainted: G W 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 272.832637][T13507] Tainted: [W]=WARN [ 272.836464][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.846523][T13507] ================================================================== [ 272.863151][ T3513] usb usb6-port1: attempt power cycle [ 274.702982][ T3513] usb usb6-port1: unable to enumerate USB device [ 274.709474][T13438] vhci_hcd: invalid port number 96 [ 274.714885][T13438] vhci_hcd: default hub control req: 0000 vfffc i0060 l0