last executing test programs: 2m1.554382002s ago: executing program 4 (id=1638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r6, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42040, 0x0) fcntl$setlease(r9, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 2m0.454421769s ago: executing program 4 (id=1648): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYRES32], 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x31) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000007c0), &(0x7f0000000880)='./file0\x00', 0x8, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) openat(0xffffffffffffff9c, 0x0, 0x153802, 0x1f8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) syz_open_dev$tty1(0xc, 0x4, 0x3) 1m59.64718809s ago: executing program 4 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff000000009fa200100000000007020000f8ffffffb703000008000000b704000001003125285f00000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="4c160000390009002cbd7000ff840000020000000400000034160180060006"], 0x164c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r1, 0x112, 0xc0001, 0x0, &(0x7f0000000200)) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000001c0)={0x4, 0x0, '\x00', 0x0, &(0x7f0000000180)}) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8081000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 1m58.795187984s ago: executing program 4 (id=1669): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) finit_module(r1, 0x0, 0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c) 1m58.517669398s ago: executing program 4 (id=1674): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='io_uring_file_get\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r3, 0x400, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000008000000000000000400050000000000100000000000000020"], 0x24, 0x3) fcntl$setlease(r3, 0x400, 0x2) fchmodat(r3, &(0x7f00000001c0)='./file0\x00', 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000fcff7fff0100000000000000000000000010000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000dfd3af1600000000e1"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 1m58.445023954s ago: executing program 4 (id=1676): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000f00"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket(0xa, 0x3, 0x3a) syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x19cae, 0x40, 0x5, 0x115}, &(0x7f00000001c0), &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x6000, 0x200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4a0, &(0x7f0000000b80)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m58.432766155s ago: executing program 32 (id=1676): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000f00"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket(0xa, 0x3, 0x3a) syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x19cae, 0x40, 0x5, 0x115}, &(0x7f00000001c0), &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x6000, 0x200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4a0, &(0x7f0000000b80)="$eJzs3M9vVEUcAPDv292W37Yi/gBRqmgkEltaUDl4AKOJB01M9IDH2haCFGpoNUKIVg94NCTejUcT/wJPejHqyYSr3g0JMVxAvax5u+9tt9vdZVu2Xet+PsnSee/NdubLzOzOvOluAH1rJP0nidgZEb9FxFD1cHmGkeqPO7euTP1168pUEuXyW38mlXy3b12ZyrPmz9uRHywuP19v/tLlc5OzszMXs+OxhfPvj81fuvzc2fOTZ2bOzFyYOH782NHxF1+YeL5N7Qc7jjOt0+19H8/t3/vaO9femDp17d2fv03y+JfF8WHHv/MuRpqcK+aJp7tVyn/Errp0UspThd5Uho6lHTJtroHK+B+KYtQaL4bi1c96WjlgXZXL5fKWlleHsxyZpAz8ryTRac6BjnMCm0H2Rp9ELE6la+D69Xw/uHmyugBK476TPapXSrXV60DD+rab0tXWqcW/v0ofsXQfovMbGwAAq/T9yerPfO63NP8rlOrzncj2hoYj4v6I2B0RD0TEnoh4MCIeioiHI+KRuuc02/dp1LhJsnL+WbixpsA6dPNwxEvZ3tby+V9t72K4mB3tqsQ/kJw+OztzJCLui4hDMbAlPR5vU8YPr1z/IkuumNeN1M3/0kdafj4XzOpxo9Rwg256cmHyXuPO3fw0Yl+pWfxJbScgbce9EbHvwNrKOPvsN/tbXbt7/G2U1lafeuWvI56ptv9iNMSfS9rvT45tjdmZI2N5r1jpl1+vvtmq/HuKvwvS9t/etP/X4h9O6vdr51dfxtXfP2+5puyw/y8bN2n/H0zerqTzCx9NLixcHI8YTF7Pzp/Izi8vr5JvYil/Gv+hg83H/+5Y+p94NCLSTvxYRDweEQeyuj8REU9GxME28f/08lPvrT3+9ZXGP72q9m+ZyPe2V1wqnvvxu8qVvLGG28SfRJP2P1ZJHcrOdPL617amF++lNwMAAMDmU4iInZEURmvpQmF0tPr38ntie2F2bn7h8Om5Dy5MVz8jMBwDhfxO11DtfmgsjmfL+vz+6ETD8dHsvvGXxW2V49GpudnpXgcPfW5Hi/Gf+qPY69oB664L+2jAJrXW8V8ulz/pclWADeb9H/qX8Q/9q8n439Zw3Po7AoBNrdn7v4U99IdW8//rG1wPYONZ/0P/Mv6hfxn/0JeyT8KXOvmA/7ol0teflnmKEdGrirVIlMtbV37LwUYkBnsfey0RhVU+K6nvY1tX8R0NKxLR69hXmfgn+7LNDSgrHUrd+YW9fmUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojn8DAAD//+ID2M8=") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.959405188s ago: executing program 5 (id=2678): unshare(0x68040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600)={[{@fat=@errors_continue}, {}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29b, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="ffbe", 0x2}], 0x1, 0x810001, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900"], 0x64}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x40200) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x3}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10b}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000780)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0xf636, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0xffffffffffffffff, 0x4}}, 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 5.268802547s ago: executing program 5 (id=2692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_clone3(&(0x7f0000000880)={0x2900080, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.650857671s ago: executing program 5 (id=2694): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) read(r3, &(0x7f0000002040)=""/76, 0x4c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) 4.515886903s ago: executing program 5 (id=2699): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") r0 = socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x409) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000300)="73d568a8b327c2d56ac7009d0e96251ab709612a9d054188b4598019eae72639eb5260bc42e40f37ab13ff1ee65ffc3c5f783dba3e94041779c54939e51e19bcf4f3b5735e82e62a642b292d19fb56e1ecd612d5f085fea5209ae1342c5721c289057b1ef76fa428d00cabd9c643c7ba84a923b23af887be00ada46681f646ee5f00c5213e4c7ec18bf3e02596870ac0987a77ef793ca01d38262cb2dde95b56e4711d2601", 0xa5}, {&(0x7f00000003c0)="6cede8d1ffce8a1ec10f39de804f992eef9605df817bb3516a826670d6263f3436fb8736bf82bdc02db403f8c7fdf63e750b56168fdcae1fbdbc6546288935afc663af36f49e8e6bd00fd91a7bd92b88dc3c5dcda2a2d602231d57dd5b6c1a7a45f0628ef6f9a515be30", 0x6a}, {&(0x7f0000000740)="1d4821ca0bf4cc5cb74ecbb6833ca250c5d24d818f9b51349b313383cf86f43163640b5258b5ff8fb8d705b49af4317923f3dd9761", 0x35}, {0x0}, {&(0x7f0000000840)="4dd4214b7609c97fe1f2b7b909dd18909d8553cae21e90e5e64616c4221cc16b2db8bcb662564081e425aba6c3aaec5f1a3a2bfa5cf5f0c141b7538a7bc6f81b6586297acbbd426b087a581ba2c3c49a1e7a2856632cba9ae3febb85c84d3a195d1447a5220d97dca8812f6c753a1979a8fb71f0801c680297b8", 0x7a}], 0x5) r3 = socket(0xf, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.621655642s ago: executing program 5 (id=2713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000740)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',w&eno=']) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000340)="6a814b35320a00aa58dcc6117a310d8cb31b8da54fc4bf172b7eb002ab702b1f", 0x20}, {&(0x7f0000000280)="58848e89b6f24538bc2c6e8a8ec71955d34dbff7ef38cd59989e0974f665eb2dc7f0245f76", 0x25}], 0x3) 3.596692134s ago: executing program 3 (id=2714): syz_usb_connect(0x1, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0xb001, 0xff03, 0x3a8, 0x2c0, 0xe8, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffb, 0xfffff801, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) connect$netlink(r0, &(0x7f00000001c0), 0xc) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x5, 0xfa, 0x3, 0x83, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1e4, 0x0, 0x1, @rand_addr=' \x01\x00', @private2, {[@srh={0x88, 0x8, 0x4, 0x4, 0x1, 0x68, 0x3, [@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x21}, @dstopts={0x67, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xba, 0x22, "ed4ef63a13ddd68bf6a88205d353fb968e4a2bb9c9b7ff6f27d2f3adba48f8e01147"}]}, @hopopts={0x87, 0x1c, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0x3311, [0x0, 0xfa4, 0x7, 0x7ff, 0x4]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xfffc, [0x1af7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x2}, @generic={0x6, 0x5d, "5a868a361534ebd6104ec9bac8ecbdfb4d38c7483165140a6f6bb31729625d779bf8a67577afee2ee8a3f93312ad30de906628c6030f73fe2510a1cb3860dd0ee210f3e9e7c0d8dc0105bc9cf3a0a519e0eae6e506e832bbffd77bd8e2"}, @generic={0x4, 0xa, "276b9fef0c30a3d1b072"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446015e93dfbfe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a"}}}, 0x21a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xf2}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x1b) 3.53202076s ago: executing program 0 (id=2716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x9, 0x8}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f000000be00)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x401}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = dup(r4) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x24, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0xbc98}}, 0x0) 3.222680817s ago: executing program 0 (id=2720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000"/47], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x2010, r0, 0xcaeb3000) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000000, 0x110, r4, 0x2d17b000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) utimes(&(0x7f0000000100)='./file3\x00', 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)={0x28, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000070000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100400005002500010000000500", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x5}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @datasec={0x2000f, 0x3, 0x0, 0xf, 0x1, [{0x4, 0xffffffff, 0xfff}, {0x4, 0x5, 0x8}, {0x4, 0xde, 0x3}], "c0"}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/7, 0x6b, 0x7, 0x1, 0x8}, 0x28) 3.022206354s ago: executing program 1 (id=2726): socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000000008, 0x48928, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/192, 0xc0}, {0x0}], 0x2) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000)={0x16, 0x2c, 0x1, 0xf, 0x7, 0xeb8e, 0x5, 0x9b}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d70421f5306d03d991bfa14e3bc03a73ec663b226be9f8b639ed6450ec62d612557795f3fa3597f697fa53364f71801fc009fa147a2ba30d968389e1882847761413f11cdd292f56678c486b596b122b14bf8a3d5ce807a4f612b81a291fa0ecad6fa66244dae1d80979fc08b94b54685c9ac1df8603298c7a3d1b4c5db829809", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES8=r10], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.970748699s ago: executing program 0 (id=2727): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000852900000000000000fcffff7f0000000036000000"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa, 0x201}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x43, 0x100}}}}}}}}}, 0x4a) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) msgctl$IPC_RMID(r0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005300)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a52", 0x4}], 0x1}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x4004) 2.966466109s ago: executing program 1 (id=2728): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x4}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000500)={'vlan0\x00', @ifru_map={0x40, 0x10001, 0x4, 0xc, 0xd1, 0x8}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r4, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='netlink_extack\x00', r4, 0x0, 0x1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r10, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf376600000005001300810000001400080000000000000000000000000000140005000000"], 0x38}}, 0x2) 2.806139543s ago: executing program 3 (id=2730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001180)=@caif=@rfm, &(0x7f0000001200)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x13) r4 = dup2(r3, r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r6 = syz_io_uring_setup(0x5b1b, &(0x7f0000001000)={0x0, 0xbec9, 0x100, 0x1, 0x225, 0x0, r0}, &(0x7f0000001080), &(0x7f00000010c0)) pipe(&(0x7f0000000e00)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x2000000002ffff, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r6, 0x21, &(0x7f0000001240)={0x0, 0x61f4, 0x80, 0x1, 0x317, 0x0, r7}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='cpuhp_enter\x00', r9}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r10 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.765777317s ago: executing program 5 (id=2731): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) clock_gettime(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000000)=""/40, 0x0, 0x28, 0x1, 0xa8}, 0x28) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe80000000000000000000"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='btrfs_cow_block\x00', r6, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) msgsnd(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xdfa, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060106000000ffff000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="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", 0x105}], 0x1}, 0x0) 2.72653303s ago: executing program 0 (id=2733): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24004041}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000000)=[{0x61, 0x0, 0x5, 0x7}, {0x6, 0x80, 0x10, 0x9}]}) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_getevents(0x0, 0x40, 0x0, 0x0, 0x0) 2.537716177s ago: executing program 0 (id=2735): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x19) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r7}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702ffffffb703000008000000b70400000022a4328cdacff0bd00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2c, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYRESHEX=r8, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRES32=r6, @ANYRESHEX=r4, @ANYBLOB="a8f491717fb1496ed0b15a1e749455ee2488bada421bd613c62f9aab9ca01dbc19542d50bc2438bb26e3517cd817d0e2c2fe1bad51d6ebaea9cf0204aa26c422c61471f2697bd7f6bb30e55feef23a125523064271af0766f515d51a9280923fbcfdef47ee4f73bda4b1a94cb47c2d3ad7a7bddc2bcccd514480ac518a6723874d7f93d6ff1a6039b6726b05ef38d881d3e90ab5aa6853ca5f183c8be003b7889ac0292bd998c30fc435ac01d3156e062f8a61408b07e283a7ea23aab90a6749e397f24276337e71", @ANYRESHEX=r9, @ANYRESHEX=r1, @ANYBLOB="2469ca89963a97c59946587da3ec0896", @ANYRES8=r3, @ANYBLOB="29f9f4551cf25922fdb8e7f1f0132faf3029b213e004b69dfaa6e3dc5cc0ce6112485868c4f755b7df22be9d36934c42"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) preadv(r9, 0x0, 0x0, 0x400, 0x101) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x7, @private0, 0xe}}}, &(0x7f0000000200)=0x84) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x200000000000011b, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) 2.422807497s ago: executing program 2 (id=2736): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x17, 0x16, 0x1c1, &(0x7f0000000140)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x14, r4, 0xf01, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), 0x0}, 0x20) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18) socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "fa0cf9222d85a61cc31081d088545b7b"}, 0x20) clock_gettime(0x3, &(0x7f0000000500)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0xff]) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 2.240668713s ago: executing program 2 (id=2737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x31dfd2d2b20bd45d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000d0c1608ff48fdf9936e759f2c5f16925f74d195cc991514f3e6177d50357e4", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x8c9bcc7bb4385e85, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xfff3, 0x4}, {0xfff3, 0xc}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x44}}, 0x1) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="b825225490e4581c00000018f100002cbd7000000000000a00db32b2c8d086df151400"], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001630400030000000100050000000c00018008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000040)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) socket$nl_route(0x10, 0x3, 0x0) 2.071396648s ago: executing program 1 (id=2738): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_uring_setup(0x22625, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa00000001000008004d1e00bb1a6fb0441c0fc10a01010100000005ac14d4e23e91431cf661080000000002004e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000290781e83"], 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) 1.970807496s ago: executing program 2 (id=2739): syz_emit_ethernet(0x10aa, &(0x7f0000000c40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @igmp={{0x25, 0x4, 0x0, 0x9, 0x109c, 0x66, 0x0, 0x3b, 0x2, 0x0, @local, @broadcast, {[@cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x0, 0xa, "fcc370de02881c7a"}, {0x1, 0x11, "dc436086d0adc3c50e1ebb6eb8c2f5"}, {0x5, 0x7, "785ee16f31"}, {0x1, 0x8, "3bb48529d059"}, {0x7, 0x6, "f4a88970"}, {0x7, 0xd, "dc521ae8cabe17d89c25c3"}, {0x1, 0x3, "05"}, {0x5, 0x5, "fe19b8"}]}, @timestamp={0x44, 0xc, 0x7e, 0x0, 0x3, [0x10002, 0x8]}, @generic={0xa, 0x9, "5bb7ab83b25abc"}, @lsrr={0x83, 0x1f, 0xe, [@broadcast, @remote, @broadcast, @multicast1, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x16, 0x5, 0x0, @local, "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"}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = fcntl$dupfd(r0, 0x0, r0) readahead(r0, 0x3, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0xc}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.873983705s ago: executing program 3 (id=2740): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7ff, 0xffffffffffffffff, 0x0, 0x0, 0xd51c, 0x0, 0x1}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_procfs$pagemap(0x0, &(0x7f00000004c0)) tgkill(0x0, 0x0, 0x21) ptrace$setregs(0xd, 0x0, 0x7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x18b203) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000340)={r5, r1, 0x2}) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x69}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x4, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r1, 0x38, 0x30, 0x0, @void, @void, @void, @value, r8}, 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.774446194s ago: executing program 3 (id=2741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x17, &(0x7f0000000740)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB=',w&eno=']) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000340)="6a814b35320a00aa58dcc6117a310d8cb31b8da54fc4bf172b7eb002ab702b1f", 0x20}, {&(0x7f0000000280)="58848e89b6f24538bc2c6e8a8ec71955d34dbff7ef38cd59989e0974f665eb2dc7f0245f76", 0x25}], 0x3) 1.078568065s ago: executing program 1 (id=2742): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='io_uring_file_get\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='xen_mmu_write_cr3\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r4, 0x400, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000008000000000000000400050000000000100000000000000020"], 0x24, 0x3) fcntl$setlease(r4, 0x400, 0x2) fchmodat(r4, &(0x7f00000001c0)='./file0\x00', 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="1000"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000fcff7fff0100000000000000000000000010000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000dfd3af1600000000e1"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 920.011269ms ago: executing program 2 (id=2743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x4, 0x1}, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) fstatfs(r3, &(0x7f00000003c0)=""/65) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0xffea, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r8, 0x29ab, 0xd480, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x40}]}]}, 0x58}}, 0x0) 790.823791ms ago: executing program 2 (id=2744): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000852900000000000000fcffff7f0000000036000000"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa, 0x201}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x43, 0x100}}}}}}}}}, 0x4a) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) msgctl$IPC_RMID(r0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005300)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a52", 0x4}], 0x1}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4004) 685.765859ms ago: executing program 1 (id=2745): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004041}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 657.438282ms ago: executing program 3 (id=2746): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24004041}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000000)=[{0x61, 0x0, 0x5, 0x7}, {0x6, 0x80, 0x10, 0x9}]}) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_getevents(0x0, 0x40, 0x0, 0x0, 0x0) 201.086932ms ago: executing program 2 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 918.04µs ago: executing program 3 (id=2748): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff038}, {0x80000006, 0xa, 0x0, 0xa}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000016c3864a3efe81a59528596e47e307d7933b1915bdf9f0cd5"], 0x14}, 0x1, 0x0, 0x0, 0x804a}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='cpu==-!|!') fcntl$setlease(r5, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x3}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r3, 0xb}}, 0x48) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0, r3}}, 0x18) 0s ago: executing program 1 (id=2749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r4, &(0x7f0000000780)='\r', 0x1, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendto$inet(r0, &(0x7f0000000140)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r6, @multicast2, @loopback}, 0xc) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 0 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 241.359662][ T3314] RSP: 002b:00007fffb4ba6d78 EFLAGS: 00010246 [ 241.359682][ T3314] RAX: 0000000000000000 RBX: 000000000000047f RCX: 00007f0994ce1fc3 [ 241.359752][ T3314] RDX: 00007fffb4ba6d90 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.359764][ T3314] RBP: 00007fffb4ba6dfc R08: 000000000cb8f41a R09: 0000000000000000 [ 241.359776][ T3314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 241.359787][ T3314] R13: 00000000000927c0 R14: 000000000003ae33 R15: 00007fffb4ba6e50 [ 241.359828][ T3314] [ 241.359835][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 6890 [ 241.595157][ T3314] memory+swap: usage 246332kB, limit 9007199254740988kB, failcnt 0 [ 241.603123][ T3314] kmem: usage 245512kB, limit 9007199254740988kB, failcnt 0 [ 241.610501][ T3314] Memory cgroup stats for /syz0: [ 241.614785][ T3314] cache 0 [ 241.622705][ T3314] rss 0 [ 241.625522][ T3314] shmem 0 [ 241.628545][ T3314] mapped_file 823296 [ 241.632457][ T3314] dirty 0 [ 241.635543][ T3314] writeback 0 [ 241.638900][ T3314] workingset_refault_anon 3984 [ 241.643682][ T3314] workingset_refault_file 386 [ 241.648406][ T3314] swap 770048 [ 241.651827][ T3314] swapcached 12288 [ 241.655620][ T3314] pgpgin 251647 [ 241.659102][ T3314] pgpgout 251644 [ 241.662679][ T3314] pgfault 253014 [ 241.666296][ T3314] pgmajfault 527 [ 241.669859][ T3314] inactive_anon 0 [ 241.673550][ T3314] active_anon 12288 [ 241.677402][ T3314] inactive_file 0 [ 241.681065][ T3314] active_file 0 [ 241.684545][ T3314] unevictable 0 [ 241.688066][ T3314] hierarchical_memory_limit 314572800 [ 241.693531][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 241.699778][ T3314] total_cache 0 [ 241.703251][ T3314] total_rss 0 [ 241.706600][ T3314] total_shmem 0 [ 241.710175][ T3314] total_mapped_file 823296 [ 241.714826][ T3314] total_dirty 0 [ 241.718334][ T3314] total_writeback 0 [ 241.722240][ T3314] total_workingset_refault_anon 3984 [ 241.727704][ T3314] total_workingset_refault_file 386 [ 241.732997][ T3314] total_swap 770048 [ 241.736906][ T3314] total_swapcached 12288 [ 241.741164][ T3314] total_pgpgin 251647 [ 241.745192][ T3314] total_pgpgout 251644 [ 241.749353][ T3314] total_pgfault 253014 [ 241.753453][ T3314] total_pgmajfault 527 [ 241.757637][ T3314] total_inactive_anon 0 [ 241.761846][ T3314] total_active_anon 12288 [ 241.766215][ T3314] total_inactive_file 0 [ 241.770391][ T3314] total_active_file 0 [ 241.774395][ T3314] total_unevictable 0 [ 241.778425][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2109,pid=10342,uid=0 [ 241.793209][ T3314] Memory cgroup out of memory: Killed process 10342 (syz.0.2109) total-vm:96016kB, anon-rss:1136kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 241.825664][T10357] lo speed is unknown, defaulting to 1000 [ 241.831870][T10357] lo speed is unknown, defaulting to 1000 [ 242.148386][T10371] lo speed is unknown, defaulting to 1000 [ 242.155052][T10371] lo speed is unknown, defaulting to 1000 [ 242.313610][T10386] netlink: 'syz.2.2123': attribute type 6 has an invalid length. [ 242.702114][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 242.711653][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2125'. [ 242.722529][T10389] atomic_op ffff88811a88f928 conn xmit_atomic 0000000000000000 [ 242.775936][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 242.775971][ T29] audit: type=1326 audit(1767597063.332:47126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.810066][ T29] audit: type=1326 audit(1767597063.332:47127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.833997][ T29] audit: type=1326 audit(1767597063.332:47128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.857805][ T29] audit: type=1326 audit(1767597063.332:47129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.881614][ T29] audit: type=1326 audit(1767597063.332:47130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.905274][ T29] audit: type=1326 audit(1767597063.332:47131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.928974][ T29] audit: type=1326 audit(1767597063.332:47132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.952981][ T29] audit: type=1326 audit(1767597063.332:47133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 242.972780][T10399] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 242.976594][ T29] audit: type=1326 audit(1767597063.332:47134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc257b6df90 code=0x7ffc0000 [ 243.007105][ T29] audit: type=1326 audit(1767597063.332:47135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 243.141769][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 243.263315][T10417] random: crng reseeded on system resumption [ 243.279758][T10417] loop5: detected capacity change from 0 to 512 [ 243.301830][T10416] bridge0: port 3(gretap0) entered blocking state [ 243.308678][T10416] bridge0: port 3(gretap0) entered disabled state [ 243.318168][T10417] FAT-fs (loop5): error, clusters badly computed (1 != 0) [ 243.325529][T10417] FAT-fs (loop5): Filesystem has been set read-only [ 243.334042][T10416] gretap0: entered allmulticast mode [ 243.364683][T10416] gretap0: entered promiscuous mode [ 243.370829][T10418] gretap0: left allmulticast mode [ 243.376020][T10418] gretap0: left promiscuous mode [ 243.381301][T10418] bridge0: port 3(gretap0) entered disabled state [ 243.613374][T10442] lo speed is unknown, defaulting to 1000 [ 243.635437][T10442] lo speed is unknown, defaulting to 1000 [ 243.727448][T10447] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.857067][T10447] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.927820][T10447] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.991251][T10447] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.117635][ T3740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.137581][T10464] bond0 (unregistering): Released all slaves [ 244.185856][T10463] __nla_validate_parse: 8 callbacks suppressed [ 244.185915][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 244.208503][ T3740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.209345][T10463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2144'. [ 244.245061][ T3740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.253796][ T3740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.525167][T10479] program syz.5.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.686522][T10489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.517772][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 245.533680][T10500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2153'. [ 245.592757][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 245.602542][T10511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2158'. [ 245.727644][T10525] loop0: detected capacity change from 0 to 512 [ 245.779421][T10525] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 245.811118][T10525] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 245.825565][T10525] EXT4-fs (loop0): 2 truncates cleaned up [ 245.838745][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.853449][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.924705][T10525] netlink: 44 bytes leftover after parsing attributes in process `gtp'. [ 246.117710][T10550] ªªªªªª: renamed from vlan0 [ 246.420252][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2173'. [ 246.429622][T10568] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2173'. [ 246.520990][T10580] loop5: detected capacity change from 0 to 512 [ 246.542582][T10580] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 246.567071][T10580] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 246.581030][T10580] EXT4-fs (loop5): 2 truncates cleaned up [ 246.587595][T10580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.601951][T10580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.628013][T10580] netlink: 44 bytes leftover after parsing attributes in process `gtp'. [ 246.636706][T10585] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.934008][T10621] netlink: 'syz.5.2183': attribute type 6 has an invalid length. [ 247.273114][T10673] loop0: detected capacity change from 0 to 512 [ 247.295089][T10673] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 247.313040][T10673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2187: bg 0: block 255: padding at end of block bitmap is not set [ 247.328404][T10673] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 247.337454][T10673] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2187: invalid indirect mapped block 1 (level 1) [ 247.351198][T10673] EXT4-fs (loop0): 1 truncate cleaned up [ 247.357884][T10673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.410332][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.784902][ T29] kauditd_printk_skb: 1424 callbacks suppressed [ 247.784917][ T29] audit: type=1326 audit(1767597068.342:48560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc257b0b829 code=0x7ffc0000 [ 247.847599][ T29] audit: type=1326 audit(1767597068.342:48561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc257b665e7 code=0x7ffc0000 [ 247.871366][ T29] audit: type=1326 audit(1767597068.342:48562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc257b0b829 code=0x7ffc0000 [ 247.895038][ T29] audit: type=1326 audit(1767597068.342:48563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc257b665e7 code=0x7ffc0000 [ 247.919267][ T29] audit: type=1326 audit(1767597068.342:48564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc257b0b829 code=0x7ffc0000 [ 247.942862][ T29] audit: type=1326 audit(1767597068.342:48565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc257b665e7 code=0x7ffc0000 [ 247.966593][ T29] audit: type=1326 audit(1767597068.342:48566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc257b0b829 code=0x7ffc0000 [ 247.990134][ T29] audit: type=1326 audit(1767597068.342:48567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc257b665e7 code=0x7ffc0000 [ 248.013767][ T29] audit: type=1326 audit(1767597068.342:48568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc257b0b829 code=0x7ffc0000 [ 248.037327][ T29] audit: type=1326 audit(1767597068.342:48569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10626 comm="syz.1.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc257b665e7 code=0x7ffc0000 [ 248.062290][T10750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.318135][T10765] ref_ctr increment failed for inode: 0x93c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811d6dca40 [ 248.356277][T10764] wireguard0: entered promiscuous mode [ 248.361997][T10764] wireguard0: entered allmulticast mode [ 248.814352][T10787] lo: Caught tx_queue_len zero misconfig [ 248.914553][T10788] tipc: Started in network mode [ 248.919565][T10788] tipc: Node identity badf2c020384, cluster identity 4711 [ 248.926947][T10788] tipc: Enabled bearer , priority 0 [ 248.948153][T10788] tipc: Disabling bearer [ 248.994146][T10791] netlink: 'syz.5.2204': attribute type 1 has an invalid length. [ 249.190288][T10801] __nla_validate_parse: 9 callbacks suppressed [ 249.190368][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 249.206548][T10801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2208'. [ 249.322569][T10807] wireguard0: entered promiscuous mode [ 249.328128][T10807] wireguard0: entered allmulticast mode [ 249.397680][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 249.758116][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 249.768287][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2212'. [ 250.090747][T10818] lo speed is unknown, defaulting to 1000 [ 250.123765][T10818] lo speed is unknown, defaulting to 1000 [ 250.131421][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 250.290635][T10830] loop0: detected capacity change from 0 to 1024 [ 250.302123][T10830] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.313256][T10830] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.324066][T10830] JBD2: no valid journal superblock found [ 250.329854][T10830] EXT4-fs (loop0): Could not load journal inode [ 250.443806][T10830] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 250.627160][T10844] netlink: 'syz.3.2219': attribute type 6 has an invalid length. [ 250.658262][T10845] ref_ctr increment failed for inode: 0x9ba offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811d6daf40 [ 251.391062][T10852] netlink: 44 bytes leftover after parsing attributes in process `gtp'. [ 251.407535][T10847] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2221'. [ 251.434656][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2221'. [ 251.464188][T10855] loop0: detected capacity change from 0 to 512 [ 251.471132][T10855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.511556][T10855] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2231: invalid indirect mapped block 4294967295 (level 1) [ 251.541740][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2223'. [ 251.593084][T10855] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2231: invalid indirect mapped block 4294967295 (level 1) [ 251.607774][T10855] EXT4-fs (loop0): 2 truncates cleaned up [ 251.613976][T10855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.645004][T10855] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.2231: path /397/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 251.756514][T10871] bridge0: port 1(gretap0) entered blocking state [ 251.763081][T10871] bridge0: port 1(gretap0) entered disabled state [ 251.781142][T10871] gretap0: entered allmulticast mode [ 251.797543][T10871] gretap0: entered promiscuous mode [ 251.815500][T10871] gretap0: left allmulticast mode [ 251.820719][T10871] gretap0: left promiscuous mode [ 251.825875][T10871] bridge0: port 1(gretap0) entered disabled state [ 251.833600][T10873] loop5: detected capacity change from 0 to 1024 [ 251.843838][T10873] journal_path: Non-blockdev passed as './file1' [ 251.850280][T10873] EXT4-fs: error: could not find journal device path [ 252.229832][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.283683][T10886] bridge9: entered promiscuous mode [ 252.288983][T10886] bridge9: entered allmulticast mode [ 252.302177][T10888] futex_wake_op: syz.0.2230 tries to shift op by 32; fix this program [ 252.359889][T10890] loop5: detected capacity change from 0 to 2048 [ 252.436258][T10890] EXT4-fs (loop5): failed to initialize system zone (-117) [ 252.444072][T10890] EXT4-fs (loop5): mount failed [ 252.511666][T10890] loop5: detected capacity change from 0 to 512 [ 252.555610][T10890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.580670][T10890] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.596143][T10890] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 252.600833][ T29] kauditd_printk_skb: 1628 callbacks suppressed [ 252.600881][ T29] audit: type=1326 audit(1767597073.364:50198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb837f7df90 code=0x7ffc0000 [ 252.613227][T10890] Quota error (device loop5): write_blk: dquota write failed [ 252.616904][ T29] audit: type=1326 audit(1767597073.364:50199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb837f7e497 code=0x7ffc0000 [ 252.616941][ T29] audit: type=1326 audit(1767597073.364:50200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb837f7df90 code=0x7ffc0000 [ 252.640630][T10890] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 252.648044][ T29] audit: type=1326 audit(1767597073.364:50201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 252.671405][T10890] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2233: Failed to acquire dquot type 1 [ 252.694981][ T29] audit: type=1326 audit(1767597073.364:50202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 252.763367][ T29] audit: type=1326 audit(1767597073.364:50203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 252.787131][ T29] audit: type=1326 audit(1767597073.364:50204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 252.810747][ T29] audit: type=1326 audit(1767597073.364:50205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.5.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 252.895655][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.243930][T10932] loop0: detected capacity change from 0 to 512 [ 253.274006][T10932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.286898][T10932] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.318584][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.360151][T10941] loop0: detected capacity change from 0 to 1024 [ 253.430904][T10944] loop5: detected capacity change from 0 to 164 [ 253.439533][T10941] loop0: detected capacity change from 0 to 8192 [ 253.483235][ T7805] loop0: p1 p2 p4 < > [ 253.487399][ T7805] loop0: partition table partially beyond EOD, truncated [ 253.495476][ T7805] loop0: p1 start 16777216 is beyond EOD, truncated [ 253.502192][ T7805] loop0: p2 size 515840 extends beyond EOD, truncated [ 253.511693][ T7805] loop0: p4 start 16777216 is beyond EOD, truncated [ 253.521248][T10941] loop0: p1 p2 p4 < > [ 253.525368][T10941] loop0: partition table partially beyond EOD, truncated [ 253.534103][T10941] loop0: p1 start 16777216 is beyond EOD, truncated [ 253.540882][T10941] loop0: p2 size 515840 extends beyond EOD, truncated [ 253.549431][T10941] loop0: p4 start 16777216 is beyond EOD, truncated [ 253.561203][ T3888] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.571710][ T3888] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.676726][T10948] lo speed is unknown, defaulting to 1000 [ 253.684152][T10948] lo speed is unknown, defaulting to 1000 [ 253.686735][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 254.189459][T10963] __nla_validate_parse: 5 callbacks suppressed [ 254.189484][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'. [ 254.204853][T10963] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2254'. [ 254.215185][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 254.257651][T10965] netlink: 'syz.1.2251': attribute type 30 has an invalid length. [ 254.274273][T10958] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 254.350798][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 254.561461][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 254.690942][T10977] lo speed is unknown, defaulting to 1000 [ 254.706029][T10977] lo speed is unknown, defaulting to 1000 [ 254.727676][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 254.886991][T10990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.289771][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2264'. [ 255.298932][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2264'. [ 255.354636][T11008] bridge0: port 1(gretap0) entered blocking state [ 255.361234][T11008] bridge0: port 1(gretap0) entered disabled state [ 255.392284][T11008] gretap0: entered allmulticast mode [ 255.399321][T11008] gretap0: entered promiscuous mode [ 255.411075][T11006] gretap0: left allmulticast mode [ 255.416166][T11006] gretap0: left promiscuous mode [ 255.421340][T11006] bridge0: port 1(gretap0) entered disabled state [ 255.587062][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 255.655011][T11020] syz!: rxe_newlink: already configured on team_slave_0 [ 256.040560][T11040] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 256.060872][T11043] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.104434][T11043] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.151787][T11043] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.227719][T11043] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.253307][T11051] gretap1: entered promiscuous mode [ 256.286845][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.304134][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.312731][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.321063][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.783082][T11072] loop0: detected capacity change from 0 to 32768 [ 256.837071][ T8555] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 256.843447][ T8555] loop0: p1 start 460800 is beyond EOD, truncated [ 256.849996][ T8555] loop0: p2 size 83886080 extends beyond EOD, truncated [ 256.863837][ T8555] loop0: p5 start 460800 is beyond EOD, truncated [ 256.870492][ T8555] loop0: p6 size 83886080 extends beyond EOD, truncated [ 256.888538][T11072] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 256.894078][T11072] loop0: p1 start 460800 is beyond EOD, truncated [ 256.900629][T11072] loop0: p2 size 83886080 extends beyond EOD, truncated [ 256.913578][T11072] loop0: p5 start 460800 is beyond EOD, truncated [ 256.920082][T11072] loop0: p6 size 83886080 extends beyond EOD, truncated [ 256.971118][T11080] loop5: detected capacity change from 0 to 1024 [ 257.004990][T11080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.088217][ T7925] udevd[7925]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 257.091715][ T7805] udevd[7805]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 257.108341][ T8847] udevd[8847]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 257.126762][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 257.143928][ T7925] udevd[7925]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 257.144416][ T8847] udevd[8847]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 257.156505][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 257.176295][ T7805] udevd[7805]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 257.244999][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.433238][T11101] lo speed is unknown, defaulting to 1000 [ 257.443733][ T29] kauditd_printk_skb: 1255 callbacks suppressed [ 257.443766][ T29] audit: type=1326 audit(1767597078.451:51461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.456641][T11101] lo speed is unknown, defaulting to 1000 [ 257.475516][ T29] audit: type=1326 audit(1767597078.492:51462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.504061][ T29] audit: type=1326 audit(1767597078.524:51463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.527787][ T29] audit: type=1326 audit(1767597078.524:51464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.551440][ T29] audit: type=1326 audit(1767597078.524:51465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.579986][T11106] tipc: Enabled bearer , priority 0 [ 257.590714][T11102] tipc: Disabling bearer [ 257.601043][T11103] netlink: 'syz.1.2297': attribute type 6 has an invalid length. [ 257.609683][ T29] audit: type=1326 audit(1767597078.597:51466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.633392][ T29] audit: type=1326 audit(1767597078.597:51467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.657102][ T29] audit: type=1326 audit(1767597078.597:51468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.680827][ T29] audit: type=1326 audit(1767597078.597:51469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 257.701038][T11110] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 257.704509][ T29] audit: type=1326 audit(1767597078.597:51470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.1.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 258.055556][T11122] loop0: detected capacity change from 0 to 512 [ 258.063463][T11122] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 258.076755][T11122] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2301: bg 0: block 255: padding at end of block bitmap is not set [ 258.091658][T11122] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 258.101251][T11122] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2301: invalid indirect mapped block 1 (level 1) [ 258.115317][T11122] EXT4-fs (loop0): 1 truncate cleaned up [ 258.121464][T11122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.173795][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.266927][T11127] loop0: detected capacity change from 0 to 128 [ 258.360119][T11127] syz.0.2302: attempt to access beyond end of device [ 258.360119][T11127] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 258.390451][T11127] syz.0.2302: attempt to access beyond end of device [ 258.390451][T11127] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 258.424193][T11127] syz.0.2302: attempt to access beyond end of device [ 258.424193][T11127] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 258.476177][T11127] syz.0.2302: attempt to access beyond end of device [ 258.476177][T11127] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 258.540207][T11144] syz.0.2302: attempt to access beyond end of device [ 258.540207][T11144] loop0: rw=2049, sector=345, nr_sectors = 120 limit=128 [ 258.576566][T11133] pim6reg: entered allmulticast mode [ 258.589057][T11133] pim6reg: left allmulticast mode [ 258.606600][T11127] syz.0.2302: attempt to access beyond end of device [ 258.606600][T11127] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 258.703945][T11144] syz.0.2302: attempt to access beyond end of device [ 258.703945][T11144] loop0: rw=2049, sector=473, nr_sectors = 8 limit=128 [ 258.760736][T11127] syz.0.2302: attempt to access beyond end of device [ 258.760736][T11127] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 258.807096][T11144] syz.0.2302: attempt to access beyond end of device [ 258.807096][T11144] loop0: rw=2049, sector=489, nr_sectors = 8 limit=128 [ 258.834590][T11127] syz.0.2302: attempt to access beyond end of device [ 258.834590][T11127] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 258.903052][T11156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11156 comm=syz.3.2312 [ 258.986042][ T3711] buffer_io_error: 374 callbacks suppressed [ 258.986117][ T3711] Buffer I/O error on dev loop0, logical block 345, lost async page write [ 259.037091][T11158] loop0: detected capacity change from 0 to 512 [ 259.085149][T11158] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 259.109722][T11162] netlink: 'syz.3.2314': attribute type 6 has an invalid length. [ 259.130990][T11158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2313: bg 0: block 255: padding at end of block bitmap is not set [ 259.146096][T11158] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 259.155560][T11158] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2313: invalid indirect mapped block 1 (level 1) [ 259.171788][T11158] EXT4-fs (loop0): 1 truncate cleaned up [ 259.177904][T11158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.261008][T11170] __nla_validate_parse: 8 callbacks suppressed [ 259.261028][T11170] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2317'. [ 259.281366][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.357699][T11176] loop0: detected capacity change from 0 to 164 [ 259.373743][T11173] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.386470][T11170] loop5: detected capacity change from 0 to 512 [ 259.398332][T11170] EXT4-fs: Ignoring removed i_version option [ 259.404410][T11170] EXT4-fs: Ignoring removed bh option [ 259.459420][T11170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.475972][T11170] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.509026][ T3529] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 259.517245][ T3529] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.897987][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.913266][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 259.928292][T11187] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2319'. [ 259.953175][T11187] bond0 (unregistering): Released all slaves [ 260.032494][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 260.051866][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2322'. [ 260.165711][T11202] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.206991][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 260.239005][T11202] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.267417][T11204] bridge_slave_0: left allmulticast mode [ 260.273209][T11204] bridge_slave_0: left promiscuous mode [ 260.279043][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.306139][T11204] bridge_slave_1: left allmulticast mode [ 260.311870][T11204] bridge_slave_1: left promiscuous mode [ 260.317698][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.329918][T11210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2323'. [ 260.340464][T11204] bond0: (slave bond_slave_0): Releasing backup interface [ 260.356246][T11204] bond0: (slave bond_slave_1): Releasing backup interface [ 260.394949][T11202] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.431064][T11199] loop5: detected capacity change from 0 to 32768 [ 260.464180][T11202] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.476109][T11199] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 260.494043][T11199] loop5: p1 start 460800 is beyond EOD, truncated [ 260.500548][T11199] loop5: p2 size 83886080 extends beyond EOD, truncated [ 260.523998][T11222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.543055][T11199] loop5: p5 start 460800 is beyond EOD, truncated [ 260.549587][T11199] loop5: p6 size 83886080 extends beyond EOD, truncated [ 260.557667][ T3702] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.586127][ T3702] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.614113][ T3702] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.644670][ T3702] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.679888][ T3004] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 260.685652][ T3004] loop5: p1 start 460800 is beyond EOD, truncated [ 260.692105][ T3004] loop5: p2 size 83886080 extends beyond EOD, truncated [ 260.701585][ T3004] loop5: p5 start 460800 is beyond EOD, truncated [ 260.708193][ T3004] loop5: p6 size 83886080 extends beyond EOD, truncated [ 260.831287][ T7925] udevd[7925]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 260.831304][ T7805] udevd[7805]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 260.845264][ T8847] udevd[8847]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 260.855001][ T8555] udevd[8555]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 261.044398][T11229] loop5: detected capacity change from 0 to 512 [ 261.053528][T11229] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 261.085376][T11229] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2328: bg 0: block 255: padding at end of block bitmap is not set [ 261.151823][T11235] netlink: 'syz.1.2330': attribute type 6 has an invalid length. [ 261.160259][T11229] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 261.195893][T11229] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2328: invalid indirect mapped block 1 (level 1) [ 261.234736][T11229] EXT4-fs (loop5): 1 truncate cleaned up [ 261.261671][T11229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.309642][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.505701][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 261.620753][T11246] lo speed is unknown, defaulting to 1000 [ 261.627258][T11246] lo speed is unknown, defaulting to 1000 [ 262.116369][T11247] netlink: 'syz.3.2342': attribute type 2 has an invalid length. [ 262.335731][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 262.344916][T11250] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2334'. [ 262.385538][T11232] Set syz1 is full, maxelem 65536 reached [ 262.408301][ T36] IPVS: starting estimator thread 0... [ 262.463399][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 262.463416][ T29] audit: type=1326 audit(1767597083.721:52064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.520292][T11259] tipc: Enabling of bearer rejected, failed to enable media [ 262.529375][T11256] IPVS: using max 2112 ests per chain, 105600 per kthread [ 262.541890][ T29] audit: type=1326 audit(1767597083.762:52065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.565729][ T29] audit: type=1326 audit(1767597083.762:52066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.589518][ T29] audit: type=1326 audit(1767597083.762:52067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.613160][ T29] audit: type=1326 audit(1767597083.762:52068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.636865][ T29] audit: type=1326 audit(1767597083.762:52069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.660529][ T29] audit: type=1326 audit(1767597083.762:52070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.684067][ T29] audit: type=1326 audit(1767597083.762:52071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.707820][ T29] audit: type=1326 audit(1767597083.762:52072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 262.727588][T11262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11262 comm=syz.5.2336 [ 262.731568][ T29] audit: type=1326 audit(1767597083.762:52073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11257 comm="syz.1.2337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc257b6df90 code=0x7ffc0000 [ 262.814765][T11259] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 263.397283][T11295] netlink: 'syz.5.2348': attribute type 6 has an invalid length. [ 264.261808][T11317] netlink: 'syz.5.2364': attribute type 6 has an invalid length. [ 264.673714][T11319] __nla_validate_parse: 6 callbacks suppressed [ 264.673735][T11319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2356'. [ 264.711267][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 264.761431][T11327] tipc: Enabling of bearer rejected, failed to enable media [ 264.794504][T11327] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 264.802428][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 264.956258][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2359'. [ 265.039467][T11346] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 265.057847][T11346] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 265.082449][T11346] 9pnet_virtio: no channels available for device syz [ 265.146223][T11353] Cannot find add_set index 0 as target [ 265.153337][T11353] tipc: Enabling of bearer rejected, failed to enable media [ 265.167409][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 265.176519][T11359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2369'. [ 265.341616][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 265.379075][T11367] gtp0: entered promiscuous mode [ 265.765118][T11376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2374'. [ 265.770321][T11380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2376'. [ 265.785826][T11380] netlink: 'syz.5.2376': attribute type 30 has an invalid length. [ 265.818721][T11381] netlink: 'syz.2.2375': attribute type 6 has an invalid length. [ 265.886068][T11380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=11380 comm=syz.5.2376 [ 265.939952][T11386] loop5: detected capacity change from 0 to 512 [ 265.950790][T11386] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 265.965683][T11386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2377: bg 0: block 255: padding at end of block bitmap is not set [ 265.983048][T11386] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 265.992527][T11386] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2377: invalid indirect mapped block 1 (level 1) [ 266.006659][T11386] EXT4-fs (loop5): 1 truncate cleaned up [ 266.013262][T11386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.044306][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.290982][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 266.415521][T11409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11409 comm=syz.5.2384 [ 266.431573][T11408] loop0: detected capacity change from 0 to 512 [ 266.487675][T11408] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.503073][T11408] EXT4-fs (loop0): mount failed [ 266.573405][T11408] tipc: Cannot configure node identity twice [ 266.727903][T11403] Set syz1 is full, maxelem 65536 reached [ 267.065434][T11419] bond0: option ad_user_port_key: invalid value (1136) [ 267.072486][T11419] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 267.083562][T11419] bond0 (unregistering): Released all slaves [ 267.105247][T11429] loop0: detected capacity change from 0 to 1024 [ 267.111962][T11429] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 267.292609][T11444] siw: device registration error -23 [ 267.397277][T11449] blktrace: Concurrent blktraces are not allowed on loop2 [ 267.408347][T11438] loop5: detected capacity change from 0 to 32768 [ 267.439652][T11438] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 267.446575][T11438] loop5: p1 start 460800 is beyond EOD, truncated [ 267.453121][T11438] loop5: p2 size 83886080 extends beyond EOD, truncated [ 267.488438][T11438] loop5: p5 start 460800 is beyond EOD, truncated [ 267.494948][T11438] loop5: p6 size 83886080 extends beyond EOD, truncated [ 267.607114][T11456] lo speed is unknown, defaulting to 1000 [ 267.633645][T11456] lo speed is unknown, defaulting to 1000 [ 267.921252][T11475] loop0: detected capacity change from 0 to 2048 [ 267.986782][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 267.986799][ T29] audit: type=1326 audit(1767597089.515:52922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.029191][T11479] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 268.045833][T11475] EXT4-fs (loop0): failed to initialize system zone (-117) [ 268.053772][ T29] audit: type=1326 audit(1767597089.557:52923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.067159][T11475] EXT4-fs (loop0): mount failed [ 268.077814][ T29] audit: type=1326 audit(1767597089.557:52924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.106065][ T29] audit: type=1326 audit(1767597089.557:52925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.129685][ T29] audit: type=1326 audit(1767597089.557:52926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.153437][ T29] audit: type=1326 audit(1767597089.557:52927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.177337][ T29] audit: type=1326 audit(1767597089.557:52928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.200970][ T29] audit: type=1326 audit(1767597089.557:52929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.224591][ T29] audit: type=1326 audit(1767597089.557:52930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.248369][ T29] audit: type=1326 audit(1767597089.557:52931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11478 comm="syz.2.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 268.602958][T11494] loop0: detected capacity change from 0 to 512 [ 268.616496][T11494] ext4: Unknown parameter 'subj_role' [ 268.798470][T11515] 0ªX¹¦À: renamed from 61ªX¹¦À [ 268.805673][T11515] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 268.824866][T11515] bond_slave_0: Caught tx_queue_len zero misconfig [ 268.832964][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.841851][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.912425][T11522] netlink: 'syz.2.2419': attribute type 14 has an invalid length. [ 268.924196][T11522] netlink: 'syz.2.2419': attribute type 14 has an invalid length. [ 268.924245][ T3718] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.924533][ T3718] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.951921][ T3718] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.972423][ T3718] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.083731][T11530] netlink: 'syz.2.2421': attribute type 6 has an invalid length. [ 269.389843][T11536] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.494551][T11544] __nla_validate_parse: 16 callbacks suppressed [ 269.494569][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 269.687432][T11556] loop5: detected capacity change from 0 to 4096 [ 269.697234][T11556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.725079][T11556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.751647][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 269.760774][T11556] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.784019][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.071834][T11573] netlink: 'syz.3.2433': attribute type 6 has an invalid length. [ 270.237197][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 270.247329][T11577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2435'. [ 270.330586][T11580] loop0: detected capacity change from 0 to 164 [ 270.411999][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2439'. [ 270.443879][T11587] bio_check_eod: 6 callbacks suppressed [ 270.443899][T11587] syz.0.2437: attempt to access beyond end of device [ 270.443899][T11587] loop0: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 270.467946][T11587] syz.0.2437: attempt to access beyond end of device [ 270.467946][T11587] loop0: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 270.594429][T11591] netlink: 'syz.1.2440': attribute type 6 has an invalid length. [ 270.805784][T11595] loop5: detected capacity change from 0 to 1024 [ 270.813207][T11595] EXT4-fs: inline encryption not supported [ 270.831746][T11595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.900848][T11606] pim6reg9: entered allmulticast mode [ 271.486206][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.646619][T11623] lo speed is unknown, defaulting to 1000 [ 271.663719][T11623] lo speed is unknown, defaulting to 1000 [ 271.783533][T11626] bond1: option xmit_hash_policy: invalid value (8) [ 271.791397][T11626] bond1 (unregistering): Released all slaves [ 272.319210][T11660] loop5: detected capacity change from 0 to 512 [ 272.334351][T11660] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 272.354447][T11660] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2457: bg 0: block 255: padding at end of block bitmap is not set [ 272.389510][T11663] loop0: detected capacity change from 0 to 128 [ 272.403537][T11663] vfat: Unknown parameter '18446744073709551615ÿÿ' [ 272.441942][T11660] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 272.497911][T11660] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2457: invalid indirect mapped block 1 (level 1) [ 272.525114][T11660] EXT4-fs (loop5): 1 truncate cleaned up [ 272.542088][T11665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 272.547539][T11660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.801449][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.832397][ T29] kauditd_printk_skb: 851 callbacks suppressed [ 272.832415][ T29] audit: type=1326 audit(1767597094.607:53783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.844116][T11683] netlink: 'syz.3.2461': attribute type 6 has an invalid length. [ 272.863004][ T29] audit: type=1326 audit(1767597094.607:53784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.894167][ T29] audit: type=1326 audit(1767597094.607:53785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.918234][ T29] audit: type=1326 audit(1767597094.607:53786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.942856][ T29] audit: type=1326 audit(1767597094.607:53787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.966751][ T29] audit: type=1326 audit(1767597094.607:53788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 272.990493][ T29] audit: type=1326 audit(1767597094.607:53789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 273.014405][ T29] audit: type=1326 audit(1767597094.607:53790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 273.038224][ T29] audit: type=1326 audit(1767597094.607:53791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 273.061959][ T29] audit: type=1326 audit(1767597094.607:53792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f802866df90 code=0x7ffc0000 [ 273.478949][T11670] Set syz1 is full, maxelem 65536 reached [ 273.564079][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2466'. [ 273.644181][T11702] netlink: 'syz.2.2467': attribute type 6 has an invalid length. [ 273.748641][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'. [ 273.764743][T11700] bond1: option ad_user_port_key: invalid value (1136) [ 273.771806][T11700] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 273.780018][T11700] bond1 (unregistering): Released all slaves [ 273.787585][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2469'. [ 273.797434][T11709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2469'. [ 273.807748][T11704] loop5: detected capacity change from 0 to 1024 [ 273.815010][T11704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 274.287499][T11722] macvtap1: entered promiscuous mode [ 274.293236][T11722] macvtap1: entered allmulticast mode [ 274.299533][T11722] netdevsim netdevsim5 eth3: entered allmulticast mode [ 274.307241][T11722] netdevsim netdevsim5 eth3: entered promiscuous mode [ 274.315173][T11722] team0: Device macvtap1 failed to register rx_handler [ 274.332818][T11723] sd 0:0:1:0: device reset [ 274.338493][T11722] netdevsim netdevsim5 eth3: left allmulticast mode [ 274.345759][T11722] netdevsim netdevsim5 eth3: left promiscuous mode [ 274.410621][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 274.423616][T11727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2475'. [ 274.448558][T11728] netlink: 'syz.1.2474': attribute type 6 has an invalid length. [ 274.467904][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 274.477093][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'. [ 274.560914][T11737] loop0: detected capacity change from 0 to 512 [ 274.576741][T11737] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 274.585728][T11737] EXT4-fs (loop0): orphan cleanup on readonly fs [ 274.594654][T11737] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.2478: corrupted inode contents [ 274.606989][T11737] EXT4-fs (loop0): Remounting filesystem read-only [ 274.614218][T11737] EXT4-fs (loop0): 1 truncate cleaned up [ 274.620091][ T850] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.630818][ T850] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.641724][ T850] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 274.652839][T11737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.969542][T11747] lo speed is unknown, defaulting to 1000 [ 274.976494][T11747] lo speed is unknown, defaulting to 1000 [ 275.593000][T11750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.646078][T11750] loop5: detected capacity change from 0 to 128 [ 275.686153][T11750] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.745224][T11750] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.789969][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.804015][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 275.845583][T11764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2487'. [ 275.881443][T11765] syz.2.2486: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 275.896146][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.2.2486 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.896215][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.896235][T11765] Call Trace: [ 275.896247][T11765] [ 275.896256][T11765] __dump_stack+0x1d/0x30 [ 275.896286][T11765] dump_stack_lvl+0x95/0xd0 [ 275.896311][T11765] dump_stack+0x15/0x1b [ 275.896359][T11765] warn_alloc+0x12b/0x1a0 [ 275.896387][T11765] ? __schedule+0x85f/0xcd0 [ 275.896414][T11765] ? __rcu_read_unlock+0x4f/0x70 [ 275.896437][T11765] __vmalloc_node_range_noprof+0xa0/0x1310 [ 275.896497][T11765] ? __futex_wait+0x1fa/0x260 [ 275.896519][T11765] ? __pfx_futex_wake_mark+0x10/0x10 [ 275.896563][T11765] ? __rcu_read_unlock+0x4f/0x70 [ 275.896584][T11765] ? avc_has_perm_noaudit+0xab/0x130 [ 275.896629][T11765] ? should_fail_ex+0x30/0x280 [ 275.896665][T11765] ? should_failslab+0x8c/0xb0 [ 275.896690][T11765] vmalloc_user_noprof+0x7d/0xb0 [ 275.896719][T11765] ? xskq_create+0x80/0xe0 [ 275.896755][T11765] xskq_create+0x80/0xe0 [ 275.896792][T11765] xsk_init_queue+0x95/0xf0 [ 275.896837][T11765] xsk_setsockopt+0x3f5/0x640 [ 275.896867][T11765] ? __pfx_xsk_setsockopt+0x10/0x10 [ 275.896935][T11765] __sys_setsockopt+0x184/0x200 [ 275.896971][T11765] __x64_sys_setsockopt+0x64/0x80 [ 275.897006][T11765] x64_sys_call+0x21d5/0x3000 [ 275.897075][T11765] do_syscall_64+0xca/0x2b0 [ 275.897142][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.897251][T11765] RIP: 0033:0x7f6957ddf749 [ 275.897268][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.897289][T11765] RSP: 002b:00007f695683f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.897315][T11765] RAX: ffffffffffffffda RBX: 00007f6958035fa0 RCX: 00007f6957ddf749 [ 275.897354][T11765] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 275.897370][T11765] RBP: 00007f6957e63f91 R08: 0000000000000004 R09: 0000000000000000 [ 275.897387][T11765] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.897403][T11765] R13: 00007f6958036038 R14: 00007f6958035fa0 R15: 00007ffee08a1c38 [ 275.897428][T11765] [ 276.116134][T11765] Mem-Info: [ 276.119282][T11765] active_anon:12746 inactive_anon:10212 isolated_anon:0 [ 276.119282][T11765] active_file:17001 inactive_file:7963 isolated_file:0 [ 276.119282][T11765] unevictable:20800 dirty:262 writeback:0 [ 276.119282][T11765] slab_reclaimable:3760 slab_unreclaimable:74492 [ 276.119282][T11765] mapped:32685 shmem:15406 pagetables:1714 [ 276.119282][T11765] sec_pagetables:0 bounce:0 [ 276.119282][T11765] kernel_misc_reclaimable:0 [ 276.119282][T11765] free:1676669 free_pcp:74826 free_cma:0 [ 276.119838][T11768] loop5: detected capacity change from 0 to 164 [ 276.165745][T11765] Node 0 active_anon:50984kB inactive_anon:40848kB active_file:68004kB inactive_file:31852kB unevictable:83200kB isolated(anon):0kB isolated(file):0kB mapped:130740kB dirty:1048kB writeback:0kB shmem:61624kB kernel_stack:4560kB pagetables:6856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.200121][T11765] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.229869][T11765] lowmem_reserve[]: 0 2880 7859 7859 [ 276.235316][T11765] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 276.266517][T11765] lowmem_reserve[]: 0 0 4978 4978 [ 276.271749][T11765] Node 0 Normal free:3745328kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50984kB inactive_anon:40848kB active_file:68004kB inactive_file:31852kB unevictable:83200kB writepending:1048kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:295764kB local_pcp:280040kB free_cma:0kB [ 276.306285][T11765] lowmem_reserve[]: 0 0 0 0 [ 276.310864][T11765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.323714][T11765] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 276.340149][T11765] Node 0 Normal: 714*4kB (UME) 1443*8kB (UME) 409*16kB (UM) 457*32kB (UM) 320*64kB (UME) 241*128kB (UM) 256*256kB (UME) 159*512kB (UM) 145*1024kB (UME) 66*2048kB (UME) 788*4096kB (UM) = 3745136kB [ 276.359790][T11765] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 276.369166][T11765] 61225 total pagecache pages [ 276.373922][T11765] 1058 pages in swap cache [ 276.378370][T11765] Free swap = 83720kB [ 276.382513][T11765] Total swap = 124996kB [ 276.386798][T11765] 2097051 pages RAM [ 276.390631][T11765] 0 pages HighMem/MovableOnly [ 276.395409][T11765] 81272 pages reserved [ 276.400677][T11772] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.426641][T11770] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2498'. [ 276.436330][T11768] syz.5.2488: attempt to access beyond end of device [ 276.436330][T11768] loop5: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 276.458477][T11768] syz.5.2488: attempt to access beyond end of device [ 276.458477][T11768] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 276.478113][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'. [ 276.479862][T11774] lo speed is unknown, defaulting to 1000 [ 276.494440][T11772] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.504839][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2489'. [ 276.519118][T11774] lo speed is unknown, defaulting to 1000 [ 276.585112][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2492'. [ 276.594976][T11784] 9p: Bad value for 'rfdno' [ 276.607787][T11784] loop0: detected capacity change from 0 to 512 [ 276.622503][T11772] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.630161][T11784] EXT4-fs: Ignoring removed bh option [ 276.656243][T11784] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 276.776858][T11800] netlink: 'syz.5.2493': attribute type 6 has an invalid length. [ 276.808762][T11772] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.944726][T11799] loop0: detected capacity change from 0 to 512 [ 277.249280][ T3740] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.282013][ T3740] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.333677][ T3740] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.359838][ T3740] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.488579][T11799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.579736][T11799] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.904641][T11816] ip6t_srh: unknown srh invflags 4000 [ 277.931360][T11818] netlink: 'syz.5.2497': attribute type 6 has an invalid length. [ 277.944736][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 277.944770][ T29] audit: type=1326 audit(1767597099.961:54161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 277.974802][ T29] audit: type=1326 audit(1767597099.961:54162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 277.998431][ T29] audit: type=1326 audit(1767597099.961:54163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.022650][ T29] audit: type=1326 audit(1767597099.961:54164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.046340][ T29] audit: type=1326 audit(1767597099.961:54165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.070096][ T29] audit: type=1326 audit(1767597099.961:54166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.093791][ T29] audit: type=1326 audit(1767597099.961:54167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.117484][ T29] audit: type=1326 audit(1767597099.961:54168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.141103][ T29] audit: type=1326 audit(1767597099.961:54169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 278.164890][ T29] audit: type=1326 audit(1767597099.961:54170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb837f7df90 code=0x7ffc0000 [ 278.218925][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.347364][T11829] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.358768][T11831] netlink: 'syz.0.2503': attribute type 14 has an invalid length. [ 278.370488][ T52] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.370515][T11831] netlink: 'syz.0.2503': attribute type 14 has an invalid length. [ 278.379432][ T52] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.399132][T11829] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.421538][ T52] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.431146][ T52] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.451803][T11829] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.462384][T11820] netlink: 'syz.3.2501': attribute type 13 has an invalid length. [ 278.509658][T11829] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.562893][ T850] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.575506][ T850] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.587903][ T850] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.596455][T11843] netlink: 'syz.0.2515': attribute type 13 has an invalid length. [ 278.618907][T11843] gretap0: refused to change device tx_queue_len [ 278.631120][T11843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 278.647103][ T9] lo speed is unknown, defaulting to 1000 [ 278.653038][ T9] sz1: Port: 1 Link ACTIVE [ 278.657950][ T850] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.666918][ T9] lo speed is unknown, defaulting to 1000 [ 278.711599][T11846] $Hÿ: renamed from bond0 [ 278.718436][T11846] $Hÿ: entered promiscuous mode [ 278.876806][T11853] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 279.196554][T11862] __nla_validate_parse: 5 callbacks suppressed [ 279.196594][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 279.268938][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 279.577431][T11889] netlink: 'syz.3.2517': attribute type 6 has an invalid length. [ 279.596834][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 279.650056][T11892] pim6reg: entered allmulticast mode [ 279.678916][T11890] pim6reg: left allmulticast mode [ 279.697207][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2520'. [ 279.976921][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2521'. [ 279.999522][T11921] netlink: 'syz.5.2522': attribute type 6 has an invalid length. [ 280.022555][T11920] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 280.480445][T11983] netlink: 'syz.3.2523': attribute type 6 has an invalid length. [ 280.884153][T11996] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 280.904838][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.914971][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 281.042043][T11996] bond0 (unregistering): Released all slaves [ 281.112796][T12003] lo speed is unknown, defaulting to 1000 [ 281.119295][T12003] lo speed is unknown, defaulting to 1000 [ 281.528320][T12003] siw: device registration error -23 [ 281.781818][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 281.835550][T12017] netlink: 'syz.5.2533': attribute type 6 has an invalid length. [ 281.871946][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'. [ 281.882310][T12022] 9p: Bad value for 'wfdno' [ 282.060294][T12025] loop0: detected capacity change from 0 to 128 [ 282.078418][T12025] veth0: entered promiscuous mode [ 282.084972][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 282.094955][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'. [ 282.105496][T12025] veth0 (unregistering): left promiscuous mode [ 282.134747][T12016] lo speed is unknown, defaulting to 1000 [ 282.141174][T12016] lo speed is unknown, defaulting to 1000 [ 282.152790][T12028] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 282.160784][T12028] FAT-fs (loop0): Filesystem has been set read-only [ 282.408094][T12030] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 282.588297][T12025] ÿ: attempt to access beyond end of device [ 282.588297][T12025] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 282.601441][T12025] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 282.610872][T12025] ÿ: attempt to access beyond end of device [ 282.610872][T12025] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 282.623981][T12025] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 282.689179][T12035] netlink: 'syz.2.2539': attribute type 6 has an invalid length. [ 282.717774][ T29] kauditd_printk_skb: 972 callbacks suppressed [ 282.717789][ T29] audit: type=1326 audit(1767597112.986:55143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 282.751950][ T29] audit: type=1326 audit(1767597113.018:55144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12031 comm="syz.2.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7ffc0000 [ 282.905352][T12034] tipc: New replicast peer: 255.255.255.255 [ 282.911680][T12034] tipc: Enabled bearer , priority 10 [ 282.919576][T12034] tipc: Disabling bearer [ 283.086188][T12053] netlink: 'syz.5.2545': attribute type 6 has an invalid length. [ 283.094244][ T29] audit: type=1326 audit(1767597113.364:55145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.118023][ T29] audit: type=1326 audit(1767597113.364:55146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.141645][ T29] audit: type=1326 audit(1767597113.364:55147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.165358][ T29] audit: type=1326 audit(1767597113.364:55148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.189025][ T29] audit: type=1326 audit(1767597113.364:55149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.213094][ T29] audit: type=1326 audit(1767597113.364:55150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.236709][ T29] audit: type=1326 audit(1767597113.364:55151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.260318][ T29] audit: type=1326 audit(1767597113.364:55152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb837f7f749 code=0x7ffc0000 [ 283.317691][T12047] ip6tnl0: Caught tx_queue_len zero misconfig [ 283.323830][T12047] sch_fq: defrate 4294967295 ignored. [ 283.407573][T12059] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.453153][T12059] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.520184][T12059] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.557598][T12059] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.621017][ T3740] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.633610][ T3740] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.646405][ T3740] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.658990][ T3740] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.786494][T12072] netlink: 'syz.2.2550': attribute type 6 has an invalid length. [ 285.091081][T12085] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 285.107213][T12087] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 285.116228][T12085] netlink: 'syz.3.2552': attribute type 4 has an invalid length. [ 285.344922][T12073] lo speed is unknown, defaulting to 1000 [ 285.351199][T12073] lo speed is unknown, defaulting to 1000 [ 285.740602][T12102] netlink: 'syz.1.2558': attribute type 6 has an invalid length. [ 285.796854][T12109] __nla_validate_parse: 3 callbacks suppressed [ 285.796869][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2557'. [ 285.951580][T12111] lo speed is unknown, defaulting to 1000 [ 285.958587][T12111] lo speed is unknown, defaulting to 1000 [ 286.605921][T12121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2564'. [ 286.708846][T12122] lo speed is unknown, defaulting to 1000 [ 286.714984][T12122] lo speed is unknown, defaulting to 1000 [ 286.920912][T12121] xt_hashlimit: max too large, truncated to 1048576 [ 287.492490][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 287.492507][ T29] audit: type=1326 audit(1767597117.994:55470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.512866][T12126] netlink: 'syz.0.2565': attribute type 6 has an invalid length. [ 287.522358][ T29] audit: type=1326 audit(1767597117.994:55471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.553743][ T29] audit: type=1326 audit(1767597117.994:55472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.633052][ T29] audit: type=1326 audit(1767597118.004:55473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.656623][ T29] audit: type=1326 audit(1767597118.004:55474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.680440][ T29] audit: type=1326 audit(1767597118.004:55475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.704059][ T29] audit: type=1326 audit(1767597118.004:55476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.727845][ T29] audit: type=1326 audit(1767597118.004:55477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.751541][ T29] audit: type=1326 audit(1767597118.004:55478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.775312][ T29] audit: type=1326 audit(1767597118.004:55479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.0.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0994caf749 code=0x7ffc0000 [ 287.965769][T12135] siw: device registration error -23 [ 287.988962][T12141] lo speed is unknown, defaulting to 1000 [ 287.995373][T12141] lo speed is unknown, defaulting to 1000 [ 288.309205][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 288.328699][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 288.370728][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 288.876539][T12169] netlink: 'syz.0.2574': attribute type 6 has an invalid length. [ 289.078841][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2577'. [ 289.099576][T12178] netlink: 'syz.0.2579': attribute type 6 has an invalid length. [ 289.152054][T12173] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2577'. [ 289.205914][T12182] netlink: 'syz.2.2578': attribute type 6 has an invalid length. [ 289.772616][T12201] loop0: detected capacity change from 0 to 2048 [ 289.922020][T12201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 290.043768][T12207] lo speed is unknown, defaulting to 1000 [ 290.050785][T12207] lo speed is unknown, defaulting to 1000 [ 290.618223][T12201] netlink: 'syz.0.2584': attribute type 3 has an invalid length. [ 290.763614][T12218] rdma_rxe: rxe_newlink: failed to add lo [ 290.864639][T12217] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.913274][T12217] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 124 with max blocks 204 with error 28 [ 290.926040][T12217] EXT4-fs (loop0): This should not happen!! Data will be lost [ 290.926040][T12217] [ 290.935860][T12217] EXT4-fs (loop0): Total free blocks count 0 [ 290.941977][T12217] EXT4-fs (loop0): Free/Dirty block details [ 290.947916][T12217] EXT4-fs (loop0): free_blocks=2415919104 [ 290.953677][T12217] EXT4-fs (loop0): dirty_blocks=336 [ 290.959058][T12217] EXT4-fs (loop0): Block reservation details [ 290.965166][T12217] EXT4-fs (loop0): i_reserved_data_blocks=21 [ 291.013562][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 291.031602][T12233] loop5: detected capacity change from 0 to 164 [ 291.038651][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2590'. [ 291.121409][ T3718] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 291.212101][T12244] syz.5.2592: attempt to access beyond end of device [ 291.212101][T12244] loop5: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 291.242839][T12244] syz.5.2592: attempt to access beyond end of device [ 291.242839][T12244] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 291.261681][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 291.271888][T12247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2594'. [ 291.486855][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 291.564327][T12253] bond1: option ad_user_port_key: invalid value (1136) [ 291.571337][T12253] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 291.579246][T12253] bond1 (unregistering): Released all slaves [ 291.625368][ T3396] Process accounting resumed [ 291.972489][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 291.993324][T12270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2604'. [ 292.039898][T12264] blktrace: Concurrent blktraces are not allowed on loop2 [ 292.059080][T12273] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 292.181369][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'. [ 292.191068][T12281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'. [ 292.205231][T12282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.239935][T12284] loop5: detected capacity change from 0 to 512 [ 292.247093][T12284] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 292.259503][T12284] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2607: bg 0: block 255: padding at end of block bitmap is not set [ 292.274955][T12284] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 292.284444][T12284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2607: invalid indirect mapped block 1 (level 1) [ 292.300264][T12284] EXT4-fs (loop5): 1 truncate cleaned up [ 292.310112][T12284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.327452][ T29] kauditd_printk_skb: 1584 callbacks suppressed [ 292.327468][ T29] audit: type=1326 audit(1767597123.065:57064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.2.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6957ddf749 code=0x7fc00000 [ 292.384481][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 292.394967][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.426847][T12294] loop5: detected capacity change from 0 to 512 [ 292.434657][T12294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 292.446407][T12294] EXT4-fs (loop5): 1 truncate cleaned up [ 292.453135][T12294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.505625][ T29] audit: type=1326 audit(1767597123.253:57065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.529498][ T29] audit: type=1326 audit(1767597123.253:57066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.553506][ T29] audit: type=1326 audit(1767597123.253:57067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.577237][ T29] audit: type=1326 audit(1767597123.253:57068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.601005][ T29] audit: type=1326 audit(1767597123.253:57069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.624713][ T29] audit: type=1326 audit(1767597123.253:57070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.648378][ T29] audit: type=1326 audit(1767597123.253:57071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.672105][ T29] audit: type=1326 audit(1767597123.253:57072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.695776][ T29] audit: type=1326 audit(1767597123.253:57073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.1.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc257b6f749 code=0x7ffc0000 [ 292.767967][T12294] lo speed is unknown, defaulting to 1000 [ 292.800133][T12294] lo speed is unknown, defaulting to 1000 [ 293.021484][T12310] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.128065][T12312] bond0: option ad_user_port_key: invalid value (1136) [ 293.135085][T12312] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 293.176906][T12312] bond0 (unregistering): Released all slaves [ 293.188112][T12310] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.221406][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.266142][T12310] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.276904][T12323] loop0: detected capacity change from 0 to 512 [ 293.284028][T12323] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 293.294335][T12323] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2619: bg 0: block 255: padding at end of block bitmap is not set [ 293.312055][T12323] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 293.321349][T12323] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2619: invalid indirect mapped block 1 (level 1) [ 293.337022][T12323] EXT4-fs (loop0): 1 truncate cleaned up [ 293.343305][T12323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.483298][T12310] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.484135][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.648657][ T3741] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.666174][ T3741] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.698901][ T3741] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.783507][T12342] lo speed is unknown, defaulting to 1000 [ 293.790520][T12342] lo speed is unknown, defaulting to 1000 [ 294.208168][T12342] siw: device registration error -23 [ 294.386384][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.490859][T12351] unsupported nlmsg_type 40 [ 294.763819][T12370] loop5: detected capacity change from 0 to 256 [ 294.870360][T12369] lo speed is unknown, defaulting to 1000 [ 294.889860][T12369] lo speed is unknown, defaulting to 1000 [ 295.278939][T12371] netlink: 'syz.3.2641': attribute type 2 has an invalid length. [ 295.848662][T12410] netlink: 'syz.5.2637': attribute type 6 has an invalid length. [ 296.272655][T12369] Set syz1 is full, maxelem 65536 reached [ 296.611606][T12432] __nla_validate_parse: 13 callbacks suppressed [ 296.611624][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 296.627476][T12432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2645'. [ 296.691165][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2646'. [ 296.762335][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2649'. [ 296.765603][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 296.787138][T12441] bond0: entered promiscuous mode [ 296.931787][T12452] netlink: 'syz.2.2652': attribute type 6 has an invalid length. [ 297.095100][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 297.095205][ T29] audit: type=1326 audit(1767597136.077:57813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.125636][ T29] audit: type=1326 audit(1767597136.108:57814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.149858][ T29] audit: type=1326 audit(1767597136.140:57815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.200497][ T29] audit: type=1326 audit(1767597136.161:57816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.3.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.229093][ T29] audit: type=1326 audit(1767597136.224:57817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.256620][ T29] audit: type=1326 audit(1767597136.224:57818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.280465][ T29] audit: type=1326 audit(1767597136.224:57819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.304200][ T29] audit: type=1326 audit(1767597136.224:57820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.327900][ T29] audit: type=1326 audit(1767597136.224:57821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.351510][ T29] audit: type=1326 audit(1767597136.224:57822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12456 comm="syz.3.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 297.498922][T12464] netlink: 'syz.5.2656': attribute type 6 has an invalid length. [ 297.607745][T12467] netlink: 'syz.3.2657': attribute type 6 has an invalid length. [ 297.622607][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 297.631768][T12469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2658'. [ 297.981684][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'. [ 298.169215][T12479] lo speed is unknown, defaulting to 1000 [ 298.176506][T12479] lo speed is unknown, defaulting to 1000 [ 298.615114][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2662'. [ 298.638971][T12487] loop5: detected capacity change from 0 to 1024 [ 298.661394][T12487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.682997][T12487] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2663: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 298.730705][T12487] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.2663: reserved inode found cleared - inode=2 [ 298.768452][T12487] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2663: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 298.789524][T12496] veth0: entered promiscuous mode [ 298.790365][T12487] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2663: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 298.808819][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 298.819534][T12487] netlink: 'syz.5.2663': attribute type 11 has an invalid length. [ 298.832413][T12496] veth0 (unregistering): left promiscuous mode [ 298.869208][T12487] EXT4-fs error (device loop5): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.5.2663: path /155/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 299.185008][ T8685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.224532][T12510] netlink: 'syz.0.2669': attribute type 6 has an invalid length. [ 299.302157][T12511] lo speed is unknown, defaulting to 1000 [ 299.308271][T12511] lo speed is unknown, defaulting to 1000 [ 299.797796][T12525] Invalid argument reading file caps for ./file0 [ 300.014626][T12528] netlink: 'syz.0.2685': attribute type 10 has an invalid length. [ 300.054819][T12528] netlink: 'syz.0.2685': attribute type 10 has an invalid length. [ 300.503384][T12534] netlink: 'syz.2.2676': attribute type 2 has an invalid length. [ 300.511252][T12534] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 300.593366][T12546] lo speed is unknown, defaulting to 1000 [ 300.647513][T12546] lo speed is unknown, defaulting to 1000 [ 300.670977][T12548] loop5: detected capacity change from 0 to 512 [ 300.799196][T12551] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 300.839302][T12551] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 301.037599][T12559] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 301.169736][T12568] veth0: entered promiscuous mode [ 301.180153][T12568] veth0 (unregistering): left promiscuous mode [ 301.335866][T12577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.534671][T12581] lo speed is unknown, defaulting to 1000 [ 301.541195][T12581] lo speed is unknown, defaulting to 1000 [ 301.991213][T12584] __nla_validate_parse: 13 callbacks suppressed [ 301.991233][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 302.074562][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 302.237116][T12589] loop0: detected capacity change from 0 to 128 [ 302.263452][T12589] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.264643][ T29] kauditd_printk_skb: 746 callbacks suppressed [ 302.264685][ T29] audit: type=1326 audit(1767597141.494:58569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.298861][T12589] ext4 filesystem being mounted at /485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.305649][ T29] audit: type=1326 audit(1767597141.494:58570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.361361][ T29] audit: type=1326 audit(1767597141.494:58571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.385057][ T29] audit: type=1326 audit(1767597141.494:58572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.408664][ T29] audit: type=1326 audit(1767597141.494:58573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.432349][ T29] audit: type=1326 audit(1767597141.494:58574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.455990][ T29] audit: type=1326 audit(1767597141.494:58575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.459541][T12599] validate_nla: 2 callbacks suppressed [ 302.459585][T12599] netlink: 'syz.5.2692': attribute type 10 has an invalid length. [ 302.480070][ T29] audit: type=1326 audit(1767597141.494:58576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.490878][T12599] team0: Port device dummy0 added [ 302.493059][ T29] audit: type=1326 audit(1767597141.494:58577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.545319][ T29] audit: type=1326 audit(1767597141.494:58578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12587 comm="syz.3.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802866f749 code=0x7ffc0000 [ 302.554216][T12598] netlink: 'syz.5.2692': attribute type 10 has an invalid length. [ 302.587900][T12597] netlink: 8 bytes leftover after parsing attributes in process `'. [ 302.600074][T12597] netlink: 8 bytes leftover after parsing attributes in process `'. [ 302.650224][T12603] syz!: rxe_newlink: already configured on team_slave_0 [ 302.701179][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2692'. [ 302.710559][T12598] team0: Port device dummy0 removed [ 302.765192][T12598] dummy0: entered promiscuous mode [ 302.787784][T12598] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 302.802172][T12597] netlink: 8 bytes leftover after parsing attributes in process `'. [ 302.816500][T12597] netlink: 8 bytes leftover after parsing attributes in process `'. [ 302.855466][T12588] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.856884][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2694'. [ 302.900337][T12606] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2694'. [ 302.945683][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 302.956303][T12614] netlink: 'syz.0.2697': attribute type 39 has an invalid length. [ 302.990333][T12619] loop5: detected capacity change from 0 to 128 [ 303.000858][T12619] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.013932][T12619] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.028436][T12619] raw_sendmsg: syz.5.2699 forgot to set AF_INET. Fix it! [ 303.107794][T12622] syzkaller0: entered promiscuous mode [ 303.113396][T12622] syzkaller0: entered allmulticast mode [ 303.506135][T12643] IPVS: Unknown mcast interface: hsr0 [ 303.526585][T12643] lo speed is unknown, defaulting to 1000 [ 303.536960][T12643] lo speed is unknown, defaulting to 1000 [ 303.564564][T12647] set match dimension is over the limit! [ 303.582681][T12649] bridge5: entered promiscuous mode [ 303.588204][T12649] bridge5: entered allmulticast mode [ 303.627638][T12652] netlink: zone id is out of range [ 303.632937][T12652] netlink: zone id is out of range [ 303.638361][T12652] netlink: zone id is out of range [ 303.643521][T12652] netlink: zone id is out of range [ 303.648750][T12652] netlink: zone id is out of range [ 303.653932][T12652] netlink: zone id is out of range [ 303.659132][T12652] netlink: zone id is out of range [ 303.664791][T12652] netlink: zone id is out of range [ 303.669954][T12652] netlink: zone id is out of range [ 303.675258][T12652] netlink: zone id is out of range [ 303.740885][T12652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=12652 comm=syz.3.2708 [ 303.826800][T12657] Process accounting resumed [ 304.134101][T12675] netlink: 'syz.5.2713': attribute type 6 has an invalid length. [ 304.245157][T12684] tipc: New replicast peer: 255.255.255.83 [ 304.251138][T12684] tipc: Enabled bearer , priority 10 [ 304.270810][T12684] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 304.421768][T12695] SET target dimension over the limit! [ 304.458508][T12697] bridge12: entered promiscuous mode [ 304.463894][T12697] bridge12: entered allmulticast mode [ 304.496663][T12703] 9p: Bad value for 'rfdno' [ 304.868463][T12726] netlink: 'syz.5.2731': attribute type 10 has an invalid length. [ 305.047452][T12737] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.217007][ T3529] tipc: Node number set to 2886997007 [ 305.271176][T12738] pim6reg: entered allmulticast mode [ 305.798415][T12759] netlink: 'syz.3.2741': attribute type 6 has an invalid length. [ 305.812583][T12731] syz.0.2735 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 305.823406][T12731] CPU: 0 UID: 0 PID: 12731 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.823437][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.823451][T12731] Call Trace: [ 305.823459][T12731] [ 305.823473][T12731] __dump_stack+0x1d/0x30 [ 305.823541][T12731] dump_stack_lvl+0x95/0xd0 [ 305.823568][T12731] dump_stack+0x15/0x1b [ 305.823594][T12731] dump_header+0x81/0x240 [ 305.823621][T12731] oom_kill_process+0x295/0x350 [ 305.823717][T12731] out_of_memory+0x97b/0xb80 [ 305.823745][T12731] try_charge_memcg+0x610/0xa10 [ 305.823804][T12731] charge_memcg+0x51/0xc0 [ 305.823844][T12731] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 305.823885][T12731] __read_swap_cache_async+0x17b/0x2d0 [ 305.823968][T12731] swap_cluster_readahead+0x362/0x3c0 [ 305.824003][T12731] swapin_readahead+0xde/0x820 [ 305.824033][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 305.824059][T12731] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 305.824136][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 305.824221][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 305.824240][T12731] ? swap_cache_get_folio+0x277/0x280 [ 305.824320][T12731] do_swap_page+0x2b4/0x21e0 [ 305.824481][T12731] ? _raw_spin_unlock+0x26/0x50 [ 305.824508][T12731] ? __schedule+0x85f/0xcd0 [ 305.824534][T12731] ? __pfx_default_wake_function+0x10/0x10 [ 305.824593][T12731] handle_mm_fault+0x9d8/0x2c60 [ 305.824640][T12731] do_user_addr_fault+0x630/0x1080 [ 305.824700][T12731] exc_page_fault+0x62/0xa0 [ 305.824777][T12731] asm_exc_page_fault+0x26/0x30 [ 305.824798][T12731] RIP: 0033:0x7f0994ce2008 [ 305.824813][T12731] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 305.824835][T12731] RSP: 002b:00007fffb4ba6b30 EFLAGS: 00010293 [ 305.824881][T12731] RAX: 0000000000000000 RBX: 00007f0994f05fa0 RCX: 00007f0994ce2005 [ 305.824894][T12731] RDX: 00007fffb4ba6b70 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.824906][T12731] RBP: 00007f0994f07da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 305.824922][T12731] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004b584 [ 305.824939][T12731] R13: 00007f0994f06090 R14: ffffffffffffffff R15: 00007fffb4ba6cb0 [ 305.824964][T12731] [ 305.824973][T12731] memory: usage 307200kB, limit 307200kB, failcnt 7344 [ 306.055093][T12731] memory+swap: usage 308032kB, limit 9007199254740988kB, failcnt 0 [ 306.063171][T12731] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 306.070507][T12731] Memory cgroup stats for /syz0: [ 306.070769][T12731] cache 0 [ 306.078744][T12731] rss 0 [ 306.081615][T12731] shmem 0 [ 306.084636][T12731] mapped_file 823296 [ 306.088547][T12731] dirty 0 [ 306.091500][T12731] writeback 0 [ 306.094846][T12731] workingset_refault_anon 6007 [ 306.099635][T12731] workingset_refault_file 1076 [ 306.104448][T12731] swap 851968 [ 306.107758][T12731] swapcached 0 [ 306.111155][T12731] pgpgin 339076 [ 306.114668][T12731] pgpgout 339076 [ 306.118232][T12731] pgfault 344644 [ 306.121827][T12731] pgmajfault 931 [ 306.125417][T12731] inactive_anon 0 [ 306.129048][T12731] active_anon 0 [ 306.132659][T12731] inactive_file 0 [ 306.136337][T12731] active_file 0 [ 306.139811][T12731] unevictable 0 [ 306.143352][T12731] hierarchical_memory_limit 314572800 [ 306.148745][T12731] hierarchical_memsw_limit 9223372036854771712 [ 306.154954][T12731] total_cache 0 [ 306.158455][T12731] total_rss 0 [ 306.161852][T12731] total_shmem 0 [ 306.165328][T12731] total_mapped_file 823296 [ 306.169801][T12731] total_dirty 0 [ 306.173273][T12731] total_writeback 0 [ 306.177085][T12731] total_workingset_refault_anon 6007 [ 306.182447][T12731] total_workingset_refault_file 1076 [ 306.187812][T12731] total_swap 851968 [ 306.191667][T12731] total_swapcached 0 [ 306.195612][T12731] total_pgpgin 339076 [ 306.199660][T12731] total_pgpgout 339076 [ 306.203785][T12731] total_pgfault 344644 [ 306.207929][T12731] total_pgmajfault 931 [ 306.212078][T12731] total_inactive_anon 0 [ 306.216287][T12731] total_active_anon 0 [ 306.220312][T12731] total_inactive_file 0 [ 306.224529][T12731] total_active_file 0 [ 306.228606][T12731] total_unevictable 0 [ 306.232607][T12731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.267,pid=4589,uid=0 [ 306.247210][T12731] Memory cgroup out of memory: Killed process 4589 (syz.0.267) total-vm:96952kB, anon-rss:1184kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 306.319589][T12731] syz.0.2735 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 306.330413][T12731] CPU: 0 UID: 0 PID: 12731 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.330443][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.330459][T12731] Call Trace: [ 306.330467][T12731] [ 306.330477][T12731] __dump_stack+0x1d/0x30 [ 306.330576][T12731] dump_stack_lvl+0x95/0xd0 [ 306.330603][T12731] dump_stack+0x15/0x1b [ 306.330684][T12731] dump_header+0x81/0x240 [ 306.330717][T12731] oom_kill_process+0x295/0x350 [ 306.330747][T12731] out_of_memory+0x97b/0xb80 [ 306.330841][T12731] try_charge_memcg+0x610/0xa10 [ 306.330884][T12731] charge_memcg+0x51/0xc0 [ 306.330973][T12731] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 306.331010][T12731] __read_swap_cache_async+0x17b/0x2d0 [ 306.331050][T12731] swap_cluster_readahead+0x362/0x3c0 [ 306.331086][T12731] swapin_readahead+0xde/0x820 [ 306.331194][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 306.331220][T12731] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 306.331246][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 306.331265][T12731] ? __rcu_read_unlock+0x4f/0x70 [ 306.331301][T12731] ? swap_cache_get_folio+0x277/0x280 [ 306.331360][T12731] do_swap_page+0x2b4/0x21e0 [ 306.331395][T12731] ? _raw_spin_unlock+0x26/0x50 [ 306.331420][T12731] ? __schedule+0x85f/0xcd0 [ 306.331449][T12731] ? __pfx_default_wake_function+0x10/0x10 [ 306.331558][T12731] handle_mm_fault+0x9d8/0x2c60 [ 306.331620][T12731] do_user_addr_fault+0x630/0x1080 [ 306.331661][T12731] exc_page_fault+0x62/0xa0 [ 306.331741][T12731] asm_exc_page_fault+0x26/0x30 [ 306.331766][T12731] RIP: 0033:0x7f0994ce2008 [ 306.331927][T12731] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 306.331944][T12731] RSP: 002b:00007fffb4ba6b30 EFLAGS: 00010293 [ 306.331960][T12731] RAX: 0000000000000000 RBX: 00007f0994f05fa0 RCX: 00007f0994ce2005 [ 306.331975][T12731] RDX: 00007fffb4ba6b70 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.331991][T12731] RBP: 00007f0994f07da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 306.332008][T12731] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004b584 [ 306.332024][T12731] R13: 00007f0994f06090 R14: ffffffffffffffff R15: 00007fffb4ba6cb0 [ 306.332170][T12731] [ 306.554640][T12731] memory: usage 307200kB, limit 307200kB, failcnt 7454 [ 306.561590][T12731] memory+swap: usage 307836kB, limit 9007199254740988kB, failcnt 0 [ 306.569802][T12731] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 306.577103][T12731] Memory cgroup stats for /syz0: [ 306.578878][T12731] cache 0 [ 306.586892][T12731] rss 0 [ 306.589769][T12731] shmem 0 [ 306.592721][T12731] mapped_file 0 [ 306.596195][T12731] dirty 0 [ 306.599197][T12731] writeback 0 [ 306.602515][T12731] workingset_refault_anon 6007 [ 306.607324][T12731] workingset_refault_file 1076 [ 306.612159][T12731] swap 651264 [ 306.615463][T12731] swapcached 0 [ 306.618947][T12731] pgpgin 339076 [ 306.622422][T12731] pgpgout 339076 [ 306.625995][T12731] pgfault 344644 [ 306.629605][T12731] pgmajfault 931 [ 306.633174][T12731] inactive_anon 0 [ 306.636878][T12731] active_anon 0 [ 306.640532][T12731] inactive_file 0 [ 306.644308][T12731] active_file 0 [ 306.647873][T12731] unevictable 0 [ 306.651434][T12731] hierarchical_memory_limit 314572800 [ 306.656863][T12731] hierarchical_memsw_limit 9223372036854771712 [ 306.662987][T12761] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 306.663049][T12731] total_cache 0 [ 306.663060][T12731] total_rss 0 [ 306.676743][T12731] total_shmem 0 [ 306.680318][T12731] total_mapped_file 0 [ 306.684480][T12731] total_dirty 0 [ 306.687960][T12731] total_writeback 0 [ 306.691787][T12731] total_workingset_refault_anon 6007 [ 306.697118][T12731] total_workingset_refault_file 1076 [ 306.702418][T12731] total_swap 651264 [ 306.706291][T12731] total_swapcached 0 [ 306.710278][T12731] total_pgpgin 339076 [ 306.714317][T12731] total_pgpgout 339076 [ 306.718410][T12731] total_pgfault 344644 [ 306.722585][T12731] total_pgmajfault 931 [ 306.726679][T12731] total_inactive_anon 0 [ 306.730841][T12731] total_active_anon 0 [ 306.734860][T12731] total_inactive_file 0 [ 306.739128][T12731] total_active_file 0 [ 306.743196][T12731] total_unevictable 0 [ 306.747390][T12731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.845,pid=6241,uid=0 [ 306.761909][T12731] Memory cgroup out of memory: Killed process 6241 (syz.0.845) total-vm:93836kB, anon-rss:1184kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 306.846850][T12734] syz.0.2735 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 306.860825][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.860853][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.860872][T12734] Call Trace: [ 306.860881][T12734] [ 306.860926][T12734] __dump_stack+0x1d/0x30 [ 306.860989][T12734] dump_stack_lvl+0x95/0xd0 [ 306.861018][T12734] dump_stack+0x15/0x1b [ 306.861068][T12734] dump_header+0x81/0x240 [ 306.861091][T12734] oom_kill_process+0x295/0x350 [ 306.861145][T12734] out_of_memory+0x97b/0xb80 [ 306.861169][T12734] try_charge_memcg+0x610/0xa10 [ 306.861222][T12734] obj_cgroup_charge_pages+0xa6/0x150 [ 306.861261][T12734] __memcg_kmem_charge_page+0x9f/0x170 [ 306.861371][T12734] __alloc_frozen_pages_noprof+0x18f/0x360 [ 306.861410][T12734] alloc_pages_mpol+0xb3/0x260 [ 306.861465][T12734] alloc_pages_noprof+0x90/0x130 [ 306.861495][T12734] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 306.861544][T12734] __kvmalloc_node_noprof+0x492/0x6b0 [ 306.861574][T12734] ? ip_set_alloc+0x24/0x30 [ 306.861644][T12734] ? ip_set_alloc+0x24/0x30 [ 306.861679][T12734] ip_set_alloc+0x24/0x30 [ 306.861748][T12734] hash_netiface_create+0x282/0x740 [ 306.861805][T12734] ? __pfx_hash_netiface_create+0x10/0x10 [ 306.861847][T12734] ip_set_create+0x3cc/0x970 [ 306.861959][T12734] ? __mutex_lock_slowpath+0xa/0x10 [ 306.861987][T12734] nfnetlink_rcv_msg+0x4c6/0x590 [ 306.862174][T12734] netlink_rcv_skb+0x123/0x220 [ 306.862261][T12734] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 306.862299][T12734] nfnetlink_rcv+0x167/0x16c0 [ 306.862433][T12734] ? trace_buffer_unlock_commit_regs+0x114/0x310 [ 306.862473][T12734] ? trace_event_buffer_commit+0x196/0x5c0 [ 306.862507][T12734] ? trace_event_raw_event_bpf_trace_printk+0xe6/0x160 [ 306.862544][T12734] ? copy_from_kernel_nofault_allowed+0x62/0xc0 [ 306.862577][T12734] ? strncpy_from_kernel_nofault+0xbe/0x130 [ 306.862606][T12734] ? __rcu_read_unlock+0x4f/0x70 [ 306.862629][T12734] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 306.862705][T12734] ? perf_cgroup_switch+0x10c/0x480 [ 306.862725][T12734] ? xfd_validate_state+0x45/0xf0 [ 306.862784][T12734] ? should_fail_ex+0x30/0x280 [ 306.862807][T12734] ? selinux_nlmsg_lookup+0x99/0x890 [ 306.862833][T12734] ? __rcu_read_unlock+0x34/0x70 [ 306.862855][T12734] ? __netlink_lookup+0x266/0x2a0 [ 306.862903][T12734] netlink_unicast+0x5c0/0x690 [ 306.862977][T12734] netlink_sendmsg+0x58b/0x6b0 [ 306.863058][T12734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.863091][T12734] __sock_sendmsg+0x145/0x180 [ 306.863111][T12734] ____sys_sendmsg+0x31e/0x4a0 [ 306.863149][T12734] ___sys_sendmsg+0x17b/0x1d0 [ 306.863200][T12734] __x64_sys_sendmsg+0xd4/0x160 [ 306.863312][T12734] x64_sys_call+0x17ba/0x3000 [ 306.863374][T12734] do_syscall_64+0xca/0x2b0 [ 306.863423][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.863446][T12734] RIP: 0033:0x7f0994caf749 [ 306.863495][T12734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.863533][T12734] RSP: 002b:00007f099370f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.863556][T12734] RAX: ffffffffffffffda RBX: 00007f0994f05fa0 RCX: 00007f0994caf749 [ 306.863571][T12734] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 306.863587][T12734] RBP: 00007f0994d33f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.863602][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.863617][T12734] R13: 00007f0994f06038 R14: 00007f0994f05fa0 R15: 00007fffb4ba6a38 [ 306.863719][T12734] [ 306.863728][T12734] memory: usage 307200kB, limit 307200kB, failcnt 7536 [ 307.219300][T12734] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 307.227719][T12734] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 307.235062][T12734] Memory cgroup stats for /syz0: [ 307.239496][T12734] cache 0 [ 307.247716][T12734] rss 0 [ 307.250508][T12734] shmem 0 [ 307.253468][T12734] mapped_file 0 [ 307.257025][T12734] dirty 0 [ 307.259977][T12734] writeback 0 [ 307.263309][T12734] workingset_refault_anon 6009 [ 307.268222][T12734] workingset_refault_file 1077 [ 307.273063][T12734] swap 458752 [ 307.276419][T12734] swapcached 0 [ 307.279871][T12734] pgpgin 339079 [ 307.283435][T12734] pgpgout 339079 [ 307.287027][T12734] pgfault 344647 [ 307.290600][T12734] pgmajfault 934 [ 307.294253][T12734] inactive_anon 0 [ 307.298060][T12734] active_anon 0 [ 307.301728][T12734] inactive_file 0 [ 307.305445][T12734] active_file 0 [ 307.308915][T12734] unevictable 0 [ 307.312807][T12734] hierarchical_memory_limit 314572800 [ 307.318362][T12734] hierarchical_memsw_limit 9223372036854771712 [ 307.324573][T12734] total_cache 0 [ 307.328047][T12734] total_rss 0 [ 307.331335][T12734] total_shmem 0 [ 307.334879][T12734] total_mapped_file 0 [ 307.338974][T12734] total_dirty 0 [ 307.342563][T12734] total_writeback 0 [ 307.346506][T12734] total_workingset_refault_anon 6009 [ 307.351841][T12734] total_workingset_refault_file 1077 [ 307.357295][T12734] total_swap 458752 [ 307.361168][T12734] total_swapcached 0 [ 307.365079][T12734] total_pgpgin 339079 [ 307.369059][T12734] total_pgpgout 339079 [ 307.373165][T12734] total_pgfault 344647 [ 307.377298][T12734] total_pgmajfault 934 [ 307.381444][T12734] total_inactive_anon 0 [ 307.385618][T12734] total_active_anon 0 [ 307.389624][T12734] total_inactive_file 0 [ 307.393838][T12734] total_active_file 0 [ 307.397818][T12734] total_unevictable 0 [ 307.401839][T12734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.714,pid=5901,uid=0 [ 307.416524][T12734] Memory cgroup out of memory: Killed process 5901 (syz.0.714) total-vm:93836kB, anon-rss:1176kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 307.502749][T12734] ================================================================== [ 307.510996][T12734] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 307.520873][T12734] [ 307.523231][T12734] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 307.531326][T12734] tick_do_update_jiffies64+0x113/0x1c0 [ 307.536921][T12734] tick_nohz_handler+0x8d/0x3d0 [ 307.541805][T12734] __hrtimer_run_queues+0x20f/0x5a0 [ 307.547033][T12734] hrtimer_interrupt+0x21a/0x460 [ 307.551993][T12734] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 307.557911][T12734] sysvec_apic_timer_interrupt+0x6f/0x80 [ 307.563572][T12734] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.569579][T12734] kcsan_setup_watchpoint+0x406/0x420 [ 307.574997][T12734] unmap_page_range+0xd85/0x2530 [ 307.579964][T12734] unmap_vmas+0x23d/0x3a0 [ 307.584323][T12734] exit_mmap+0x1ae/0x6b0 [ 307.588605][T12734] __mmput+0x28/0x1c0 [ 307.592622][T12734] mmput+0x40/0x50 [ 307.596392][T12734] exit_mm+0xe4/0x180 [ 307.600402][T12734] do_exit+0x3fb/0x1590 [ 307.604586][T12734] do_group_exit+0xff/0x140 [ 307.609111][T12734] get_signal+0xe58/0xf70 [ 307.613472][T12734] arch_do_signal_or_restart+0x96/0x450 [ 307.619046][T12734] exit_to_user_mode_loop+0x6a/0x740 [ 307.624351][T12734] do_syscall_64+0x1dd/0x2b0 [ 307.628981][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.634902][T12734] [ 307.637246][T12734] read to 0xffffffff86809a00 of 8 bytes by task 12734 on cpu 1: [ 307.644891][T12734] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 307.651165][T12734] count_shadow_nodes+0x6a/0x230 [ 307.656131][T12734] do_shrink_slab+0x63/0x680 [ 307.660744][T12734] shrink_slab+0x4f5/0x840 [ 307.665178][T12734] shrink_node+0x6a9/0x2010 [ 307.669701][T12734] do_try_to_free_pages+0x3f6/0xcd0 [ 307.674946][T12734] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 307.680870][T12734] try_charge_memcg+0x383/0xa10 [ 307.685786][T12734] obj_cgroup_charge_pages+0xa6/0x150 [ 307.691235][T12734] __memcg_kmem_charge_page+0x9f/0x170 [ 307.696749][T12734] __alloc_frozen_pages_noprof+0x18f/0x360 [ 307.702584][T12734] alloc_pages_mpol+0xb3/0x260 [ 307.707834][T12734] alloc_pages_noprof+0x90/0x130 [ 307.712805][T12734] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 307.718729][T12734] __kvmalloc_node_noprof+0x492/0x6b0 [ 307.724213][T12734] ip_set_alloc+0x24/0x30 [ 307.728573][T12734] hash_netiface_create+0x282/0x740 [ 307.733806][T12734] ip_set_create+0x3cc/0x970 [ 307.738429][T12734] nfnetlink_rcv_msg+0x4c6/0x590 [ 307.743393][T12734] netlink_rcv_skb+0x123/0x220 [ 307.748195][T12734] nfnetlink_rcv+0x167/0x16c0 [ 307.752897][T12734] netlink_unicast+0x5c0/0x690 [ 307.757692][T12734] netlink_sendmsg+0x58b/0x6b0 [ 307.762491][T12734] __sock_sendmsg+0x145/0x180 [ 307.767188][T12734] ____sys_sendmsg+0x31e/0x4a0 [ 307.771982][T12734] ___sys_sendmsg+0x17b/0x1d0 [ 307.776687][T12734] __x64_sys_sendmsg+0xd4/0x160 [ 307.781572][T12734] x64_sys_call+0x17ba/0x3000 [ 307.786281][T12734] do_syscall_64+0xca/0x2b0 [ 307.790931][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.796849][T12734] [ 307.799186][T12734] value changed: 0x00000001000003d9 -> 0x00000001000003da [ 307.806314][T12734] [ 307.808658][T12734] Reported by Kernel Concurrency Sanitizer on: [ 307.814826][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 307.824654][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.834734][T12734] ================================================================== [ 307.883627][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 307.894659][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 307.894788][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.894804][ T3314] Call Trace: [ 307.894813][ T3314] [ 307.894824][ T3314] __dump_stack+0x1d/0x30 [ 307.894856][ T3314] dump_stack_lvl+0x95/0xd0 [ 307.894932][ T3314] dump_stack+0x15/0x1b [ 307.894988][ T3314] dump_header+0x81/0x240 [ 307.895013][ T3314] oom_kill_process+0x295/0x350 [ 307.895065][ T3314] out_of_memory+0x97b/0xb80 [ 307.895093][ T3314] try_charge_memcg+0x610/0xa10 [ 307.895159][ T3314] charge_memcg+0x51/0xc0 [ 307.895200][ T3314] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 307.895236][ T3314] __read_swap_cache_async+0x17b/0x2d0 [ 307.895386][ T3314] swap_cluster_readahead+0x362/0x3c0 [ 307.895439][ T3314] swapin_readahead+0xde/0x820 [ 307.895496][ T3314] ? next_uptodate_folio+0x81c/0x890 [ 307.895527][ T3314] ? percpu_counter_add_batch+0xb6/0x130 [ 307.895549][ T3314] ? __rcu_read_unlock+0x4f/0x70 [ 307.895573][ T3314] ? swap_cache_get_folio+0x277/0x280 [ 307.895609][ T3314] do_swap_page+0x2b4/0x21e0 [ 307.895713][ T3314] ? __pfx_default_wake_function+0x10/0x10 [ 307.895761][ T3314] handle_mm_fault+0x9d8/0x2c60 [ 307.895862][ T3314] do_user_addr_fault+0x630/0x1080 [ 307.895988][ T3314] exc_page_fault+0x62/0xa0 [ 307.896025][ T3314] asm_exc_page_fault+0x26/0x30 [ 307.896158][ T3314] RIP: 0033:0x7f0994b85fd7 [ 307.896177][ T3314] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 307.896201][ T3314] RSP: 002b:00007fffb4ba6dc0 EFLAGS: 00010206 [ 307.896240][ T3314] RAX: 0000001b33924000 RBX: 0000000000000603 RCX: 000000000004baf0 [ 307.896253][ T3314] RDX: 00000000059a8cbb RSI: 00007fffb4ba6e50 RDI: 000000000000001c [ 307.896265][ T3314] RBP: 00007fffb4ba6dfc R08: 0000000015605f7a R09: 7fffffffffffffff [ 307.896277][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 307.896309][ T3314] R13: 00000000000927c0 R14: 000000000004b387 R15: 00007fffb4ba6e50 [ 307.896409][ T3314] [ 307.896416][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 7767 [ 308.113263][ T3314] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 308.121259][ T3314] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 308.128660][ T3314] Memory cgroup stats for /syz0: [ 308.129224][ T3314] cache 0 [ 308.137220][ T3314] rss 4096 [ 308.140341][ T3314] shmem 0 [ 308.143350][ T3314] mapped_file 0 [ 308.146887][ T3314] dirty 0 [ 308.149845][ T3314] writeback 0 [ 308.153211][ T3314] workingset_refault_anon 6021 [ 308.158011][ T3314] workingset_refault_file 1088 [ 308.162821][ T3314] swap 270336 [ 308.166130][ T3314] swapcached 4096 [ 308.169822][ T3314] pgpgin 339102 [ 308.173324][ T3314] pgpgout 339101 [ 308.176899][ T3314] pgfault 344660 [ 308.180499][ T3314] pgmajfault 947 [ 308.184072][ T3314] inactive_anon 4096 [ 308.187988][ T3314] active_anon 0 [ 308.191505][ T3314] inactive_file 0 [ 308.195161][ T3314] active_file 0 [ 308.198724][ T3314] unevictable 0 [ 308.202198][ T3314] hierarchical_memory_limit 314572800 [ 308.207601][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 308.213862][ T3314] total_cache 0 [ 308.217369][ T3314] total_rss 4096 [ 308.220942][ T3314] total_shmem 0 [ 308.224421][ T3314] total_mapped_file 0 [ 308.228466][ T3314] total_dirty 0 [ 308.231944][ T3314] total_writeback 0 [ 308.235772][ T3314] total_workingset_refault_anon 6021 [ 308.241101][ T3314] total_workingset_refault_file 1088 [ 308.246449][ T3314] total_swap 270336 [ 308.250320][ T3314] total_swapcached 4096 [ 308.254494][ T3314] total_pgpgin 339102 [ 308.258524][ T3314] total_pgpgout 339101 [ 308.262631][ T3314] total_pgfault 344660 [ 308.266776][ T3314] total_pgmajfault 947 [ 308.270873][ T3314] total_inactive_anon 4096 [ 308.275411][ T3314] total_active_anon 0 [ 308.279460][ T3314] total_inactive_file 0 [ 308.283642][ T3314] total_active_file 0 [ 308.287711][ T3314] total_unevictable 0 [ 308.291720][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2735,pid=12731,uid=0 [ 308.306560][ T3314] Memory cgroup out of memory: Killed process 12731 (syz.0.2735) total-vm:94100kB, anon-rss:1264kB, file-rss:22564kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:0 [ 308.434876][T12734] pim6reg: left allmulticast mode [ 308.692516][T12723] net_ratelimit: 43 callbacks suppressed [ 308.692531][T12723] Set syz1 is full, maxelem 65536 reached