last executing test programs: 49.078926973s ago: executing program 3 (id=436): creat(&(0x7f0000000080)='./bus\x00', 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="94000000000000000000000007000000018303"], 0x98}}], 0x2, 0x840) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@grpid}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 48.969448213s ago: executing program 3 (id=438): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000080)="8db48c3bcee7066d0e1f93c5dc0eb0b59a294951cbaeebeb4b853da197f41988c1a12214a04ac27f10915a556135356fe3e82aec24ef3b0f2c9bdea7f18ab82cf036522be9cacbe61e390b2dbde8c6218da6f9a7bdb0afa105b35ea0cbf55172fef08db790668a1607a604471b5845fe8e7b8e35906bcf31ebe2354f7cb205c27868c2fa5cfd52d4ddb1ae869d35c17d1f0346f4d9a297af69e4f2e9050e6210b0d072a379b5a09eb2168a17adf858a977ddde248d922b45e8f876fb77ccfaa3", 0xc0) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x80000000, 0x9c, 0x8ef5, 0xfffffffffffffffa}) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = accept4$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, r6, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001640)={&(0x7f0000000480)="06942ac1a11ac9aa4b77fc31bd9366dd5cc8ebe75f3bf41ba4f339f0f167ae60771181061ce7e41c5c60b1ee514f5f77e26fa9e426f7820b8dd2644fd8bc891f340fe6aff83bab97c012ca6b21fc59a286b262231edaa458a16acf652580eb44b9", &(0x7f0000000500)=""/46, &(0x7f0000000540)="368d020351f988d3fe3186d2a391d06aa414f17427deb76b596e1f1dd526df756733a34b8fc90095ccf268810d25a57c10972d2260d0de0bddeb6c0fdf1a4e603275b1fa26300d20bd6fab9ce45c2e1cd06dd89768f740e8358c9692743903dabec789fe95dbd7d1a3976a8d2b8ea1a48b13466e8046c7418f5ed89a23598a6ce075b5998fe9772e22aef0fab33b6dd61be10cc9a6b4a809a6bb74197253d913fc118332fc2ae87f143e1444df5bcb631b76fa62e77c42d0077450e174a8005e09bbeeb6b90082c103c2ac47f1ea0412d0404b9cc01aec2d07696d28d5d45c4aadf4579d4b6e12c7b6dc1cd6083d9e34535471c26b", &(0x7f0000000640)="fa6e7b03d5210f675be807f4e56dcb84336011884fbd85a92bc7f8d1343ddcbd237be48c941bfa926500124448059065f1f6a4e09af529256a41d63afbf9adf37ed201cb91bdf5181f894dcec012e669228ae4c5b856f72d84bf07dc3f0e29841c353ba64031edf64f1f1888c16211cb4187baa53c0876c8715903f1056d2e51e7fe6dfda58806ba52cb48646c10a034c6fb2d68a9c1c6968779a679fee384517607674c13721e2c631ab514b4f88c4c674bae10dfc32a2a86262242bdb622e4ad98f39806feabad5bcd7dc8d336721e8e12c95c7464bf2ae4c2c91f05850c9594a62b497567f70e836e6e33164563068bfd1a334c5d959ee6d983736737bc73cd4a07de7823074880ca51a27fffd6b3b6c259626311162a0c4e22f7e54d1b2cfc45e118a437a1a1068b78e622839c54a09224c8b28c9e051f3864611c058eaf9a00dd53d8d5a0c1e57d0b415cf7524f79313425e96b624eb98958b2f341fe2b2265dc12cfd34c2eba86c259d6c8e227b5a307de37109c910b40933f6779cd6a3960a490cc1b7ddefb15a592ba0503fa434f807b234b04165180eda8344b1c7d20330a0c83f722f80b3873cca90b0342c122a44ca9428eee9a3cb11d0cf4e0c1d9fddd2249e29de8f11025b81d9587c67c18251e27a8a336c0a23cfd0f9b77017d67acecb5fed0a0a09a5b59087cb42e4484a1de85e33e12ef903815e8be4e09c200168c86257192b0690b809e4fb7d1b2e28fe739438722bf7a2d391fc1cfde2807a4ce0b636f1fe6fa05dbf8680f1eeea88dd202a84971e1512738010fb0a3bd0dbafa9c0ed64cfa77d5afd02fcc458cb7d7e590760af316573f77b131514cbdf5350a46f9d3bd36c07e3e1fbfc6318b34ed2ccf547d78f5b358f696b28605a3992f9bfa31a301911d85dc45f7debe61de413f85f640e81fd14fa08b67f982cc441a1139196324a09e4faebb1bb43e0804f9c3637a24a6b71315b3dbd3902077fdc8e47e9739dd0db2c4737f1dbf224994a31a2ac0aa0f42f4012a254be66fc5ea15caa72e62f6020807a80eafcf3efdaacf56ae7c94581a46135a3c8dce2a36acd1b450a310a12da4a5ec0d740bb5557010f550b14ff7b9d2abc836c1346469a57a95e6e4f0e2f03c43016f91e05ef0f1631833cb8e54e2b0190a6104fda3c519f2033afab6cde050853e7e65153ca0d740075732adbc267eeb3de78ca29a9094954f0997bf8abe67f9be7688e5080f1758981c5d24df0c58b8638b3becc2776d4d926371f683036d9a7b7a32062697c761e1279937c33af67fa2e1d3a779bf3e32191525b726652a12ac97deb772b30169047d9c671daef85143f0b946d6a3e416c996afa8df2d7a6ceb7bbdfb45c37fdc00f51b29441ea1f22bec4c88f982ee246f35a89fa624e887bb30284629be45653916ac44b477f0b13bf32a2def7108b7534ed075a0918d13bd6540cf904ddaf87af7de91abdedfc2b1e0ee36e4b333925ad8ee9a4107de8ac95dbe87b07c8fc4a13d8a1bb0852c3a529ce7925dc59dde1917046c2eee3e0921871533422866f877e7790da65e19656dfccc6fd73cb764c72cc8c45d2531ff898c9e5e557c1f7ccf9290ba7e05eba1188046670d0fb3e663fb8c7c0ada1134b0cb9b5adb6b0440503bade3d7d52ba69b8a2ad6c33352c1fef0fee5323b10a64fd1ae1934309624c3901f19cd7da4a2c4dee92b7567e80cb0fd51599dde2c367103b6ebd10b9111e61e14289e928670029e01c29edff21ad632991dba62a37d3723cb0be9d7c32da9657690be777488132329aa136ed9579f5279d1e453c69f6d56a86936f46bcb1acd73772db3a641ee90f660478d15bf771130bb9f5da25341cfa0107f78574dbc1b82fddc350908b014432e4d9a92596ccfa0801eb98cd549026c25900895f38c96ab5c8675019846af56406aeef91b481af71b3a4b030673e10782c4484dadb5787cc07d2fd1fa364ac103c7faf6b562b38372aabb48ed10aa61a457fe73cb192e8ae05fbaf41c95b5c93f20f55d077a4af17ac3285a692400a067779b745a19319dba0bb1274d8ddc7448a9c8c6e52d5b50a9d7357763184dc3f13a8cbf80280d213166f69690c1acef79623e5823745714972c0b2c01ea35a4285a6641d4426f6a5d57b1e2455f0bca44ca2809dd43cf1d9cf6e98a2020f2da9c5e14d8ddd43bb9977fdda50a8f279d7f0d1b0a3462ca7652a5a71f92bcac8c3b24c66916b5923a74da404fcd3f8e5899936e9dc68364ba2922c4bdc538d95b6ded9200cb70191454f70f6bc8c873305c9798bfe8415d0b4cee1489befe867ee68d45e7741226aca2f91a0db5e76117ec36f8daa785a312bdc75cba9a58f5d2728056bf98f3eccf34f8d6f59a89f83cbe6af5dd8de21e9bb8cf9dc416a3abe90c6786edd5eef35898d8dd8dc766f06f78a42f003c86e1f6fbe03db0b0da2c3ac9c5c9449577bd15ceaec3d690e35fb4d000ed73237cb48a2c0b782a475c5d07cae4677fa85e213aec6d57b1c88c150c685cad2840c440559c98675831170d24ff75604ccc6e62e9ea1a9b8b4fff091d4f03462189db26955675ac13160d46126e8a9f2cf15276f214e42b182230be6e2b1b16e140484eaff5d67dbe87f00b994270579c472cf9f478a0964dd0e862846edcc6e9a01ee9eaf9a8beaed91f71dd67500263d9b6b4d538ff9455774ff4e7c674a3045e8642e24c009b6d4e84877297658d4696c208a1eff3d1646aaf9c231f0d12b02b68936ceeee84ac3e9df51dcdc700e86a238e7a212ed0350ac5faeb53fa61a235f0e60f93e3dce300a96e7234c0f1dcb6b403a1732bb137e6fb9b2f02c4bb7ea749fb30bf8af7b0e73a44030ccf74b98d520695e9e7ff95bffc259c27bf426ef9f3509cfe14c7c1d5c92d7d8304d007417162fb614dc0b4e50e8b56cec83b467a27be0cc01f91fea49cc2fa57dcc3c74a97fd57fc4c0b3dd5c3fdbf75ade3c2a148660e1e20112d0357d5e6c9915cea24b0b2ac07a7b8c31e92bb4f646a7a35df164996ea622bb76dc3c3fee283b5a4bedcd7806ad64dc83e00bcf0ea825b36c6a32d067bdf1e261224db300b8dddbabaf0c0b7bd8d5069addddd2005050253c9fa7c31c3b4b1969d440a0a10b20ede20457de864fd5a4c75b2cd52b46586e92ac72eda6836b78f349144e07998e1d6b55c9c8908adf191ca62c15ba82d9a996159c7c069cfe54c90dbce0eaf5883547293182f28967f9239df77036e01ac019babedbf6487ab15386be53104aead175ded4be975dba18f28c639a621b2040c8e22675ddb9ffe708e1249551b980dd1be383d8cba83f622e2035193fb4550e743fe2229627577529932cac7a4dc2c8c21c383527c76d1d9ba19633d4376b99caf64054f456effeada2bb7bbc5c5b747a341ff34b086ed7ab776e0130229a43e80e4722df517ea64d584132a7b89af4c893c9642eba7f84157d193064b226f1e0208a0b68e3a4bd75ab8771f915da24980c2eff5d25a02827e00c878e6d69caffc0a2f779122ab336be68f34a2b6c95f9fde9d66d9fd8b2fdf28790a551d9d3f5cf83fe889a31b3f1651d458c03673315b6afbb7b43a3450fb2cfeed1bc209afbd0500071dad42be2f2ffc44ca6fea16242a250fee35bcb6da3356392c6550e30744fcdfcc52bfa23996396d66138fbac191c4db888cd7e46c2a414b19d716b41ab968fd17b233dd5c27075d636ffedd3949940b10620a364ebfcff287e64b2680726081674437a7a2e796e741137dfb0e115f679d0522e5f966828683000b316f614dc053428492177a7038f0c6f0eed67d3b6e7a0154bf27d24488d85e4c5195ef4bb462fdd4fb982cb85c98a80d93ceb5b5a75d47fe696a1608dc890c928160c958da57fd126f4542feaafc9b7a5a8bd48b9a4ddeebea3327d67ab7fded8f03cce51846f8249e53bb58859832d757301daffc76da0cc81df372da5ec2893c2cd89bbf6b65d1d29405360ea02aa129f43aee650477fab771fc81b0aa505814de52058e45a5c4f0471e13d0d10e3c0540a4cd058cbde38905faf1e29a01acf11488522eab6ed967c03a39f1a49d2c894833e9919496446dbcd32a765f10709a882709f893bc7743a134f1d3a035fea814cb5bd55d09d35f6edb8db89a46200c1e756e3a069b76b1f743bb9e1e90d1ca69acee084349646796690d6c7d40ad33edf8a79ee4f153edf2f29ae86405ea6e141842c72a33d78e14fc69fbd35244bcf7d405fa155d32d99522d1cda1415335c360fd09604578c9e6255500d3a0dafa3ffe0181b13842c06e47525104674a76cc990fd1bf3e397b6fe6c2a4a70751da60d1d33d37c2b2678094120437000c0aff1bce6e1a6de750d25d7e1de53cd99e3424b17f87afab659e0131246773b0f7f37cb9df8cd1d5a419c12968ee6e4d98fd7f8d57a8a7fdfadbd952b1180e33085b0f400669dfbed493bf2854b3ad4ce98f493a063fd755739cb818f5e54a2694c5ae36f72d4f725276f86d1d39f11806ed11ab28271cab0df6a749f4cb2901e29de250f7c7dd80e2dc388fd4763544ec83d2aa05ba7727c08e9dc771db7b1de67d8104b800ee28a2acc1e422cfb02c6ae07499aa0b62db7a76aae4ab0f514d52ce573ba2ff38422b3f18a854cead72c3961020514be5d89044575d45c7c38fb0787b6d7c8205f76a93b3cf2bb051b8df66184e71ce9439d2a827435a4cb49a1f9015783185362c1c7d88709c11c9826cd357f6266b2cdd2c92d1077ab960976472bfbeff5e7299df8d747be9225503b4c4d994ffd8b06f295f7246c19bc5c57eb5ad7c0332b56f1bed4eb4b174a24b5fe1f7cfab6b3ab253dacacec97e54d741237dae3e7e398fc6701e69c2463d5e05e7ca3c7c9df240ba7189c93f2b75f658aabb1638e60ba6b007e88ae4f6781a166bef11fc65a045401d15293372a2be8d1f6c643e9cffe4e394b91326814b16a50e867a97747831cad79d948457cd5941363b4af7b3dfc14a5604637ef22f5d6cc83c92423d76ea396efbb7c6e5a077dc708419649baf4c6ef951c3da8574f77da9201a516ed6f2ea5c2e9c34319abfcdf7a9df78a5a6234ecf122316ad917192f395108e8eb70fc23f4e5512dd65fe45ccd161576be4f6c351e7d2db1b935bd76374406f37a0330826e0c680506cccd04ed3aa543e122cdf102116edc9ec9f264f89ebb4c5e41cf0b00053ebb280ac4a7baf65e919538a84b058e7b30558f20b65d5fd36ee299f2dc7a142d136f7355282a0a9c94d72965a7b9af2b7ae790df4d83812bfdfe405828a5a99a2f329817626abf57adc2475d9ff466adde1be8c4dd65973a315f172819bacaef870a8e0db53447ea7e7e7caa7c344bbcd7570d44653e16472135eecb8f19ff82fa8f412fa4f19335a20bd59c672fed02dfc298cfaaf1a89d4dcc270da0bc0c29e56a35b75ffadd81a3f97789fab41516be45d059f429153ebdb802099f9b3bd3267fbe33fe92f3710c7d1e24fdae7a223bf50289555ed23ac3c43743a1baf2d999fab44d452d0f0c2752f0ac7bcf60c76d1084c32e89c4579e978e4d407537c63a2630c303bc8ba70eaf2019978219d64b534ec80a272d5d115f77f1c56b8d3a0149dbc65ca24d45ba987092da2438a65263aabfa2b16a08279bd9bf5ccc25c8e7d73f8c3a2543c44754ffff3d13e0b0e443e89626df55761b48e774fa3cd0fe932b900b0cb8597f2dca4b8e3a0056ff536cfadc8a590c01b9a27a13c318d84e6436cc87f0169194a7dba0ff4a07c84eea7c2", 0x2f60, r0}, 0x38) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r8 = openat$cgroup_ro(r7, &(0x7f00000016c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000001700)={0x62, 0x0, '\x00', [@pad1]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000001740)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000001780)) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) recvfrom(r11, &(0x7f0000001800)=""/166, 0xa6, 0x400021a0, &(0x7f00000018c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000001c80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x2bc, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x22c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x3, 0xf00, 0x0, 0x1, 0x4100, r7, 0x3, '\x00', 0x0, r10, 0x2, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) write$P9_ROPEN(r8, &(0x7f0000001d40)={0x18, 0x71, 0x1, {{0x80}, 0x400}}, 0x18) statx(r10, &(0x7f0000001d80)='./file0\x00', 0x400, 0x1, &(0x7f0000001dc0)) (async) fsync(r9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{r7, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x7, &(0x7f0000001f80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}], &(0x7f0000001fc0)='GPL\x00', 0x6, 0xcf, &(0x7f0000002000)=""/207, 0x41100, 0x5c, '\x00', r5, 0x25, r8, 0x8, &(0x7f0000002100)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002180)=[r12, r8, r10, 0xffffffffffffffff, r10], &(0x7f00000021c0)=[{0x5, 0x2, 0xf, 0x4}, {0x4, 0x4, 0xc, 0xc}, {0x5, 0x4, 0xb, 0x1}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x2, 0xf, 0x2}, {0x5, 0x2, 0xc, 0x7}], 0x10, 0x9, @void, @value}, 0x94) 48.910742163s ago: executing program 3 (id=439): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000100000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000040000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e61740000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000edffffff0000000000"]}, 0x3c0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000000)='./bus/file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = pidfd_getfd(r7, r2, 0x0) renameat2(r7, &(0x7f0000000180)='./bus/file0\x00', r8, &(0x7f00000000c0)='./bus/file0\x00', 0x2) 48.863667692s ago: executing program 3 (id=440): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d7", 0x71}], 0x1, 0x0, 0x0, 0x7}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f"], 0xb9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000480)={0x1d, r5}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r5, {0xe, 0xb5d54cde5c199d9f}}}, 0x24}}, 0x40044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d7", 0x71}], 0x1, 0x0, 0x0, 0x7}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f"], 0xb9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) listen(r3, 0x7) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async) bind$can_raw(r4, &(0x7f0000000480)={0x1d, r5}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r5, {0xe, 0xb5d54cde5c199d9f}}}, 0x24}}, 0x40044) (async) 48.764485542s ago: executing program 3 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000001680)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r2, &(0x7f0000001a40), 0x0}, 0x20) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x0, 0x5c}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x32a8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x30}) socket$igmp(0x2, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8327, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}], ['\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000004040)={0x168c, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffff8, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x130a, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @device_b, @from_mac, {0x9, 0x4}, @broadcast, @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xef, "f89bebfb1084433671d10e6886f86683d5a0379f71a00a5c467dc1c972482bc613584e81b40f7a985f18f44c52d586c9dbcffac30f88e1bac975bc4bc2a010858b94e4234af8da4dd74776a9a18708e231c134f8be8cd76844c8e84a7e1b468bad22d17c89d98fc26c14f14d1080825f8174bd449b716b49381446abc15c2fc5aba1bbbca0b77bb94b555fc979c7f03e9bc020f1bb250293ff04347b34f975196daed6433596f44a1ac07ae733eccb08ccabbc5cbe724704d24cf8a0cc9f7a1b0797c61abe68af41afd767a65ad282938c19d88a1b2bbde3dd9a321e373afb739d4ace8c457c3b6e82512b4c58196f"}, {@device_b, @broadcast, 0x1000, "cda4c4a1e23d630b3f6cffac2670fccf4549b85e41cb0bdfc45be8e50d7010cbc50f4324262b939918888fa1736577605599b2d1477610f9e33316ca998ff07df6dfa5963bb2f5e5e49c0d51050bdb88ac5017d2e5a93fce7db3dcc5efc38ddf7fc9bb5c62da8caa8eb0a047109c18c1e1a5ed1edba09e0c4223dacb3c58ed4e6d6b56dd80e489c5a9100c7ce3af02220d4fdeb182d65d9a1ab4b479083a25f73b3c84c92de2e1cdcb8293fcdef785c0e155d6918743cde466cb23128f1b47e06d91f1937e708bc0e478ef8ae084373c74c6600b3b4dfb8bfc105bf4e648c3593db6af2fde7018f44c98537036f72049757f83bbafe6f06bbad3bb9b9ee0aa9bf998906660c18a83ea4cb075b3bb383fb6fcf92f8c4e7c91a78770b49c06681e5de559cfea95f79ab6d73b0b35b4d30e87555558f11b135e1a06bfc0e14397d485dc3bcc86dad3dfe3261aac2d5357255287af7eb72338439a96282473933420f1c74c0dcb80953ade01f71337c1d2f665772f3e3102122c1c2fbafc8e8d5de23329d1b43134ee1fc0529e732a554c39a042f11fb84fde4dd531f1c646596b4ee4ad5f633c17ba81e4138f01504fb0ce98c24466faef16da8c5759fc40a6dfcf3efc9c623ea915496d405ae67fa30d94f1ed135014f32ed05b56e338c3f4cbe2fed0f625b6dc09b82cb48b15403ba88cd205a7eeca9e900ab0729be76f3a2c9b7e6ef59c285ebc33a150c806b55e5b91cfe66499330c7de7415d94b54800b4d80c567714362315964f1037b263736d0f783068ed5c046e82b6e2941fe8cfe6f145c150c9f63ce9a0a396422e43326fe32d9e4c37eb6d8a97a3266942d88f4525c9172992bb1b2e78b099434f957062796aa9258ed8d75f5996c7e60484478d9805a99c566ac49c2bb4abd12d6206eeb37be6fb182a422ed253d71c38031ad2431846d82dd2ae35c3e9e283f6d121e1189ffc7f440d7ce53734c1d87ec4dd2f2f97541fa641879aa58a2c9f6a985967c1752c1b7802ddb6586d480b973e6cf27a0048cb93349db8d7e067d2c6e7c617d832dc8279fb1477236ce02d944f6533e3c856ced4d0ac6b5b8c436e79dff5fb0ef154ff7ce0f54323ffc4625821fd3fc822c079e20abfcc625f31e775397f3c289f6c61b26232af11a6aa041dfa27ccabc52860465e74f8ba1a0a52cb1608195b70c87c00afe6a8a3735f31e00fedcd697cbe04acf875f175e4549c1dfd11cffc21c246b6e038add6ff204de056fd8fc05fc4791023d0721630d1d21cb9575614ed5b018d717e22b732746cb270f9da7390b7b281f3fd2112f86e834a8b5b3f25cbc8c490500af2cf591207f78a0642d3dfeb094bc5a2b7c4392bd5104097d495a7c79350a953b3b6d444292df8f53c9bea46e14cacf1fd77aa0cbc35ec8ba592bdf16884e313eb8d09d12e18205315fc859140bf90b6965c36fce17ee40033cca50dbdc9c4e686f8b3e63faf1fbec53a0b8eb63e26f53fb0635aabe1fb2f9130b635118ed5388f28b84269ab6a05623bf99591188f6beadbc632c04459a2b39fb06c162ae5ef7fa92cb5f1c10643a497ca6565a55f6c1a49f43c65e73e6a7e9c4fe05738b9765c33d27809e41db1e9db5299d77ddaf5cefce636d2b153c40c08f0c8b2d515925228f8c5f1baeca0489cd53e24f7ca5b1ec64d74a3afe4dfdd0711dcef9eee7e95c53861b05cdad180093cf55a80ac7e82a2699d619d67ec80ac7c0579e22224fb4d8b20305958cd2fd93e431dfd15467f6861a5718b33e6a9b781e55f0b8fdbc3504ec744bf50bfcfbed9951e3a3218d6d4708dc80039016bb4f805d64d3b76edca1e0f7aa65c1330cb20c4b4fe505e8b10245351d808877f3a672606b91bdc4dadf96ff2ea4deda9917981c9452c8e0f70908a09517181dd94177b0f8d2d078f57bcf3c60faa8d857cf57f41e6d7514b0ced9b2ed1b7015195eccae2459ba28f1a0e569487e47d33a15dc9c261f785d9bc64b9ee42645ada8947b44c39af890775a7ea54cdd8206fd230510e104a0e4d6d334a9008c305fbb965523fd4de73ff92267f54b29cb24859c61689e814dff37919d57fae6ea9cda2cb83ab3bb8595481c2b77db79bf7acdf71f6169db3953b2c1f5e3ceab1aee11d353fd18e7c38fdb1dcce58e2850e59396f34675209b1edbbbfd212d01a90e59b869d266e4424e82fe6788452077cd54ba002509cf0f23a26f6f420ba3d30a8d893b3155d52041460554d8049ce44236a814873b2aa1953f8bab5a5de75f2806683e105ad58171c1941bea329a5877d6326583a9f43c364c6539e72aa0fde592b8ab34805cc5d49fef22d4a4e8f7c3b5c23a308083bdb53f374ba388fb776aee9d76e57989987ae91fece655847c695d31ed9ccdca59965cda7672fad6f8cbf203e467cf4ffcab77a23240c964b679dc61ecaf79e40f8bcf3ce8c67931d1b4f983a1d4e425e7112c5f222b99c5f57851f3ba300853087563bb79568d17ba8ff9ca723cc2b3006bd33f11019298afa4ab65b5a379ce99aff4b25807d3dc262166b155fd356d09f76261d6f2feca19b992290e11ed3edc7c751cd4816ec3e8728525119e573c1ec40c647274e78886d0ae61bb0b12aa4d16c7606c6d9b42f77fca550e154028d6d69a2c0fe75f59e45b159fca11b38c52feb8da60abfdd2b113b7568fca67615308e83d6cd44cebe40aa79f03eb29964586e6e52430553d60fb7a283295c24e489884c6267a4857d6108276ba1b48427a9f73e1c081fd7d9255aad4f2e66f9e334f021c16e77da3af509b59f802d53454bd6a41552f6c3989dfd8a9000109340d012cb4a62144b1050bcac62fd7e46c8382d777fe0651df73ae0cdd388dcb00f38fdfe260c6241f1eb7a2fedb63417397d73f07e8218dc2f86b3b0089a2e150fe82d25cb7a3319ef0bbcdc819f47e736c3188ffb9c1d9d966f3d65a53c1cd62d424989084a00b1e4eb679a4867b79808fc185f248312ff27698a3f26ed3f2d63a28349445ea95ec389b16cdab7345eb37b282874d2cf908583e037f72310605cae5fd2052b5dc659015ddb78b999966950578577f68882fe66183d2d059c049d79b8c3bbd38dd397f97a39eaf6dc073d3881430208451978fec78b08704e0d9b43c239fdc032c55e578880068acda9bd48fb44bf331987b894219368e886fab08f4ac9d160a08540d3fa212d99084b6e94c4878582f2cbc2bf3a941aba9517ce76c92c45e438ace48d0effa6a064824a7405a56555b9d2cdb10bb97669ab34e1f0f796158a196444cc4cd17a00396f0eccdcfbb1320d50353ea3f7f9d0e1a65848890ab2b5397df51b8f7908a6c24d5e837d011f711b7b59e3870fbd1592e89ec62f0a6f3dad9cfa721fe69a5e8a29c862eea8c9c29b6cc1d9f5c7cbad0e05fd2aa14698a3be712b1fa5711915f7fe2723ff2c1b1b189c4d8253aef55d2d5a83a9169eacc66f10ef094d34eedf3040d609f0be8a9587bd4b949fcb1b3ff86a74a7da414278fde45f2957c42d23a8143c87d06944bd9d5ed69acdf17dac00e3da4bcbd1110402d7c7630d11d11a81ea521efd9c0dd6b37695f8757d4b89bdedd4f7e027ee2907702ccae6a635ce3ebcc1c5b5e63464bc12d23e3b5d2e0d9a48b73b95c713dd30f4c8d666ab39a3bdf17fb8950de80b4eb1014157ddd28a937a402097265ec57e1ea1f2ea06f47817aade85c008eb17d231b7d6e86301e556d1865b82a30d81b20d67d31375c6f12ccb6512b7ae8d881adc23ad222881c8739912f587b923fcdc8b777eb57766139444c916ba9ce2b64155e069844bad36ec244070ad08761bcdfc87b51c9b15adf636569c093a22bec6967a794974212d0d93e25a52351c33f44a47fc0079834f9dace69dd04f14110883683f614fe83e8405c29b5ad694a183f65f337545aa16436a3332d043c89a86003ddfa03b176d1f1e640ae2b96f9aaa4b70103160732890fb26563ae32f3443806ef455ef1683dbd90083ffb3a667291a695abf41e8fcb65790b27f55fa2c64e988e96acf93bf9e6d80c981666d89918e84fc638476dad6020e04a81da8519140dddc8605c08a90e521a8b105ec23c4b6bec6d58f036567a0458c01e7f9c65480be738c89df71250dbc5da9cd38a6ec5ea96f7e9c28ba388165eef139ec304d11c91b75af4748b9ed8d52206c511c3336706fe28df26f834ba8be71cc7a919726e00fc4d9b0a89594fc86a77978cf5bc0089960e3d2ab57d5f6d0031cf7b89fb5243cc3cc2691549bd787e368f3d28234a30eb17a64df3cab29c1c775f2ad3dd178b2e16ba2d770c7134ad07d0a37ab760a8b138e1a47aef62754c96c4ef657f5df0fdb4c9f6c9205a301977c5b2d19a3aac6b88313bf971761d1ec437043c600b5364b3cede9df91a35c84915afc042b4c96fb3cea14aaf08c7e658e3d21002787fa79ae0e34c8aaf9ee2b9747b0c2bd0ac482bcd4fe4751abd78fe669a93696f5f923049c9ead1edbdb5314c529bb1d56251ec62d9c62a5c6516a91d88657eea0004c5127bc3478a2fd1550ff6a4eef03b42169275ff298724d5a0c84244deb0c59d3e472484009a62a627e4e2c9efef9f3858acbdd74faa7b434340192ac7e6d2bc1e1ac464569cb7e8a2619d3431734dab32adfbbd51db19124c61e3428629e285a5eb051037d1cd7ca3e90bfa9c586954ef718990dc6631d85f33cd0ce25f0530035bc27db90507a89e69f42419ff2e0895e9c3d1879a37350ab8d64b081e20b15a1c197c559b3bba781e4f33a25332b7bf653315313c374a04c2be1fd420aedd112aa0a330ffb6e37d529e76c7037b85becd69f2fef0034d25bcc8b3130b160b3993fb0d847d5aa8a354e93c39ff1b43a0b0053f63ed15a314e4129134406c1f5b286cb0ae36e47b8d81b6a15dcea0385c32cfdbe427d4b1abda190ab2ccb8abae1f4b84513412452472f48db0bb1e2e9d649dae98696a7125b45a3ac5d71867d64fcf1eb315850816cdbeef156eeecc8ea9be4c7aa58bdb7765666e40d32aa89fb7299a8626fd2fe76e2526a98d280b54cce349cab3c8ea444cf28e58ad44a6effa0ae2e0a4d0a96fdc39890d7bf5036d2e113fdd2615496809e3ff865dbb5adafeff0d8ef0086dc437e1099549094867a80fe43ef1b7a319a2e22c5b3d815961ecdc3f8675d94f1aa84d75707cd1e7bec5a58015a63c5db85cc81dd4c801205fa5969a4d2f098b12d88e52edbf76ae3c659d7c83918c2edfb79149479d53df128f4e0e4999b55eb8b4a45545fda02fddfc631bc9761d4d6f5fa1b919cd663b293f7f4a8b831a9e2616e634db6f04e468ee03b09f0ead00abcf066dfd105d5e68575f7f8c561e9bcd78501c00383904daa015f96b183c3e15af332dc91563b3defa6d05d6aa76d0db6e1a555e8c15414b15a64321aafcade829b2f3e76f2a56428940f3e43d59e0df3716e26df7d59d53adc14a9d5be813f978f7016fe028131e218267dc850eb7ab054e2572c408edf8c6bc40e8a81254dfb77a772377ceaf236cc837b5fc7e6b9c25ad8e74b48270dafb7db8a5c84e2882e7b52fd485bcd53381336e952d5edab7bc70d20cf2c0970a13871e2484640443f91396611e70d0ba55d1f317bf5c043d2efb33ac8a45133445a48f3a80d3ca2176c48875f4cac14a7eaf940b70698a9ffdd668cc9553250893227e3a9ec0404aeec9f94ff16a3e8863eb882de9a75055850b405d1853fe1e6d96b36c9209237fe009845c7c47842d4760c4204f83b9cfdc4090fc695dbfe69"}, {@device_b, @broadcast, 0xb6, "c22bae468cd121737c3508699f78733e02110ecb773af058db7cae027e95d4ebe8f953971dcc9866fbbed12bc74601253fee1a8680c604eaca6bcdc7e0d1d5860862d11639ef89d6c989522613277e5c7f9b2f4de23f45b83236c16b682fb8ee6b2a88ea4062bb96b726ad5de5e6d7671ae04bc60c29bd9891a0344c10084aa66c6e4abac073fb85d9b960921161e3ce2283c34f2a8df6a56d888ca3a00e4df6265b72f4b46712de3a70010852af513dffe626efc450"}, {@broadcast, @broadcast, 0xff, "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"}]}}, @NL80211_ATTR_FRAME={0x2a4, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @from_mac, {0x5, 0x3}}, 0x0, 0x4, 0x63, @void, [{0xdd, 0x48, "17a04035f71db4924253f06834f03e94f5849a5f08549a130afd503829365814920fb7975bbc78f6d943f06e5971578d5e3b3eaccfa34dda14d33b81946edf42d1cde87e2a0d9b03"}, {0xdd, 0xed, "b0bc3460e5a5e3f321dc689f1ece79aef8f86de66723683165dbaaf836dcf23796e22ab968452deba0f930e3158ead0258625c4ec968c4bc0085ccd078cfe96fb17c611797086903b3c39f2993aa26731ff5d1311261c30a8093b5ee505dd2687476116269451028f56da22a1449f376f6c42256c4014069405660005cc743040f12f3526a827b90e8417bf0528ec84854aa409b99572a09843edad65717cb73f497fa2fd3a7bed70daafab5a0b481ce00aa9da66076bba4933342b4ca5588c7116378d33a1a54220e44f4c1d48e5bcec10a50327e9d3e0ce17041fa2d6d70559182f8fcaa3f6c5859a61136f4"}, {0xdd, 0x2d, "16a9b74e1bf0e830e46ce73d6dc0dc3ec39e60e1a6b3d62eeddd166ac4ab9760af5833e460e6e1523527adb12d"}, {0xdd, 0x2f, "a1de7c9db2d4fcc27a32894475e7ea5903f32b9137ff337d3a96b3f48d9c6a8040752c6456a94d0c7c39764eb26dc5"}, {0xdd, 0xe7, "168db7f76902f5e6bfbcc556283a2aac2e1e5109c46756ec7160f66a99e9c28433513a58866e60c86251c2abb053103dd2e6c1da50557a34c403ab0205060a5dd0a1864e197c03ffe8728c614798f5e321be5587bac254b12c2ec728e7ed7537ff690c4cb4762f5cbe946f2bc01e12c3bf6bb20489af8ba7835ed5fd63ef157b90d1bda2a5af1a5d0da373d0e5a0f3868367480045b821bc9bf62d2bc13fef31d3b85e9df2b6206799f48b7f09416a02a21afbff6091a8cd82f8f85669fcb451edd0f946f30b250a91a8ad189c0094a097c7dae480415a89c1c0bb2b0435b7d7369030c28b931e"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x10}, @broadcast}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x5}, @device_b, @device_a, @basic={{0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x7}, "1eba67130dc0238bcbcbb545cdde69420345eaaa3c82ce0efca41ffb187bd1a21c4240094888471039a6935965574149cec6522ad949a10eb5797cce7fa7253a5ddcc4638af5a5bf189a1fe6c86b881ccc73c6710461045eeb5c29a8f83e92a776b0ff013b6e4205d0488d952e13f2e5842fcc6dd95a48cdad997db10d67cb5c"}}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x4}, 0x4008884) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82800200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8040) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_enter(r3, 0x79dc, 0x0, 0x0, 0x0, 0x0) 48.440772111s ago: executing program 32 (id=456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) (async) close(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="fd00f644982000006185490b08f2447ef9b6000000000000003d7c172231da57df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) socket$nl_route(0x10, 0x3, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e74200", 0x4, 0x0, 0x80}, 0x3c) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000400)=0x400000001, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r6, 0x0, 0x3}]) (async) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000000000000000001ffffffff000000000000000000000000640101010000000000000000003bec000a01010000000000000000000000000000000000063500000000020000000000000000000000000000000001ffffffff"], 0xec}}, 0x0) 48.431159571s ago: executing program 33 (id=457): r0 = socket$packet(0x11, 0x3, 0x300) splice(r0, &(0x7f0000000000)=0x7, r0, &(0x7f0000000040)=0x7, 0x5, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x40000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x1000000, 0x6, 0x2, 0x8, "5b1880bc6cf0b32e58f2141bb829b5532afda6f257c96eb295f3a6b9ac7cae593c2654ad1f9fee6019644d62c18a19ba1588b7ee8dfa501ce86adddb0f21660f", "45dfc80aa3b276cb856dc3fba1779899054e111604e40707595259b82b44240c", [0x10, 0x80000001]}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000200)={&(0x7f0000000180)=""/91, 0x5b, 0x3ff, 0x39e}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x13}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "981a2dc200e52d5d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1, 0x5}, {0x2}, {0x5, 0x3}, {0xf1, 0x1}, {0x1, 0x4}, {0xa, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x8}, {0x6}, {0x0, 0x1}, {0x9, 0x3}, {0x3, 0x1}, {0x8}, {0xa, 0x2}, {0x2, 0x1}], "7f3e928993c14d85"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x0, 0x5}, {0x4}, {0x4, 0x6}, {0x5}, {0x7c, 0x2}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0xfa}, {0x4}, {0x2, 0x6}, {0x10, 0x2}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x2}], "6c35070b580e5803"}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc890}, 0x4000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10040004}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6482e606ceee4857912e0f059ef10bee17ec37e90202f351"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "561d2acbc93c4891b393df0218ae92cc694af673cd74fd63"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a26f5d3f0d2c582e4b6f30bea8e53b6c44e4f023ca063f23"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x4048854}, 0x24000804) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4080000) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) close(r6) connect$inet(r2, &(0x7f0000000880)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={0x0, 0x8, 0x5, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e22, 0x7, @mcast2, 0x7}, 0x1c) futex(&(0x7f0000000d00), 0xd, 0x2, &(0x7f0000000d40), &(0x7f0000000d80)=0x2, 0x2) syz_emit_ethernet(0x5f, &(0x7f0000000dc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x2}}, {@x25={0x805, {0x3, 0xf, 0x27, "4a53174e7404f1f94e88f974be0646ddbd10485286f235187cd66b8bb958c40cdd7a6807517276e51e7a4b78a16c3e82d38ab6912179a74a1e9b4f2dd8549e3e8605ecc34e96"}}}}, &(0x7f0000000e40)={0x0, 0x2, [0xd78, 0x587, 0xf98, 0x331]}) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000ec0)={'system_u:object_r:restorecond_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x3}, 0x4d) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r8, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb94e}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c005}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = accept(r9, &(0x7f0000001080)=@ethernet={0x0, @random}, &(0x7f0000001100)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0x10, 0x7, {{0x24, 0x4, 0x3, 0x36, 0x90, 0x66, 0x0, 0xd, 0x4, 0x0, @local, @remote, {[@cipso={0x86, 0x4a, 0x0, [{0x1, 0x7, "b840aaae05"}, {0x1, 0x8, "1e24416f752c"}, {0x1, 0xb, "bca4db6e1dde228fef"}, {0x2, 0x6, "344becb7"}, {0x6, 0x12, "3460aaac91f412d16e53c9220270f3e2"}, {0x1, 0x4, "9916"}, {0x6, 0x9, "977bcf287ab975"}, {0x6, 0x5, "a36456"}]}, @generic={0x7, 0xa, "4c19fb14e210ed01"}, @lsrr={0x83, 0xf, 0x17, [@multicast1, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @broadcast, @loopback]}]}}}}}) recvfrom$packet(r0, &(0x7f0000001140)=""/180, 0xb4, 0x40010100, &(0x7f0000001300)={0x11, 0xf8, r11, 0x1, 0x8}, 0x14) sendmsg$tipc(r10, &(0x7f00000025c0)={&(0x7f0000001340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x2}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000001380)="a91c", 0x2}, {&(0x7f00000013c0)="704388da95245ca89460bcde7c356d683a87922d669343f24c67280d45b6e050d2aab078a3e2e548b65020dbc76f2b9603878d3508bc5fa895bade96c973a8b5e0f1bc0b5242726a1268c5d47b96b06779c288591d12085f67d724e89f26ac56851b4ee43445f281a1522bd7e1dbced45eb5c0a843b75e34ba4aa5b0b0518ef2015f446c2cd2db329a56b4d7608f58469d2a6f29cd7116fcf6d5c36681206c9412a466d9fdd465097e6fb582a7ba1db87548bf7c64aad0f221924f7fbd42632ce18230efc85495e102b392d77003ef857b21fdf018262b6a41dc94f94694b73ece", 0xe1}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="abca83ae7c9ed4e3805c08968af0bbb7284abf2a62984077ebcfcb96f1bb557de915d74bd3f8a2b34fa96c4fc9ccc1c3ce9d89", 0x33}], 0x4, &(0x7f0000002540)="5e400f6443d824265ddffdcf8a9843f3b08df6ef98411166644b70f9ce352d54d3a374239dfb239b38c2e998f85029f396f58a3dc78549b16c92f2df34a484c5c285fc6e002881361b4ec501f3fed977810d8416cef7b1d1353d08216bc1e155658b2002991977e4064eee86155f17d9d0e3fd6c318b1c622b10a7", 0x7b, 0x4000040}, 0x4000085) 48.307229971s ago: executing program 34 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000007b8a00000000000007020000f8ffffffb703000008000000b704000000000000850004000300000095c7f7486b6a1c958ccb5df4e3fc115d2dd6f942cb62f013b87160616c3ec0ad407b1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000d5bd3e57786d26e9fad7db0c1b2b7b333f964e18b0cdbd0adbf5a6fd47c57cf7ac0f7545c537bac8ba26172dd21dfd7b01c119d7a4460d16fcba9bdfff9cc6f7eaa9dbafb1ef0fe666007f461447e4d5de1130e2f9c74cbe16b6e94e7d020fbb172d6e7bd7118f7869a3487743f9ff8b3d91d4e94453856f8534a3728366736e240f70cd3c5cc4f210f31752066e2f02dffeb99e781fa58f5c55eb9ddc19eace26b8fb0b06dfd848a06d7e8b7760eb4d4d9e84e5eb46ec072690d1f15c2b7a437ef67d8351365823feba5193cb5eb419a0d2556a8fa5c737f150d02ea206", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) pipe(&(0x7f0000000180)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x8}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r12, &(0x7f0000000140)='./file0\x00') 46.410073223s ago: executing program 3 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) semop(0x0, &(0x7f0000000080)=[{0x4, 0x3}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@random="9139a817b9cb", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "8f29d91e4c97f762e1328c3472e249d8ab3d4ae80ae1c87935d7bf21348cf275", "168bd6ede74050eb781a6e72f374a299", {"bb9a015946e9a149c9f10dc92f147588", "23984ecf3947179d6692dd6a8a63ae96"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004780)=""/198, 0xc6}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) 46.409488624s ago: executing program 35 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) semop(0x0, &(0x7f0000000080)=[{0x4, 0x3}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@random="9139a817b9cb", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "8f29d91e4c97f762e1328c3472e249d8ab3d4ae80ae1c87935d7bf21348cf275", "168bd6ede74050eb781a6e72f374a299", {"bb9a015946e9a149c9f10dc92f147588", "23984ecf3947179d6692dd6a8a63ae96"}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004780)=""/198, 0xc6}], 0x1}, 0x1}], 0x1, 0x10001, 0x0) 38.931884976s ago: executing program 4 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfde0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800006, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r4, 0xffffffffffffffff, 0xb, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x10, 0xb1, 0x3, 0x6, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x2, 0x2, 0x5, 0x7ff, 0xfffffffffffffffe}]}, 0x30}}, 0x4048010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee01, 0xee00) keyctl$chown(0x4, r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r10, 0x0) r11 = getgid() keyctl$chown(0x4, r9, r10, r11) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_io_uring_setup(0xc18, &(0x7f0000000380)={0x0, 0xc7cf, 0x4, 0x0, 0x75}, 0x0, 0x0) 38.867824625s ago: executing program 4 (id=543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f00006e7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000312000/0x4000)=nil) 38.765279125s ago: executing program 4 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 38.745595155s ago: executing program 4 (id=545): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x61, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0\x00', r2, &(0x7f0000000340)='./file0\x00') getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000640)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000380)=0x5, &(0x7f00000003c0)=0x2) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000600)='tmpfs\x00', r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb16000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 38.287543873s ago: executing program 4 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRES8=0x0, @ANYRES32=r0], 0x1, 0x284, &(0x7f0000000680)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r0, @ANYBLOB="0180000000000000080000080000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000000000000100"/28], 0x50) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r7}, 0x18) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x8}, 0x14}}, 0x20000040) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xb3, &(0x7f00000005c0)=""/179, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000940)={0x7, 0x3}, 0x8, 0x10, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0, r3, r4, r3], 0x0, 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 32) ioperm(0xd005, 0x100, 0x1) (async, rerun: 32) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f00000003c0)=""/96, 0x60) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r11, @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x18) (async) write$binfmt_elf64(r10, &(0x7f0000001680)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed60ef0000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) (async) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) (async) close(r10) 37.958861511s ago: executing program 4 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000c00)=@delqdisc={0x398, 0x25, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x2}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xb0ff, 0xb, 0x2, 0x7ff, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0x4]}}, {{0x1c, 0x1, {0xf9, 0xf7, 0xb, 0x800000, 0x1, 0x6, 0x80000000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x1, 0x4, 0x9, 0x800, 0x0, 0x4, 0xffff, 0x6}}, {0x10, 0x2, [0xcf, 0x3, 0xe29, 0xfff, 0x90, 0x7fff]}}, {{0x1c, 0x1, {0x81, 0x0, 0x4, 0xf, 0x0, 0x3, 0xfffffffc, 0x5}}, {0xe, 0x2, [0x2, 0x3, 0x4, 0x2804, 0xffc7]}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x3, 0xd9, 0x0, 0x8, 0x10, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x80, 0x3, 0x7, 0xfff, 0x1, 0xf, 0x0, 0x2}}, {0x8, 0x2, [0xff, 0x2]}}, {{0x1c, 0x1, {0x10, 0x1d, 0x81, 0x9e76, 0x2, 0x1000, 0x4, 0x3}}, {0xa, 0x2, [0x7f, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3a, 0x4, 0xda1, 0x80, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xa, 0x1]}}, {{0x1c, 0x1, {0x5, 0x40, 0x855f, 0xb, 0x0, 0x10000, 0x3, 0x8}}, {0x14, 0x2, [0x8, 0x9, 0x0, 0xffff, 0x3, 0x1, 0x1, 0x6]}}, {{0x1c, 0x1, {0x0, 0x48, 0xd, 0xfffffff8, 0x0, 0x7, 0x6e, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x80, 0x0, 0x8, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x1, 0xfffffff7, 0x0, 0x1, 0x7, 0x9}}, {0x16, 0x2, [0x6, 0x7, 0x0, 0x0, 0x8001, 0x7, 0x10c, 0x5, 0x7]}}, {{0x1c, 0x1, {0x2, 0x8, 0x7, 0x7, 0x2, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x3, 0xf041, 0x800, 0x0, 0x80000000, 0x2, 0x2}}, {0x8, 0x2, [0x1ff, 0x2c43]}}, {{0x1c, 0x1, {0x7, 0x2, 0x9c41, 0x33cb, 0x1, 0xd, 0xb7, 0x3}}, {0xa, 0x2, [0xfffc, 0x2, 0x4]}}, {{0x1c, 0x1, {0x8, 0x4, 0xd, 0x5, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x17, 0x9]}}, {{0x1c, 0x1, {0x1, 0x8e, 0x100, 0x7, 0x2, 0x60, 0x3, 0x6}}, {0x10, 0x2, [0x2, 0x676, 0x3, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0xe, 0x3, 0x5, 0x2, 0x1, 0x7, 0x44, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x31, 0x0, 0x1, 0x5, 0x0, 0x2, 0x7, 0x9}}, {0x16, 0x2, [0xc86, 0x5, 0x2, 0x5, 0x9, 0x4, 0x7fff, 0x9, 0x7]}}, {{0x1c, 0x1, {0xfb, 0x9, 0xff, 0x2, 0x2, 0x4, 0xfffffffb}}, {0x4}}, {{0x1c, 0x1, {0xb3, 0x3b, 0x7ad, 0x1, 0x0, 0x3, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0x7]}}, {{0x1c, 0x1, {0xf, 0x3, 0xfffd, 0x1ff, 0x1, 0xffffffff, 0x80, 0x1}}, {0x6, 0x2, [0x401]}}]}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7f, 0x37}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x398}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010028b57000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r10, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 37.921340762s ago: executing program 36 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000c00)=@delqdisc={0x398, 0x25, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x2}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xb0ff, 0xb, 0x2, 0x7ff, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0x4]}}, {{0x1c, 0x1, {0xf9, 0xf7, 0xb, 0x800000, 0x1, 0x6, 0x80000000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x1, 0x4, 0x9, 0x800, 0x0, 0x4, 0xffff, 0x6}}, {0x10, 0x2, [0xcf, 0x3, 0xe29, 0xfff, 0x90, 0x7fff]}}, {{0x1c, 0x1, {0x81, 0x0, 0x4, 0xf, 0x0, 0x3, 0xfffffffc, 0x5}}, {0xe, 0x2, [0x2, 0x3, 0x4, 0x2804, 0xffc7]}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x3, 0xd9, 0x0, 0x8, 0x10, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x80, 0x3, 0x7, 0xfff, 0x1, 0xf, 0x0, 0x2}}, {0x8, 0x2, [0xff, 0x2]}}, {{0x1c, 0x1, {0x10, 0x1d, 0x81, 0x9e76, 0x2, 0x1000, 0x4, 0x3}}, {0xa, 0x2, [0x7f, 0x7, 0x3]}}, {{0x1c, 0x1, {0x3a, 0x4, 0xda1, 0x80, 0x1, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0xa, 0x1]}}, {{0x1c, 0x1, {0x5, 0x40, 0x855f, 0xb, 0x0, 0x10000, 0x3, 0x8}}, {0x14, 0x2, [0x8, 0x9, 0x0, 0xffff, 0x3, 0x1, 0x1, 0x6]}}, {{0x1c, 0x1, {0x0, 0x48, 0xd, 0xfffffff8, 0x0, 0x7, 0x6e, 0x6}}, {0x10, 0x2, [0x0, 0x4, 0x80, 0x0, 0x8, 0x9]}}, {{0x1c, 0x1, {0x7, 0x8, 0x1, 0xfffffff7, 0x0, 0x1, 0x7, 0x9}}, {0x16, 0x2, [0x6, 0x7, 0x0, 0x0, 0x8001, 0x7, 0x10c, 0x5, 0x7]}}, {{0x1c, 0x1, {0x2, 0x8, 0x7, 0x7, 0x2, 0x8, 0x5, 0x2}}, {0x8, 0x2, [0x5, 0x4]}}]}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x3, 0xf041, 0x800, 0x0, 0x80000000, 0x2, 0x2}}, {0x8, 0x2, [0x1ff, 0x2c43]}}, {{0x1c, 0x1, {0x7, 0x2, 0x9c41, 0x33cb, 0x1, 0xd, 0xb7, 0x3}}, {0xa, 0x2, [0xfffc, 0x2, 0x4]}}, {{0x1c, 0x1, {0x8, 0x4, 0xd, 0x5, 0x1, 0x6, 0x9, 0x2}}, {0x8, 0x2, [0x17, 0x9]}}, {{0x1c, 0x1, {0x1, 0x8e, 0x100, 0x7, 0x2, 0x60, 0x3, 0x6}}, {0x10, 0x2, [0x2, 0x676, 0x3, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0xe, 0x3, 0x5, 0x2, 0x1, 0x7, 0x44, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x31, 0x0, 0x1, 0x5, 0x0, 0x2, 0x7, 0x9}}, {0x16, 0x2, [0xc86, 0x5, 0x2, 0x5, 0x9, 0x4, 0x7fff, 0x9, 0x7]}}, {{0x1c, 0x1, {0xfb, 0x9, 0xff, 0x2, 0x2, 0x4, 0xfffffffb}}, {0x4}}, {{0x1c, 0x1, {0xb3, 0x3b, 0x7ad, 0x1, 0x0, 0x3, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0x7]}}, {{0x1c, 0x1, {0xf, 0x3, 0xfffd, 0x1ff, 0x1, 0xffffffff, 0x80, 0x1}}, {0x6, 0x2, [0x401]}}]}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x7f, 0x37}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x398}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010028b57000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r10, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 32.346954171s ago: executing program 5 (id=646): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) vmsplice(r2, &(0x7f00000005c0)=[{0x0}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000100004000000000000ec000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) inotify_init1(0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b000000a2d4b5ff3c045a4602000000000000000100000000000001006f004c04100000000000000a040000000000615f002e2e5f306100fd58b051badb1296932a3196954ac348cd2325de8c77d221bbe4c1d46f8c851884ed1bafdef721bf5c6697"], &(0x7f0000000680)=""/4096, 0x4f, 0x1000, 0x1, 0x1, 0x10000, @value=r2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200), 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="2789090dc162ac81eab5cbbd000000007b8ae6ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000ec5202dc5fcf6be7a53a8adf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) statfs(&(0x7f0000000380)='./file0\x00', 0x0) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) 32.25899614s ago: executing program 5 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r7}, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 31.855074309s ago: executing program 5 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 31.834292499s ago: executing program 5 (id=661): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x240, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x12) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) modify_ldt$write(0x1, &(0x7f00000001c0)={0x803, 0x0, 0x2000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sigaltstack(&(0x7f0000000140)={&(0x7f0000000900)=""/4096, 0x80000000, 0x1000}, &(0x7f0000000200)={&(0x7f0000000180)=""/7, 0x0, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r0, &(0x7f0000000540)="95", 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x200000}, 0x18) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_int(r5, 0x0, 0x2) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) 31.137888136s ago: executing program 5 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x14, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)=""/208}, 0x20) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 29.38520583s ago: executing program 8 (id=689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) (async) sendfile(r0, r0, 0x0, 0x100000008) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00', @broadcast}) 29.250853399s ago: executing program 8 (id=691): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x531b83, 0x70) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_bridge\x00', @random="6d3f978fa32c"}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 29.154903568s ago: executing program 8 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005ec0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sync() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00fe880000000000000000000000000001fe8000000000000000000000000000aa02009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624c"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000014c0), &(0x7f0000005d80)=0x4) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40100}}}}}}, @IFLA_VFINFO_LIST={0x28, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}]}]}]}, 0x70}}, 0x0) unshare(0x6a040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x2000000, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) ftruncate(0xffffffffffffffff, 0x51a9497) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendto$rxrpc(r4, 0x0, 0x0, 0x800, &(0x7f0000005e80)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x24) recvmmsg$unix(r4, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000014c0)}, {0x0}, {&(0x7f0000001680)=""/1, 0x1}], 0x3, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001800)=""/91, 0x5b}, {&(0x7f0000001880)=""/126, 0x7e}, {&(0x7f0000001900)=""/210, 0xd2}, {&(0x7f0000001a00)=""/56, 0x38}, {&(0x7f0000001a40)=""/7, 0x7}], 0x5, &(0x7f0000001b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x3, 0x102, &(0x7f0000005d40)={0x77359400}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x1) 28.205647105s ago: executing program 8 (id=702): r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) shmctl$SHM_STAT_ANY(r0, 0xf, 0x0) 28.099552915s ago: executing program 8 (id=704): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x29}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)="d77fdd53", &(0x7f00000001c0), 0x3, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockname$packet(r2, 0x0, &(0x7f0000000100)) write$cgroup_int(r0, &(0x7f0000000380), 0x101bf) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) 27.983003524s ago: executing program 8 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 26.85703209s ago: executing program 5 (id=713): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000009480)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000940)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000b00)=""/155, 0x9b}, {&(0x7f0000000bc0)=""/187, 0xbb}], 0x6, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/52, 0x34}, {&(0x7f0000000e00)=""/40, 0x28}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000011c0), 0x6e, &(0x7f0000007a40)=[{&(0x7f00000057c0)=""/202, 0xca}, {&(0x7f00000010c0)=""/57, 0x39}, {&(0x7f0000001240)=""/123, 0x7b}, {&(0x7f00000058c0)=""/242, 0xf2}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/108, 0x6c}], 0x7, &(0x7f0000007ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000007c00)=@abs, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000007c80)=""/54, 0x36}, {&(0x7f0000007cc0)=""/191, 0xbf}, {&(0x7f0000007d80)=""/68, 0x44}, {&(0x7f0000007e00)=""/228, 0xe4}, {&(0x7f0000007f00)=""/91, 0x5b}], 0x5, &(0x7f0000008000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000008080), 0x6e, &(0x7f0000009400)=[{&(0x7f0000008100)=""/130, 0x82}, {&(0x7f00000081c0)=""/4096, 0x1000}, {&(0x7f00000091c0)=""/205, 0xcd}, {&(0x7f00000092c0)=""/62, 0x3e}, {&(0x7f0000009300)=""/209, 0xd1}], 0x5}}], 0x7, 0x101, &(0x7f0000009640)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000009700)=ANY=[@ANYBLOB="18000000ff0100000000000001000000184000000200b906b1950000000000009500000000000000a789896b64693b808b1ccc78da16e49475915b1f4e916cac5a640ebc32f21630c52998d01c9ba8e23d476d1d6a96dd5688eb6251a6efcb43e5192ae3271c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000009680)=ANY=[@ANYBLOB="180000006a00010000000000fbdbdf250a00080000000000351dcdb9387da39629cfe4dd5f279b86de74fa92e09409e139f7d46e99524b9ca1962460914590621696be7387a5610bee927cdde3389714d5f6cb61a0fb"], 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmod(r7, 0x1) (async) fchmod(r7, 0x1) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket(0x2a, 0x5, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) 26.82589076s ago: executing program 37 (id=713): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000009480)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000940)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000b00)=""/155, 0x9b}, {&(0x7f0000000bc0)=""/187, 0xbb}], 0x6, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/52, 0x34}, {&(0x7f0000000e00)=""/40, 0x28}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/104, 0x68}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/31, 0x1f}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000011c0), 0x6e, &(0x7f0000007a40)=[{&(0x7f00000057c0)=""/202, 0xca}, {&(0x7f00000010c0)=""/57, 0x39}, {&(0x7f0000001240)=""/123, 0x7b}, {&(0x7f00000058c0)=""/242, 0xf2}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/108, 0x6c}], 0x7, &(0x7f0000007ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000007c00)=@abs, 0x6e, &(0x7f0000007f80)=[{&(0x7f0000007c80)=""/54, 0x36}, {&(0x7f0000007cc0)=""/191, 0xbf}, {&(0x7f0000007d80)=""/68, 0x44}, {&(0x7f0000007e00)=""/228, 0xe4}, {&(0x7f0000007f00)=""/91, 0x5b}], 0x5, &(0x7f0000008000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000008080), 0x6e, &(0x7f0000009400)=[{&(0x7f0000008100)=""/130, 0x82}, {&(0x7f00000081c0)=""/4096, 0x1000}, {&(0x7f00000091c0)=""/205, 0xcd}, {&(0x7f00000092c0)=""/62, 0x3e}, {&(0x7f0000009300)=""/209, 0xd1}], 0x5}}], 0x7, 0x101, &(0x7f0000009640)={0x0, 0x989680}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x5, &(0x7f0000009700)=ANY=[@ANYBLOB="18000000ff0100000000000001000000184000000200b906b1950000000000009500000000000000a789896b64693b808b1ccc78da16e49475915b1f4e916cac5a640ebc32f21630c52998d01c9ba8e23d476d1d6a96dd5688eb6251a6efcb43e5192ae3271c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000009680)=ANY=[@ANYBLOB="180000006a00010000000000fbdbdf250a00080000000000351dcdb9387da39629cfe4dd5f279b86de74fa92e09409e139f7d46e99524b9ca1962460914590621696be7387a5610bee927cdde3389714d5f6cb61a0fb"], 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmod(r7, 0x1) (async) fchmod(r7, 0x1) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket(0x2a, 0x5, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1c8}}, 0x0) 12.767743568s ago: executing program 38 (id=706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12.166633365s ago: executing program 7 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="4000e9892ac176b900b2f1b94c030006654800009c196d9ca42d6de15676f30a884e8f35aa2c5c2e3ea7951b66f3175bcdfbb8767678bef53432154d02b1fb7b0aef3dfa6b4e54f357", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r5, 0x400, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x30c) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a90303000000000000003200000008004001", @ANYRES32=0x0, @ANYBLOB="1d56e95ca4c36d8907cf28578c1d89aa4468a04d631301c27abcf66e7e6e1e59250425dfb67a5bb3f135097b4f7f334fd610ff19edd71853fec2b93f3be5f8ef86a31761a4c6555677973bb2109df1e66a2acfc8b3c2389ce8f19b11df620a6d36be19363f528f3641ba10fd78f9d5a9ac06ca26d0ddc531274aeb2a100a7bc603bed686afa829e7b780709296808423efa98ebf1c6bb6293c23440e61a04728f990da0e2ea955bfe761d929002946abf8dcbf6c8d3027be95cb479c20f1afbeb0462a7b1052d0ba2ed5252cb6e92a2cf87b9fafd1db6d66569784f9b4e86eb75414e4ba109035f62243d0f1ec41ebb84bb62e7ba173f9a6"], 0x1c}}, 0x0) r6 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x4}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x1d8, 0x2a8, 0x2a8, 0x1d8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb0517507b830c000086074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_team\x00', {}, {}, 0xd84e00125dad4f6d}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x13, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12.111205815s ago: executing program 7 (id=876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x6744, &(0x7f00000002c0)={0x0, 0x809826, 0x80, 0x2, 0x40003}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[], [{@uid_lt}, {@subj_type={'subj_type', 0x3d, '}&(@&'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'kfree\x00'}}]}, 0x1, 0x4a8, &(0x7f0000000580)="$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") listen(r5, 0x0) timerfd_create(0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='xen_mc_entry_alloc\x00', r7, 0x0, 0x4933bd14}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x3, 0x0) 11.903280894s ago: executing program 7 (id=880): socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x511, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="006d00000095000000000000000000fdff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) set_tid_address(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3807a998, 0x800000000003}, 0x100000, 0x6, 0x3, 0x0, 0x1, 0x8, 0xffdc, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/218, 0xda}, 0xf}], 0x1, 0x2040, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)=""/23, 0x17}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x1, 0x0) 11.674013023s ago: executing program 7 (id=885): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@nombcache}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000dc0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv0}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) mq_notify(0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x2c3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ab0}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0x5) r5 = add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000e40)={'fscrypt:', @desc4}, &(0x7f0000000e80)={0x0, "4a1f9cc8db5f910e7051c416b17a12c9c2080ee5a8006934f979d0b6408c590f28e97a513368dca0236e73c72a381b4982cba38385ed50f6d17446fc2ad31626", 0x21}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x98, 0x0, 0x5, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x42}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x98}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 11.386754282s ago: executing program 7 (id=889): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x13c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x4}, @IFLA_LINK={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0xe5b}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x3, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x0, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x760}, @IFLA_PHYS_SWITCH_ID={0x24, 0x24, "c0c83ffd51ba64ab84233dfde576b2d5ff538d44caf8a1c4a6264061fb6f2c81"}]}, 0x13c}}, 0x40002) 10.88663399s ago: executing program 7 (id=895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f00006e7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000312000/0x4000)=nil) 10.879865061s ago: executing program 39 (id=895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f00006e7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000312000/0x4000)=nil) 6.683661345s ago: executing program 2 (id=946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000200)={0x24, @none={0x0, 0xffff}}, 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x3, 0x466, &(0x7f0000000a80)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x8) faccessat2(r3, 0x0, 0x130, 0x1300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000005c0)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) timerfd_create(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.610963735s ago: executing program 2 (id=947): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x38}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x800}}, {{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005911189420139631ab3c132845d5e38106591e70134b99066868f3264701d5b92dc73b8d5d832f2fec2f59c51a63f232d27591f427c0c1828a57bad4afe14bfdb44568e902", @ANYRES32=0x0], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="85000000b8f67a5bcb92d271a43ad77900e9ff17160000fe64f8faeb7b590fc570cc0239f83d6b31f2a8a5d89292ca024710025d95690d5a81bdc56f6288c9b56a9cb88c879f8a36b7fa477c8363e3754f37cdb94d2cbee007b2f37e56a906fa44120f27f67ac9498e9c5d67fc1dc6e865be070bc1f61acb9f08b17d00000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000001760800ffffffff"], &(0x7f0000000480)='syzkaller\x00', 0x1a49e91e, 0xb7, &(0x7f0000000880)=""/183, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x1, 0xffffffff, 0x7fffffff}, 0x10, 0x223dd, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[r6, r6], &(0x7f0000000a00)=[{0x1, 0x4, 0xfff, 0xc}, {0x3, 0x5, 0x5, 0x8}, {0x5, 0x2, 0xb, 0x9}, {0x1, 0x1, 0xd}, {0x1, 0x1, 0xf, 0x3}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x7, @void, @value}, 0x94) dup2(r7, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0x40000}, 0x18) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x1, 0x5, 0x0, 'queue0\x00', 0xd}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) 5.765093901s ago: executing program 2 (id=966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6}, 0x10) perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r10}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.38988042s ago: executing program 2 (id=973): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8040, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") r0 = socket(0x2c, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) 5.3871157s ago: executing program 2 (id=975): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db00000000000000000085000000009500"/33], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x99, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x11) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b0000001d002100000000000000000007"], 0x28}}, 0x4c080) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 32) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$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") (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES32=r3, @ANYBLOB="fac67d0e8f58abb3a9a3c709d28364c86093125273671de5f50e807b59a47c20cef31553f09216e46c215e1967c8f0d8b260e4850e9ccffae86badfdbc7ee070b0d45d54fd11410101f660414b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) r5 = io_uring_setup(0x15c2, &(0x7f00000002c0)={0x0, 0x3, 0x1000, 0x2, 0x379}) (async, rerun: 64) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000991e8cbb86e44024978ceef112fb9414c3c2f90d982407b7ce0c770a8834770b45328a7601cc58ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = syz_io_uring_setup(0x67ce, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 5.3314122s ago: executing program 2 (id=976): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000840)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) truncate(0x0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) (async) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trad,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) 1.729406516s ago: executing program 0 (id=1034): getpid() setreuid(0xee00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e) sendfile(r8, r6, 0x0, 0x10000a007) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x4) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r11, @ANYBLOB="83040500010000003000128085eea660697036746e6c00002000028032618847221744050009000400000014000200ff01"], 0x50}}, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) 1.551392886s ago: executing program 6 (id=1036): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 32) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async, rerun: 32) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) io_setup(0x1, &(0x7f0000000200)) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="409b3d43", @ANYRES16=r8, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r9, @ANYBLOB="24002f800c000380080001000300000008000100980a00000c0002000203aaaaaaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x20000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 1.307494335s ago: executing program 0 (id=1038): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x8903, 0xf0ff1f00000000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000030000000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a1004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000008d1200b708d56c000000007b8af8ff11000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex_waitv(&(0x7f0000001300)=[{0x9, &(0x7f0000000440), 0x82}, {0x2, &(0x7f0000000480)=0xdd, 0x2}, {0xd5f1, &(0x7f00000004c0)=0x7c, 0x2}, {0x6, &(0x7f0000000500)=0xff, 0x82}, {0x8000000000000000, &(0x7f0000000540)=0x2, 0x2}, {0x9, &(0x7f00000005c0)=0x2, 0x2}, {0x3, &(0x7f0000000640)=0x4, 0x82}, {0x5, &(0x7f0000000680)=0xa7, 0x2}, {0x810000000000000, &(0x7f00000006c0)=0x3a, 0x82}, {0x9, &(0x7f0000000700)=0x8000000000000001, 0x2}, {0x9, &(0x7f0000000740)=0x7, 0x2}, {0x1, &(0x7f0000000780)=0x3bf, 0x82}, {0x0, &(0x7f00000007c0)=0x1, 0x82}, {0x6, &(0x7f0000000800)=0x8000000000000001, 0x82}, {0x9, &(0x7f0000000840)=0x8, 0x82}, {0x27e90ca6, &(0x7f0000000880)=0x4d, 0x2}, {0x6, &(0x7f00000008c0)=0xe, 0x82}, {0x5, &(0x7f0000000900)=0x5, 0x2}, {0x1, &(0x7f0000000940)=0xed, 0x82}, {0x100000001, &(0x7f0000000980)=0x2000000000c, 0x2}, {0xffffffffffffffff, &(0x7f0000000a40)=0x6d6, 0x82}, {0x0, &(0x7f0000000a80)=0x8f89, 0x2}, {0x4, &(0x7f0000000ac0)=0x6b5, 0x2}, {0xd, &(0x7f0000000b00)=0x5, 0x82}, {0x5, &(0x7f0000000b40), 0x82}, {0x5, &(0x7f0000000b80)=0x2, 0x2}, {0x4d, &(0x7f0000000bc0)=0x10000, 0x82}, {0x4, &(0x7f0000000c00)=0x4, 0x2}, {0x8, &(0x7f0000000c40)=0x3, 0x82}, {0xffffffffffffffff, &(0x7f0000000c80)=0x100000001, 0x82}, {0xa, &(0x7f0000000cc0)=0x7, 0x82}, {0x6, &(0x7f0000000d40)=0x8, 0x82}, {0x0, &(0x7f0000000d80)=0x73fd, 0x82}, {0xfffffffffffffffd, &(0x7f0000000dc0)=0x20000004a62, 0x82}, {0x4, &(0x7f0000000e00)=0x100, 0x82}, {0x0, &(0x7f0000000e40)=0x2, 0x82}], 0x24, 0x0, &(0x7f0000001200), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b0000000000000000000000ffff070000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="00000000010000000400"/28], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) 1.306729695s ago: executing program 6 (id=1039): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x0) 1.306331455s ago: executing program 6 (id=1040): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0xffffffffffffffff, 0x200, "00ea00"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) pause() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) 1.283684325s ago: executing program 1 (id=1041): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}, 0x100000, 0x8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000000180)={0x0, 0xacc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r2) geteuid() ptrace$getsig(0x4202, r2, 0xfffffc00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000048, &(0x7f0000000080)={[{@acl}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) 1.133574764s ago: executing program 9 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000003a4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000584aaf22ced2403cdd1f28712fe6ea0889709037ace32c038637cb7e558ee5ae1aa722256baf330bfdcdda8da63ab6db9786c679e1eb3d094cc0f4f836cd77c08b8846901cc7d9009cda87b69567cea6691945003a60695bdccbb84b97"], 0x0, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x9) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000001000000018000180140002007665746830001700000000004000000005000b"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r15, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40881) 1.015353264s ago: executing program 9 (id=1043): setreuid(0xee00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = signalfd4(r1, &(0x7f0000000380)={[0x81]}, 0x8, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x400, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}], [{@smackfshat}, {@euid_gt={'euid>', r3}}, {@permit_directio}]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) r5 = dup2(r1, r4) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f00000002c0)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xe982, @private0, 0x80000001}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000a80)='}', 0x1}], 0x1}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xf84, 0x4, 0x7f, 0x124, 0x3}, &(0x7f0000000040)=0x14) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xed00}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.013271484s ago: executing program 9 (id=1044): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync_file_range(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1fc, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r6, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x1d0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1ffed, 0x9}}, @TCA_U32_SEL={0x1c4, 0x5, {0x7, 0xff, 0x4, 0xfff8, 0x200, 0x5, 0x0, 0x7, [{0xffff5582, 0x7fffffff, 0x1, 0x80000000}, {0x8, 0xfe3, 0x5, 0x100010}, {0x3, 0x6, 0x4, 0x101}, {0x239, 0x8, 0x800, 0x800}, {0xb3, 0x8, 0x6, 0x5ef}, {0x400, 0x4, 0x0, 0x95}, {0x6, 0xaef9, 0x6, 0x9}, {0x5, 0x7, 0x81, 0x8000}, {0x10000, 0x80000001, 0x10, 0x401}, {0x80000000, 0x6, 0x2, 0xffc}, {0x5, 0xfffff272, 0x7fff, 0xe}, {0x4e, 0x5, 0x2, 0xe}, {0x93, 0x5, 0x8}, {0x101, 0x8001, 0x10001, 0x2}, {0x0, 0x5, 0xfffffffc, 0x9}, {0xb, 0x0, 0x1e00, 0x9}, {0x9, 0x10, 0xfffffffb, 0x7fffffff}, {0x7f, 0x8, 0x5, 0x9}, {0x0, 0x80000000, 0x2, 0x6}, {0x1, 0x5, 0x800, 0x6}, {0x7, 0x9, 0x2ff3, 0x9}, {0x5, 0x6, 0x2, 0x9b}, {0xa, 0x8001, 0x7, 0x3}, {0x6, 0x5, 0xfffffc9e, 0x7}, {0x2, 0x7, 0x2, 0xffffe16a}, {0x13d, 0x2, 0xac5, 0x9}, {0xf, 0x8, 0x1, 0x5}]}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.009826734s ago: executing program 9 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41180, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, @l2={0x1f, 0x8b0, @none, 0x0, 0x1}, @ethernet={0x6, @remote}, @ethernet={0x306, @multicast}, 0x6, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)='veth0_to_bond\x00', 0x592, 0x6, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="20b0936cc2ea90d2aa9f9d778b3f3d6156386e75a210de779857810a6c1a26317a075f3c0ba9bb7fd77912f7f4ba1c80058e93f5ed170731a66bfbe576926d383da99e38d5eb61d8d1ed26967de73733325e0bda48285cf108c34526bb9567bf324d30d776a6645da83dc599c441f0ce785cd89cba75b0c9cd7e7d1713dff28d98e731eb525156d72c8514dc2212998e3a66b1ddc4b3c260c01e36cd1f75186e34f99a7d61cc7a8fe734f39e056324a783f635822f667e6e8ed4e531db621ec787b10722c7daf4934e05ea5d826d96e02e13cbe2c4d979cec8", @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='netfs_rreq\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x2c, 0x9, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) splice(r7, 0x0, r6, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r8, 0x0, 0xfffffe3e) open(0x0, 0x2080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 471.701742ms ago: executing program 6 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0081, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xfffff5ea}}, './file0\x00'}) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)={0x278, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_DESC={0x250, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x12d1}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ec9d9f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x278}}, 0x4008004) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf251e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 432.727581ms ago: executing program 0 (id=1047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x1000}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x0, 0x0) 431.914592ms ago: executing program 6 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000e2ffffff008446c3821cb42ac2a7cb416a66c4b30000000000000018110000ee156c18194680986927af", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='mm_page_free\x00', r4}, 0x54) sendfile(r2, r3, 0x0, 0x106f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000580)="f9fd3695c517060e016e5d9a01ef3e08f6c88e4f5d1a723ea460530aa8e423fed3f293214b57265d47d0382052c06449156d7a6aa4d41f884e8dd11b925b81b3ba217f", &(0x7f0000000600)=""/245, &(0x7f0000000200)="8ddfabc20d", &(0x7f0000000700)="3dd5111d43ffc92ce302fb2f1cb9234ab246d0ab2e745cb2b27a56963ee6664b80ef55d653b44f1f14ef4b2750bb9d0c5432366ded190640413616890ea8553ad2d557d5f1cf190bd20cdfbaab6db0cbb6fe", 0x2, r5, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000040)={0x2, 0x4e25, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x6, [@local]}]}}}], 0x18}, 0x94) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigsuspend(0x0, 0x0) 430.843402ms ago: executing program 1 (id=1049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) msgsnd(0x0, &(0x7f00000007c0)=ANY=[], 0x8, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 375.322982ms ago: executing program 6 (id=1050): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e52733d66642c7266646e6f3d725d85d3dabbec3fde10", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',k']) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x2000000000000312, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000050, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x3f00, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) 371.684211ms ago: executing program 0 (id=1051): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="ffe000020000000000000000000000000000000048ec4ef6afc2216b7e1c98f0e81c7e1603d575de5a48cb842781a0cbbbf65274a856d7c0b8350faa6e5f5f11106ed6448e6300a07771b7fa432ea9c1cfea74b615472aac66f153121cc1207c4b9f067427377221f05727a7ead4737a350a2534b8b42e6806", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = open$dir(0x0, 0x4040, 0x10) linkat(r4, 0x0, r5, 0x0, 0x400) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x68060200) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000005e7147ed9ab5a2b2f225e81af28f945fd23625ad74bc492afbc55929b86f4d9e0732022d58ee0f9569a03d5cfb877086c27946c319d19accf25ea11304aa9f51d232bc4c5f6ff572a1c3ca23715a004a400bb44ed648390bb8fe63a0ce2bc856bf38289e0a3acadff9f35ff5cb02c3c5", @ANYRES16=r6, @ANYBLOB="010000000000000000002a000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r8, @ANYBLOB="08000500", @ANYRES32=r8], 0x6c}, 0x1, 0xba01}, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r9, 0x0, 0x1fc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x12, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000020000000200000000100000", @ANYRES32, @ANYBLOB="0000000000fec124a351078c070175d01100000000f01700b53b054dcf0001004c0247d2bdc033225865feb00b19acf0f9313e9b317bb528bc48da2a9d898c604e47a40169e000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) 370.798331ms ago: executing program 1 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0064f200000000005b00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x3) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) (async) timer_create(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) rt_sigqueueinfo(0x0, 0x4, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000380)='./file0\x00', r8, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrandom(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 369.979771ms ago: executing program 1 (id=1053): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="600000008000000000a8bb35f35a439720ff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18ddffffffffffffff0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200000302000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) (async) setreuid(0xee01, 0xee01) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4}, 0x18) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) (async) recvmsg(r6, 0x0, 0x40010161) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4800) (async) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a80)={0x44, r7, 0x400, 0x2070bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc010}, 0x800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d40)={'xfrm0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) 313.980871ms ago: executing program 1 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './file0'}, 0xb) (async, rerun: 32) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./control\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 276.224691ms ago: executing program 1 (id=1055): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='cpq>00\t&|') creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0x4) fcntl$lock(r4, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x7fffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000000a40)=@newtaction={0x488, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xc76, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r12 = fcntl$dupfd(r11, 0x0, r11) read$snapshot(r12, 0x0, 0xffffffbf) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 196.667261ms ago: executing program 0 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fspick(0xffffffffffffffff, &(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x98, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 135.61827ms ago: executing program 0 (id=1057): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0xffffffffffffffff, 0x200, "00ea00"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) pause() bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0xa4}}, 0x0) 131.98354ms ago: executing program 9 (id=1058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x10, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe2}, {0xf, 0x3}, {0xf, 0xd}}}, 0x24}}, 0x240040d1) r2 = socket$isdn_base(0x22, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0xf9, 0xa1, 0x80, 0x1}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) (async) socket$netlink(0x10, 0x3, 0x5) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x10, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe2}, {0xf, 0x3}, {0xf, 0xd}}}, 0x24}}, 0x240040d1) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) bind$isdn_base(r2, &(0x7f0000000040)={0x22, 0xf9, 0xa1, 0x80, 0x1}, 0x6) (async) 0s ago: executing program 9 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="7b259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="7b259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) sendfile(r2, r5, 0x0, 0x8000002b) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) kernel console output (not intermixed with test programs): ): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.506871][ T5674] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 71.524172][ T5674] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.589441][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.615198][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.625905][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.633157][ T5438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.645150][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.652321][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.754190][ T5693] netlink: 132 bytes leftover after parsing attributes in process `syz.8.583'. [ 71.833967][ T5700] syz.8.585[5700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.842921][ T5700] 9pnet_fd: Insufficient options for proto=fd [ 71.853489][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.062609][ T5606] veth0_vlan: entered promiscuous mode [ 72.074657][ T5606] veth1_vlan: entered promiscuous mode [ 72.093945][ T5606] veth0_macvtap: entered promiscuous mode [ 72.100378][ T5722] Falling back ldisc for ttyS3. [ 72.102744][ T5606] veth1_macvtap: entered promiscuous mode [ 72.118799][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.129420][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.139299][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.149806][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.159731][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.170260][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.180271][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.190787][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.200736][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.211512][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.221435][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.232025][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.242643][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.250834][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.261315][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.271212][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.281725][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.291587][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.302074][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.311927][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.322376][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.332233][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.342738][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.352593][ T5606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.363064][ T5606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.373603][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.385523][ T5606] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.394353][ T5606] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.403142][ T5606] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.412022][ T5606] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.460818][ T8] IPVS: starting estimator thread 0... [ 72.524542][ T5744] loop9: detected capacity change from 0 to 512 [ 72.531234][ T5744] EXT4-fs: Ignoring removed i_version option [ 72.542358][ T5744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 72.598176][ T5739] IPVS: using max 2736 ests per chain, 136800 per kthread [ 72.605101][ T5744] System zones: 1-12 [ 72.613777][ T5750] netlink: 133492 bytes leftover after parsing attributes in process `syz.6.595'. [ 72.624449][ T5744] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.560: bg 0: block 131: padding at end of block bitmap is not set [ 72.626180][ T5750] nfs4: Unknown parameter '' [ 72.646011][ T5744] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.665917][ T5752] loop8: detected capacity change from 0 to 1024 [ 72.682896][ T5744] EXT4-fs (loop9): 1 truncate cleaned up [ 72.700103][ T5744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.795706][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.941815][ T5772] syz.5.602[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.941907][ T5772] syz.5.602[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.963097][ T5772] syz.5.602[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.002013][ T29] kauditd_printk_skb: 944 callbacks suppressed [ 73.002030][ T29] audit: type=1400 audit(1735677982.842:3891): avc: denied { setopt } for pid=5771 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.047242][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 73.062652][ T5775] loop8: detected capacity change from 0 to 512 [ 73.069390][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 73.145658][ T5779] block device autoloading is deprecated and will be removed. [ 73.155791][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.163328][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.170797][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.178255][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.185648][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.193097][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.200576][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.207978][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.208034][ T5779] syz.5.605: attempt to access beyond end of device [ 73.208034][ T5779] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 73.215397][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.215425][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.228501][ T29] audit: type=1400 audit(1735677983.002:3892): avc: denied { read write } for pid=5776 comm="syz.8.604" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.235762][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.243142][ T29] audit: type=1400 audit(1735677983.002:3893): avc: denied { open } for pid=5776 comm="syz.8.604" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.266397][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.275189][ T5780] xt_hashlimit: max too large, truncated to 1048576 [ 73.297257][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.318017][ T29] audit: type=1326 audit(1735677983.162:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.318728][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.341993][ T29] audit: type=1326 audit(1735677983.162:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.349332][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.372577][ T29] audit: type=1326 audit(1735677983.162:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.372610][ T29] audit: type=1326 audit(1735677983.162:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.379979][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.403221][ T29] audit: type=1326 audit(1735677983.162:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.426495][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.433872][ T29] audit: type=1326 audit(1735677983.162:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.457113][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.464460][ T29] audit: type=1326 audit(1735677983.162:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5778 comm="syz.5.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cc735d29 code=0x7ffc0000 [ 73.487728][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.526139][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.533580][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.541119][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.548535][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.555930][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.563350][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.570754][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.575675][ T5780] Cannot find set identified by id 0 to match [ 73.578141][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.591660][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.599098][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.606493][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.613933][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.621330][ T3375] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 73.633842][ T3375] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 73.869296][ T5791] loop6: detected capacity change from 0 to 8192 [ 73.896515][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 73.903955][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.911391][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.919017][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.926411][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.934027][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 73.941524][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.949260][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.956896][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 73.964359][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.964668][ T5813] loop7: detected capacity change from 0 to 1024 [ 73.971780][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.978591][ T5813] ext2: Unknown parameter 'mask' [ 73.985497][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.997982][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.005443][ T8] hid-generic 0000:0000:0000.0002: collection stack underflow [ 74.012966][ T8] hid-generic 0000:0000:0000.0002: item 0 0 0 12 parsing failed [ 74.023732][ T8] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 74.053184][ T5819] loop7: detected capacity change from 0 to 128 [ 74.069140][ T5819] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.099421][ T5819] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.120246][ T5819] netlink: 24 bytes leftover after parsing attributes in process `syz.7.618'. [ 74.327371][ T5107] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.356384][ T5817] netlink: 'syz.8.617': attribute type 7 has an invalid length. [ 74.395073][ T5844] loop6: detected capacity change from 0 to 2048 [ 74.420852][ T5844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.436612][ T5844] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 74.449152][ T5844] EXT4-fs (loop6): This should not happen!! Data will be lost [ 74.449152][ T5844] [ 74.458823][ T5844] EXT4-fs (loop6): Total free blocks count 0 [ 74.464816][ T5844] EXT4-fs (loop6): Free/Dirty block details [ 74.470768][ T5844] EXT4-fs (loop6): free_blocks=0 [ 74.475721][ T5844] EXT4-fs (loop6): dirty_blocks=0 [ 74.480792][ T5844] EXT4-fs (loop6): Block reservation details [ 74.486837][ T5844] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 74.499515][ T5852] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2 with error 28 [ 74.515124][ T5844] SELinux: policydb string does not match my string SE Linux [ 74.522834][ T5844] SELinux: failed to load policy [ 74.556569][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.628'. [ 74.636654][ T5855] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.684096][ T5863] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 74.773881][ T5865] netlink: 11562 bytes leftover after parsing attributes in process `syz.7.629'. [ 74.882000][ T5866] loop6: detected capacity change from 0 to 512 [ 74.931748][ T5866] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.940598][ T5866] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.949646][ T5866] EXT4-fs (loop6): blocks per group (3008) and clusters per group (32768) inconsistent [ 75.002258][ T5873] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 75.147854][ T5866] nfs: Unknown parameter '' [ 75.304265][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.311573][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.331055][ T5890] loop5: detected capacity change from 0 to 512 [ 75.354709][ T5890] EXT4-fs (loop5): 1 truncate cleaned up [ 75.361271][ T5890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.386123][ T5896] loop6: detected capacity change from 0 to 2048 [ 75.406108][ T5901] netlink: zone id is out of range [ 75.411599][ T5901] netlink: del zone limit has 4 unknown bytes [ 75.421548][ T5166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.478381][ T5896] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 75.483768][ T5896] loop6: partition table partially beyond EOD, truncated [ 75.511041][ T5904] loop7: detected capacity change from 0 to 2048 [ 75.521611][ T5896] loop6: p1 size 33024 extends beyond EOD, truncated [ 75.534901][ T5896] loop6: p2 start 16908804 is beyond EOD, truncated [ 75.541593][ T5896] loop6: p3 start 4284289 is beyond EOD, truncated [ 75.550561][ T5896] loop6: p5 size 33024 extends beyond EOD, truncated [ 75.557952][ T5896] loop6: p6 start 16908804 is beyond EOD, truncated [ 75.558731][ T5912] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.588722][ T5904] GPT:first_usable_lbas don't match. [ 75.594108][ T5904] GPT:34 != 290 [ 75.597633][ T5904] GPT: Use GNU Parted to correct GPT errors. [ 75.603819][ T5904] loop7: p1 p2 p3 [ 75.610852][ T5913] bridge0: port 3(vlan2) entered blocking state [ 75.617160][ T5913] bridge0: port 3(vlan2) entered disabled state [ 75.643960][ T5913] vlan2: entered allmulticast mode [ 75.664725][ T5913] vlan2: left allmulticast mode [ 75.674774][ T5912] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.687006][ T5921] 9pnet_fd: Insufficient options for proto=fd [ 75.730977][ T5912] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.756141][ T5923] hub 2-0:1.0: USB hub found [ 75.760865][ T5923] hub 2-0:1.0: 8 ports detected [ 75.766720][ T5926] netlink: 4 bytes leftover after parsing attributes in process `&/'. [ 75.775644][ T5926] netlink: 4 bytes leftover after parsing attributes in process `&/'. [ 75.802095][ T5912] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.850889][ T5935] pimreg: entered allmulticast mode [ 75.863749][ T5912] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.875582][ T5912] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.887577][ T5912] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.901235][ T5935] syz.7.656[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.901299][ T5935] syz.7.656[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.915981][ T5912] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.936870][ T5935] syz.7.656[5935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.938363][ T5935] IPv4: Oversized IP packet from 127.202.26.0 [ 76.005101][ T5947] loop5: detected capacity change from 0 to 256 [ 76.018748][ T5947] FAT-fs (loop5): Directory bread(block 64) failed [ 76.026801][ T5947] FAT-fs (loop5): Directory bread(block 65) failed [ 76.033479][ T5947] FAT-fs (loop5): Directory bread(block 66) failed [ 76.041752][ T5947] FAT-fs (loop5): Directory bread(block 67) failed [ 76.048381][ T5947] FAT-fs (loop5): Directory bread(block 68) failed [ 76.055074][ T5947] FAT-fs (loop5): Directory bread(block 69) failed [ 76.063315][ T5947] FAT-fs (loop5): Directory bread(block 70) failed [ 76.069942][ T5947] FAT-fs (loop5): Directory bread(block 71) failed [ 76.076604][ T5949] loop6: detected capacity change from 0 to 128 [ 76.077541][ T5947] FAT-fs (loop5): Directory bread(block 72) failed [ 76.090964][ T5947] FAT-fs (loop5): Directory bread(block 73) failed [ 76.104016][ T5952] loop7: detected capacity change from 0 to 128 [ 76.111299][ T5952] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.113527][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.131998][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.156745][ T5956] netlink: 'syz.6.664': attribute type 13 has an invalid length. [ 76.164529][ T5956] netlink: 152 bytes leftover after parsing attributes in process `syz.6.664'. [ 76.173834][ T5956] syz_tun: refused to change device tx_queue_len [ 76.180395][ T5956] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 76.204877][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.665'. [ 76.213819][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.7.665'. [ 76.223668][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.665'. [ 76.424065][ T5970] loop9: detected capacity change from 0 to 1024 [ 76.442474][ T5970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.511603][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.522067][ T5979] syz.6.673[5979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.522293][ T5979] syz.6.673[5979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.537197][ T5979] syz.6.673[5979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.566286][ T5981] netlink: 'syz.9.674': attribute type 1 has an invalid length. [ 76.587085][ T5979] wireguard0: entered promiscuous mode [ 76.592742][ T5979] wireguard0: entered allmulticast mode [ 76.678328][ T5166] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 76.685970][ T5166] FAT-fs (loop5): Filesystem has been set read-only [ 76.692927][ T5986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5986 comm=syz.6.673 [ 76.709769][ T5166] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 77.551468][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.679'. [ 78.296428][ T6021] geneve2: entered promiscuous mode [ 78.301764][ T6021] geneve2: entered allmulticast mode [ 78.451659][ T6030] loop8: detected capacity change from 0 to 1024 [ 78.458418][ T6030] EXT4-fs: Ignoring removed nobh option [ 78.492256][ T6030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.569314][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 78.569327][ T29] audit: type=1400 audit(1735677988.402:4435): avc: denied { watch_reads } for pid=6038 comm="syz.6.690" path="/50" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.600253][ T5176] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.610972][ T29] audit: type=1400 audit(1735677988.412:4436): avc: denied { read } for pid=6040 comm="syz.7.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.640279][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.649034][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.682911][ T4510] kworker/u8:32: attempt to access beyond end of device [ 78.682911][ T4510] loop5: rw=1, sector=1768, nr_sectors = 4 limit=256 [ 78.735451][ T29] audit: type=1326 audit(1735677988.572:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.767080][ T29] audit: type=1326 audit(1735677988.602:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.790527][ T29] audit: type=1326 audit(1735677988.602:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.813896][ T29] audit: type=1326 audit(1735677988.602:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.837272][ T29] audit: type=1326 audit(1735677988.602:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.860552][ T29] audit: type=1326 audit(1735677988.602:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.883918][ T29] audit: type=1326 audit(1735677988.602:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.907326][ T29] audit: type=1326 audit(1735677988.602:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.8.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a409e5d29 code=0x7ffc0000 [ 78.951885][ T6054] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.987557][ T6057] 9pnet: Could not find request transport: 0xffffffffffffffff [ 79.130075][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.138537][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.178017][ T6059] xt_CT: No such helper "syz0" [ 79.273610][ T6054] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.320504][ T6066] loop6: detected capacity change from 0 to 128 [ 79.347734][ T6066] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 79.393833][ T6068] loop9: detected capacity change from 0 to 256 [ 79.404979][ T6054] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.409398][ T6068] vfat: Bad value for 'tz' [ 79.465887][ T6068] netlink: 64 bytes leftover after parsing attributes in process `syz.9.700'. [ 79.480229][ T6054] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.535933][ T6054] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.547713][ T6054] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.554316][ T6073] syz.6.701[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.555965][ T6073] syz.6.701[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.559882][ T6054] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.569049][ T6073] syz.6.701[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.582065][ T6054] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.642521][ T6078] ALSA: seq fatal error: cannot create timer (-19) [ 79.713148][ T6094] loop8: detected capacity change from 0 to 512 [ 79.781909][ T6094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.795186][ T6094] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.809917][ T6094] syz.8.704[6094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.849713][ T5176] EXT4-fs error (device loop8): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /46/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 80.023950][ T6122] wireguard0: entered promiscuous mode [ 80.029481][ T6122] wireguard0: entered allmulticast mode [ 80.125409][ T6125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6125 comm=syz.6.707 [ 80.609239][ T6127] loop9: detected capacity change from 0 to 512 [ 80.630860][ T6127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.643641][ T6127] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.670721][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.766393][ T6138] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 80.803027][ T6139] bond1: entered promiscuous mode [ 80.808109][ T6139] bond1: entered allmulticast mode [ 80.813634][ T6139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.825877][ T6139] bond1 (unregistering): Released all slaves [ 80.840997][ T6138] bond1: entered promiscuous mode [ 80.846042][ T6138] bond1: entered allmulticast mode [ 80.851468][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.875820][ T6138] bond1 (unregistering): Released all slaves [ 80.928164][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.712'. [ 80.936951][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.9.712'. [ 80.951381][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.9.712'. [ 80.960376][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.9.712'. [ 80.972317][ T6148] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 81.048177][ T6149] loop9: detected capacity change from 0 to 128 [ 81.061255][ T4510] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.119153][ T4510] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.135342][ T6160] loop9: detected capacity change from 0 to 512 [ 81.143928][ T6160] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 81.158773][ T6160] EXT4-fs (loop9): 1 truncate cleaned up [ 81.164685][ T6160] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.185710][ T4510] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.206390][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.716'. [ 81.360507][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.9.716'. [ 81.373202][ T4510] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.385834][ T6160] netlink: 'syz.9.716': attribute type 3 has an invalid length. [ 81.438318][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 81.484572][ T4510] bridge_slave_1: left allmulticast mode [ 81.490306][ T4510] bridge_slave_1: left promiscuous mode [ 81.496015][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.505304][ T4510] bridge_slave_0: left allmulticast mode [ 81.510995][ T4510] bridge_slave_0: left promiscuous mode [ 81.516615][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.541191][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.753523][ T4510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.765282][ T4510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.775218][ T4510] bond0 (unregistering): Released all slaves [ 81.802562][ T6176] netem: change failed [ 81.806843][ T6187] netlink: 3 bytes leftover after parsing attributes in process `syz.7.719'. [ 81.847349][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854514][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.879852][ T6152] bridge_slave_0: entered allmulticast mode [ 81.897130][ T6190] bpf_get_probe_write_proto: 5 callbacks suppressed [ 81.897144][ T6190] syz.6.721[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.904448][ T6152] bridge_slave_0: entered promiscuous mode [ 81.935282][ T6190] syz.6.721[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.935396][ T6190] syz.6.721[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.961026][ T6187] batadv1: entered promiscuous mode [ 81.977542][ T6187] batadv1: entered allmulticast mode [ 82.007733][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.014919][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.024271][ T6152] bridge_slave_1: entered allmulticast mode [ 82.031650][ T6152] bridge_slave_1: entered promiscuous mode [ 82.041839][ T4510] hsr_slave_0: left promiscuous mode [ 82.047571][ T4510] hsr_slave_1: left promiscuous mode [ 82.060839][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.068304][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.076020][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.083573][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.093525][ T4510] veth1_macvtap: left promiscuous mode [ 82.099179][ T4510] veth0_macvtap: left promiscuous mode [ 82.104812][ T4510] veth1_vlan: left promiscuous mode [ 82.110042][ T4510] veth0_vlan: left promiscuous mode [ 82.115892][ T6194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6194 comm=syz.6.721 [ 82.247609][ T4510] team0 (unregistering): Port device team_slave_1 removed [ 82.261129][ T4510] team0 (unregistering): Port device team_slave_0 removed [ 82.300389][ T6200] loop7: detected capacity change from 0 to 128 [ 82.321632][ T6190] wireguard0: entered promiscuous mode [ 82.327143][ T6190] wireguard0: entered allmulticast mode [ 82.357534][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.373915][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.436722][ T6152] team0: Port device team_slave_0 added [ 82.444376][ T6152] team0: Port device team_slave_1 added [ 82.458781][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.725'. [ 82.517451][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.524724][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.550802][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.580430][ T6219] loop9: detected capacity change from 0 to 512 [ 82.587784][ T6219] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 82.595823][ T6219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 82.603867][ T6219] EXT4-fs (loop9): orphan cleanup on readonly fs [ 82.612036][ T6219] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 82.622429][ T6219] EXT4-fs warning (device loop9): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 82.632777][ T6219] EXT4-fs (loop9): 1 truncate cleaned up [ 82.638711][ T6219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.651068][ T6219] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.667328][ T6217] loop7: detected capacity change from 0 to 1024 [ 82.676243][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.683254][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.709311][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.740385][ T6152] hsr_slave_0: entered promiscuous mode [ 82.749146][ T6152] hsr_slave_1: entered promiscuous mode [ 82.755379][ T6152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.764353][ T6152] Cannot create hsr debugfs directory [ 82.842972][ T6217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.858571][ T6152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.942234][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.949709][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.962726][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.970197][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.994070][ T6152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.073217][ T6152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.094360][ T4510] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.111767][ T4510] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1976 with error 28 [ 83.124277][ T4510] EXT4-fs (loop7): This should not happen!! Data will be lost [ 83.124277][ T4510] [ 83.134031][ T4510] EXT4-fs (loop7): Total free blocks count 0 [ 83.140034][ T4510] EXT4-fs (loop7): Free/Dirty block details [ 83.145921][ T4510] EXT4-fs (loop7): free_blocks=68451041280 [ 83.151766][ T4510] EXT4-fs (loop7): dirty_blocks=1984 [ 83.157057][ T4510] EXT4-fs (loop7): Block reservation details [ 83.163078][ T4510] EXT4-fs (loop7): i_reserved_data_blocks=124 [ 83.182666][ T5107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.200071][ T6152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.275324][ T6152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.286032][ T6152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.296122][ T6152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.305584][ T6152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.351972][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.372318][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.390751][ T6152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.401118][ T6152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.421910][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.429047][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.438173][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.445231][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.551841][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.599926][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 83.599939][ T29] audit: type=1400 audit(1735677993.442:4572): avc: denied { create } for pid=6248 comm="syz.9.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.622358][ T6152] veth0_vlan: entered promiscuous mode [ 83.633893][ T6152] veth1_vlan: entered promiscuous mode [ 83.647740][ T29] audit: type=1400 audit(1735677993.472:4573): avc: denied { sys_admin } for pid=6248 comm="syz.9.734" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 83.651345][ T6252] loop7: detected capacity change from 0 to 512 [ 83.677867][ T6152] veth0_macvtap: entered promiscuous mode [ 83.685308][ T6253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6253 comm=syz.9.734 [ 83.685824][ T6152] veth1_macvtap: entered promiscuous mode [ 83.707322][ T6252] EXT4-fs: dax option not supported [ 83.716422][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.726918][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.736825][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.747260][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.757086][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.767553][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.777420][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.787888][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.797831][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.808256][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.818184][ T29] audit: type=1400 audit(1735677993.572:4574): avc: denied { accept } for pid=6248 comm="syz.9.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.839070][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.859737][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.860306][ T6252] netlink: 'syz.7.732': attribute type 4 has an invalid length. [ 83.870180][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.870195][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.870213][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.908084][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.917971][ T29] audit: type=1400 audit(1735677993.752:4575): avc: denied { write } for pid=6238 comm="syz.7.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.918510][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.947511][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.957966][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.967772][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.978245][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.989422][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.055370][ T6152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.064381][ T6152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073114][ T6152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.081937][ T6152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.147289][ T6263] loop6: detected capacity change from 0 to 128 [ 84.155310][ T29] audit: type=1400 audit(1735677993.982:4576): avc: denied { write } for pid=6262 comm="syz.9.736" name="ip_tables_matches" dev="proc" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.201408][ T6263] /dev/loop6: Can't open blockdev [ 84.221506][ T6270] syz.9.736[6270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.221569][ T6270] syz.9.736[6270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.225225][ T29] audit: type=1326 audit(1735677994.062:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 84.248961][ T6270] syz.9.736[6270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.267425][ T29] audit: type=1326 audit(1735677994.062:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 84.302017][ T29] audit: type=1326 audit(1735677994.062:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 84.325401][ T29] audit: type=1326 audit(1735677994.062:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 84.348729][ T29] audit: type=1326 audit(1735677994.062:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 84.470708][ T6279] syz.6.738[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.470779][ T6279] syz.6.738[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.471673][ T6280] __nla_validate_parse: 2 callbacks suppressed [ 84.471690][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 84.502463][ T6279] syz.6.738[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.508425][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.739'. [ 84.521763][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 84.537397][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.739'. [ 84.564584][ T6285] loop7: detected capacity change from 0 to 512 [ 84.587326][ T6285] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.612093][ T6279] wireguard0: entered promiscuous mode [ 84.617596][ T6279] wireguard0: entered allmulticast mode [ 84.709933][ T6296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6296 comm=syz.6.738 [ 84.803208][ T6298] loop7: detected capacity change from 0 to 256 [ 84.833968][ T6298] FAT-fs (loop7): Directory bread(block 64) failed [ 84.847944][ T6298] FAT-fs (loop7): Directory bread(block 65) failed [ 84.861323][ T6298] FAT-fs (loop7): Directory bread(block 66) failed [ 84.875475][ T6298] FAT-fs (loop7): Directory bread(block 67) failed [ 84.888763][ T6298] FAT-fs (loop7): Directory bread(block 68) failed [ 84.902914][ T6298] FAT-fs (loop7): Directory bread(block 69) failed [ 84.916133][ T6298] FAT-fs (loop7): Directory bread(block 70) failed [ 84.930377][ T6298] FAT-fs (loop7): Directory bread(block 71) failed [ 84.943591][ T6298] FAT-fs (loop7): Directory bread(block 72) failed [ 84.956687][ T6298] FAT-fs (loop7): Directory bread(block 73) failed [ 85.045374][ T6298] Process accounting resumed [ 85.059474][ T6298] syz.7.743: attempt to access beyond end of device [ 85.059474][ T6298] loop7: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 85.076519][ T6298] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 326) [ 85.084749][ T6298] FAT-fs (loop7): Filesystem has been set read-only [ 85.583058][ T6325] loop7: detected capacity change from 0 to 1024 [ 85.675705][ T6325] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 85.675705][ T6325] [ 85.686484][ T6325] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 85.876735][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'. [ 85.885767][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'. [ 85.917574][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.755'. [ 86.178997][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 86.199038][ T6361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6361 comm=syz.1.760 [ 86.211493][ T6361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6361 comm=syz.1.760 [ 86.373198][ T6379] loop7: detected capacity change from 0 to 2048 [ 86.425614][ T6390] netlink: 3 bytes leftover after parsing attributes in process `+}[@'. [ 86.434733][ T6379] loop7: p1 < > p4 [ 86.435932][ T6390] 0X: renamed from caif0 [ 86.442285][ T6379] loop7: p4 size 8388608 extends beyond EOD, truncated [ 86.454896][ T6391] loop9: detected capacity change from 0 to 1024 [ 86.554443][ T6390] 0X: entered allmulticast mode [ 86.559847][ T6390] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 86.596387][ T6391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.614360][ T6391] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.697636][ T6391] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.766: corrupted xattr block 128: invalid ea_ino [ 86.730976][ T6391] EXT4-fs (loop9): Remounting filesystem read-only [ 86.737599][ T6391] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 86.748051][ T6415] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 86.748051][ T6415] The task syz.9.766 (6415) triggered the difference, watch for misbehavior. [ 86.790033][ T6417] syz.1.775[6417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.793255][ T6391] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 86.798330][ T6386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 86.819214][ T6391] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 86.824658][ T6417] wireguard0: entered promiscuous mode [ 86.832488][ T6386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 86.836386][ T6417] wireguard0: entered allmulticast mode [ 86.910160][ T6423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6423 comm=syz.1.775 [ 86.954978][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.963374][ T6425] syz.7.777 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.091647][ T6433] 9pnet_fd: Insufficient options for proto=fd [ 87.203056][ T6427] loop9: detected capacity change from 0 to 2048 [ 87.249164][ T6427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.263659][ T6427] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.778: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 87.290823][ T6427] EXT4-fs (loop9): Remounting filesystem read-only [ 87.361482][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.381747][ T6451] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 87.467076][ T6465] loop7: detected capacity change from 0 to 512 [ 87.487318][ T6462] loop6: detected capacity change from 0 to 1024 [ 87.520332][ T6465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.534269][ T6465] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.548069][ T6465] EXT4-fs error (device loop7): ext4_empty_dir:3103: inode #12: block 32: comm syz.7.788: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 87.568301][ T6462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.651302][ T4510] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.666606][ T4510] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 87.678848][ T4510] EXT4-fs (loop6): This should not happen!! Data will be lost [ 87.678848][ T4510] [ 87.688524][ T4510] EXT4-fs (loop6): Total free blocks count 0 [ 87.694533][ T4510] EXT4-fs (loop6): Free/Dirty block details [ 87.700494][ T4510] EXT4-fs (loop6): free_blocks=68451041280 [ 87.706304][ T4510] EXT4-fs (loop6): dirty_blocks=4208 [ 87.711619][ T4510] EXT4-fs (loop6): Block reservation details [ 87.717593][ T4510] EXT4-fs (loop6): i_reserved_data_blocks=263 [ 87.746337][ T6475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.786299][ T6465] EXT4-fs warning (device loop7): ext4_empty_dir:3105: inode #12: comm syz.7.788: directory missing '.' [ 87.803090][ T4510] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 87.828306][ T5107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.751717][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 88.751732][ T29] audit: type=1400 audit(1735677998.592:4828): avc: denied { write } for pid=6483 comm="syz.9.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.795355][ T6489] loop7: detected capacity change from 0 to 1024 [ 88.808381][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.785'. [ 88.811764][ T6490] bridge0: entered promiscuous mode [ 88.824302][ T29] audit: type=1400 audit(1735677998.662:4829): avc: denied { connect } for pid=6494 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.825460][ T6490] macvlan2: entered promiscuous mode [ 88.851013][ T6490] bridge0: port 3(macvlan2) entered blocking state [ 88.857623][ T6490] bridge0: port 3(macvlan2) entered disabled state [ 88.864478][ T6490] macvlan2: entered allmulticast mode [ 88.869892][ T6490] bridge0: entered allmulticast mode [ 88.879476][ T6490] macvlan2: left allmulticast mode [ 88.884658][ T6490] bridge0: left allmulticast mode [ 88.954173][ T6490] bridge0: left promiscuous mode [ 88.955944][ T29] audit: type=1326 audit(1735677998.792:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea511c5d29 code=0x7ffc0000 [ 89.019923][ T29] audit: type=1400 audit(1735677998.812:4831): avc: denied { nlmsg_write } for pid=6509 comm="syz.9.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.040851][ T29] audit: type=1326 audit(1735677998.832:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fea511c5d29 code=0x7ffc0000 [ 89.064403][ T29] audit: type=1326 audit(1735677998.832:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea511c5d29 code=0x7ffc0000 [ 89.198525][ T29] audit: type=1400 audit(1735677999.032:4834): avc: denied { unlink } for pid=5107 comm="syz-executor" name="file5" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.274100][ T29] audit: type=1400 audit(1735677999.082:4835): avc: denied { ioctl } for pid=6520 comm="syz.7.802" path="socket:[17387]" dev="sockfs" ino=17387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.313073][ T6515] wireguard0: entered promiscuous mode [ 89.318600][ T6515] wireguard0: entered allmulticast mode [ 89.335057][ T6527] bpf_get_probe_write_proto: 2 callbacks suppressed [ 89.335072][ T6527] syz.9.801[6527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.343054][ T6527] syz.9.801[6527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.355778][ T6527] syz.9.801[6527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.420752][ T6527] wireguard0: entered promiscuous mode [ 89.437588][ T6527] wireguard0: entered allmulticast mode [ 89.528110][ T29] audit: type=1326 audit(1735677999.372:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.9.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b66e5d29 code=0x7ffc0000 [ 89.551579][ T29] audit: type=1326 audit(1735677999.372:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.9.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b66e5d29 code=0x7ffc0000 [ 89.587012][ T6532] ip6gre1: entered allmulticast mode [ 89.649969][ T6534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6534 comm=syz.9.801 [ 89.781708][ T6541] loop6: detected capacity change from 0 to 1024 [ 89.790434][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.800675][ T6541] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.807426][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.830051][ T6541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.107235][ T6556] loop7: detected capacity change from 0 to 2048 [ 90.162873][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.176503][ T6562] __nla_validate_parse: 1 callbacks suppressed [ 90.176516][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.814'. [ 90.193271][ T6556] loop7: p1 < > p3 p4 < > [ 90.198483][ T6556] loop7: p3 start 4284289 is beyond EOD, truncated [ 90.261849][ T6566] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.332191][ T6574] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 90.355876][ T6574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.367154][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 90.449422][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.459675][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.509821][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'. [ 90.630724][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.647729][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.876363][ T6604] loop6: detected capacity change from 0 to 2048 [ 90.928257][ T6604] loop6: p1 p2 p3 < > p4 < > [ 90.932988][ T6604] loop6: partition table partially beyond EOD, truncated [ 90.940159][ T6604] loop6: p1 size 33024 extends beyond EOD, truncated [ 90.948052][ T6604] loop6: p2 start 16908804 is beyond EOD, truncated [ 90.954679][ T6604] loop6: p3 start 4284289 is beyond EOD, truncated [ 91.140937][ T6611] IPv6: sit1: Disabled Multicast RS [ 91.165208][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.172706][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.202834][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.210323][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.217748][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.225195][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.232617][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.240040][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.247510][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.255071][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.262595][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.270022][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.277468][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.308422][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.315915][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.323426][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.330858][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.338251][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.345780][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.353269][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.360728][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.368135][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.375517][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.382925][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.390334][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.397723][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.405154][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.412643][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.420178][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.466361][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 91.540513][ T6626] loop9: detected capacity change from 0 to 128 [ 91.561891][ T6626] xt_hashlimit: max too large, truncated to 1048576 [ 91.635327][ T6633] loop7: detected capacity change from 0 to 512 [ 91.638333][ T6628] loop6: detected capacity change from 0 to 2048 [ 91.673020][ T6628] EXT4-fs (loop6): unsupported inode size: 0 [ 91.679102][ T6628] EXT4-fs (loop6): blocksize: 2048 [ 91.698382][ T6633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.731356][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.757534][ T6633] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.782255][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.836238][ T6640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.836'. [ 91.850768][ T6633] netlink: 'syz.7.835': attribute type 3 has an invalid length. [ 91.919338][ T5107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.934274][ T6644] netlink: 80 bytes leftover after parsing attributes in process `syz.6.838'. [ 92.021523][ T6648] loop6: detected capacity change from 0 to 1024 [ 92.058268][ T6648] EXT4-fs: Ignoring removed orlov option [ 92.096716][ T6648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.156794][ T6652] 9pnet: Could not find request transport: fdtbc+юg[/{8N ?[`v?Rr̲ P$W^B1Oh(>aX6dąjJs2oӠ1{zIUz [ 92.188152][ T6648] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.834287][ T6667] loop9: detected capacity change from 0 to 512 [ 92.841204][ T6667] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 92.868768][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.134549][ T6679] netlink: 'syz.9.849': attribute type 6 has an invalid length. [ 93.142314][ T6679] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.220336][ T6681] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.314069][ T6681] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.341042][ T6682] sg_write: process 220 (syz.9.850) changed security contexts after opening file descriptor, this is not allowed. [ 93.365811][ T6688] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 93.365811][ T6688] program syz.9.850 not setting count and/or reply_len properly [ 93.410001][ T6681] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.470545][ T6681] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.554950][ T6681] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.577417][ T6681] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.604121][ T6681] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.630043][ T6681] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.805307][ T6709] loop6: detected capacity change from 0 to 512 [ 93.835868][ T6709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.877419][ T6711] syz.9.857[6711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.877510][ T6711] syz.9.857[6711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.899605][ T6709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.939171][ T6711] syz.9.857[6711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.997799][ T6709] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.102546][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.846'. [ 94.111456][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.846'. [ 94.169751][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 94.169767][ T29] audit: type=1326 audit(1735678004.012:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.219855][ T6726] syz.1.860[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.219921][ T6726] syz.1.860[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.267021][ T6725] syz.1.860[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.283247][ T6728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6728 comm=syz.9.862 [ 94.330440][ T29] audit: type=1326 audit(1735678004.052:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.354076][ T29] audit: type=1326 audit(1735678004.052:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.377459][ T29] audit: type=1326 audit(1735678004.052:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.400989][ T29] audit: type=1326 audit(1735678004.052:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.424491][ T29] audit: type=1326 audit(1735678004.052:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.447843][ T29] audit: type=1326 audit(1735678004.052:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.471297][ T29] audit: type=1326 audit(1735678004.052:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.494608][ T29] audit: type=1326 audit(1735678004.052:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.517945][ T29] audit: type=1326 audit(1735678004.052:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 94.567169][ T6726] syz.1.860[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.567421][ T6725] syz.1.860[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.599380][ T6725] syz.1.860[6725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.836944][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.974193][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.6.866'. [ 95.071009][ T6741] ALSA: seq fatal error: cannot create timer (-22) [ 95.359653][ T5176] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.375144][ T5735] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.411079][ T5735] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.441265][ T6791] loop9: detected capacity change from 0 to 512 [ 95.469481][ T5735] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.480905][ T6791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.496317][ T6791] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.562764][ T6791] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #19: comm syz.9.872: corrupted inode contents [ 95.575607][ T6791] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #19: comm syz.9.872: mark_inode_dirty error [ 95.587302][ T6791] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #19: comm syz.9.872: corrupted inode contents [ 95.588407][ T5735] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.610627][ T6791] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3006: inode #19: comm syz.9.872: mark_inode_dirty error [ 95.622804][ T6791] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3009: inode #19: comm syz.9.872: mark inode dirty (error -117) [ 95.643621][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 95.643892][ T6791] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 95.673260][ T6816] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.715808][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.722948][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.735050][ T6761] bridge_slave_0: entered allmulticast mode [ 95.736191][ T6821] loop7: detected capacity change from 0 to 512 [ 95.741728][ T6761] bridge_slave_0: entered promiscuous mode [ 95.748192][ T6821] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 95.756256][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.777459][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.784769][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.792858][ T6761] bridge_slave_1: entered allmulticast mode [ 95.799475][ T6761] bridge_slave_1: entered promiscuous mode [ 95.817364][ T6823] veth7: entered promiscuous mode [ 95.841249][ T5735] bridge_slave_1: left allmulticast mode [ 95.846945][ T5735] bridge_slave_1: left promiscuous mode [ 95.852657][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.872662][ T5735] bridge_slave_0: left allmulticast mode [ 95.878394][ T5735] bridge_slave_0: left promiscuous mode [ 95.884182][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.897755][ T6829] loop7: detected capacity change from 0 to 512 [ 95.927484][ T6829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.944051][ T6829] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.000983][ T5735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.012129][ T5735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.028516][ T5735] bond0 (unregistering): Released all slaves [ 96.038550][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.049858][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.115907][ T6761] team0: Port device team_slave_0 added [ 96.124009][ T6845] random: crng reseeded on system resumption [ 96.134564][ T6761] team0: Port device team_slave_1 added [ 96.144494][ T5107] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.154785][ T5735] hsr_slave_0: left promiscuous mode [ 96.162915][ T5735] hsr_slave_1: left promiscuous mode [ 96.179779][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.187304][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.195622][ T5735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.203088][ T5735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.212658][ T6847] loop7: detected capacity change from 0 to 2048 [ 96.219336][ T5735] veth1_macvtap: left promiscuous mode [ 96.219591][ T6847] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.224876][ T5735] veth0_macvtap: left promiscuous mode [ 96.236883][ T5735] veth1_vlan: left promiscuous mode [ 96.242160][ T5735] veth0_vlan: left promiscuous mode [ 96.259408][ T6849] syz.6.886[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.259464][ T6849] syz.6.886[6849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.273316][ T6847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.320317][ T6847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6847 comm=syz.7.885 [ 96.332983][ T6847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6847 comm=syz.7.885 [ 96.388136][ T5735] team0 (unregistering): Port device team_slave_1 removed [ 96.402847][ T5107] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 34: comm syz-executor: path /103/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 96.409500][ T5735] team0 (unregistering): Port device team_slave_0 removed [ 96.453784][ T5107] EXT4-fs error (device loop7): ext4_empty_dir:3135: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 96.454018][ T5107] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 34: comm syz-executor: path /103/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 96.454279][ T5107] EXT4-fs error (device loop7): ext4_empty_dir:3135: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 96.454508][ T5107] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 34: comm syz-executor: path /103/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 96.454729][ T5107] EXT4-fs error (device loop7): ext4_empty_dir:3135: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 96.454937][ T5107] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 34: comm syz-executor: path /103/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 96.455114][ T5107] EXT4-fs error (device loop7): ext4_empty_dir:3135: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 96.455306][ T5107] EXT4-fs error (device loop7): ext4_readdir:261: inode #11: block 34: comm syz-executor: path /103/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 96.455468][ T5107] EXT4-fs error (device loop7): ext4_empty_dir:3135: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 96.496161][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.884'. [ 96.651283][ T6434] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.665932][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.665946][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.666003][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.666578][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.666587][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.666611][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.759237][ T6761] hsr_slave_0: entered promiscuous mode [ 96.799757][ T6761] hsr_slave_1: entered promiscuous mode [ 96.805696][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.813353][ T6761] Cannot create hsr debugfs directory [ 96.910798][ T6882] loop9: detected capacity change from 0 to 1024 [ 96.929707][ T6882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.006399][ T5735] IPVS: stop unused estimator thread 0... [ 97.057074][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.153970][ T6761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.165831][ T6761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.184130][ T6887] chnl_net:caif_netlink_parms(): no params data found [ 97.195233][ T6761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.215299][ T6761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.260826][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.268087][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.276840][ T6887] bridge_slave_0: entered allmulticast mode [ 97.283673][ T6887] bridge_slave_0: entered promiscuous mode [ 97.317732][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.325133][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.332215][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.352870][ T6887] bridge_slave_1: entered allmulticast mode [ 97.361388][ T6887] bridge_slave_1: entered promiscuous mode [ 97.381656][ T6887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.392570][ T6887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.416031][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.426475][ T6887] team0: Port device team_slave_0 added [ 97.435673][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.442883][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.454323][ T6887] team0: Port device team_slave_1 added [ 97.475183][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.482357][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.493540][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.500601][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.526616][ T6887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.538276][ T6887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.545241][ T6887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.571149][ T6887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.602449][ T6761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.613005][ T6761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.647429][ T6887] hsr_slave_0: entered promiscuous mode [ 97.661367][ T6887] hsr_slave_1: entered promiscuous mode [ 97.667669][ T6887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.675467][ T6887] Cannot create hsr debugfs directory [ 97.724206][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.735429][ T6913] syz.1.900[6913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.735586][ T6913] syz.1.900[6913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.772441][ T6913] syz.1.900[6913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.815571][ T6913] wireguard0: entered promiscuous mode [ 97.832554][ T6913] wireguard0: entered allmulticast mode [ 97.867074][ T6921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6921 comm=syz.1.900 [ 97.891432][ T6761] veth0_vlan: entered promiscuous mode [ 97.899933][ T6761] veth1_vlan: entered promiscuous mode [ 97.916707][ T6761] veth0_macvtap: entered promiscuous mode [ 97.926318][ T6761] veth1_macvtap: entered promiscuous mode [ 97.939569][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.950079][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.959924][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.970390][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.980279][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.990795][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.000737][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.011348][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.021222][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.031778][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.043240][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.057222][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.067833][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.077749][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.088260][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.098090][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.108613][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.118444][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.128878][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.138766][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.149247][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.159982][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.168814][ T6761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177533][ T6761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.186374][ T6761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.195177][ T6761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.273974][ T6887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.284864][ T6887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.299925][ T6887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.312970][ T6887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.352445][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.9.904'. [ 98.355182][ T6887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.372161][ T6887] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.396213][ T6948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6948 comm=syz.2.906 [ 98.410075][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.417133][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.429629][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.436858][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.453336][ T6944] loop9: detected capacity change from 0 to 256 [ 98.470188][ T6944] FAT-fs (loop9): Directory bread(block 64) failed [ 98.476880][ T6944] FAT-fs (loop9): Directory bread(block 65) failed [ 98.484512][ T6944] FAT-fs (loop9): Directory bread(block 66) failed [ 98.494394][ T6944] FAT-fs (loop9): Directory bread(block 67) failed [ 98.504883][ T6944] FAT-fs (loop9): Directory bread(block 68) failed [ 98.518332][ T6944] FAT-fs (loop9): Directory bread(block 69) failed [ 98.525089][ T6944] FAT-fs (loop9): Directory bread(block 70) failed [ 98.558750][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.559308][ T6944] FAT-fs (loop9): Directory bread(block 71) failed [ 98.630940][ T6944] FAT-fs (loop9): Directory bread(block 72) failed [ 98.652149][ T6944] FAT-fs (loop9): Directory bread(block 73) failed [ 98.698444][ T6887] veth0_vlan: entered promiscuous mode [ 98.709669][ T6887] veth1_vlan: entered promiscuous mode [ 98.739838][ T6887] veth0_macvtap: entered promiscuous mode [ 98.757588][ T6887] veth1_macvtap: entered promiscuous mode [ 98.790541][ T6966] netlink: 'syz.9.908': attribute type 10 has an invalid length. [ 98.798624][ T6966] netlink: 'syz.9.908': attribute type 19 has an invalid length. [ 98.806635][ T6966] netlink: 14536 bytes leftover after parsing attributes in process `syz.9.908'. [ 98.809990][ T6968] syz.1.909[6968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.816115][ T6968] syz.1.909[6968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.830727][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.852536][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.862360][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.866806][ T6973] xt_socket: unknown flags 0x58 [ 98.872840][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.872861][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.898384][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.908223][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.918762][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.928583][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.939010][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.948821][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.959259][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.970598][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.029095][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.039590][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.049465][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.060022][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.069850][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.080308][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.090125][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.100628][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.110460][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.120920][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.130757][ T6887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.141205][ T6887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.154333][ T6887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.157110][ T6988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6988 comm=syz.1.909 [ 99.178596][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 99.178613][ T29] audit: type=1326 audit(1735678009.022:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 99.208492][ T29] audit: type=1326 audit(1735678009.022:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.1.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 99.232136][ T6968] wireguard0: entered promiscuous mode [ 99.237689][ T6968] wireguard0: entered allmulticast mode [ 99.254290][ T6887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.263078][ T6887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.271892][ T6887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.277322][ T6993] netlink: 'syz.9.915': attribute type 1 has an invalid length. [ 99.280666][ T6887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.333320][ T6998] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 99.362082][ T7001] netlink: 'syz.9.917': attribute type 21 has an invalid length. [ 99.369951][ T7001] netlink: 128 bytes leftover after parsing attributes in process `syz.9.917'. [ 99.382078][ T7001] netlink: 'syz.9.917': attribute type 4 has an invalid length. [ 99.389784][ T7001] netlink: 'syz.9.917': attribute type 3 has an invalid length. [ 99.397461][ T7001] netlink: 3 bytes leftover after parsing attributes in process `syz.9.917'. [ 99.418841][ T29] audit: type=1326 audit(1735678009.262:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.444741][ T7005] xt_hashlimit: max too large, truncated to 1048576 [ 99.452455][ T29] audit: type=1326 audit(1735678009.282:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.475941][ T29] audit: type=1326 audit(1735678009.282:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.499256][ T29] audit: type=1326 audit(1735678009.282:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.522924][ T29] audit: type=1326 audit(1735678009.282:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.546586][ T29] audit: type=1326 audit(1735678009.282:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.570180][ T29] audit: type=1326 audit(1735678009.282:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.593660][ T29] audit: type=1326 audit(1735678009.282:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.2.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f9319975d29 code=0x7ffc0000 [ 99.687561][ T7019] bpf_get_probe_write_proto: 1 callbacks suppressed [ 99.687580][ T7019] syz.2.920[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.694522][ T7019] syz.2.920[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.705907][ T7019] syz.2.920[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.764227][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 99.783316][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 99.812600][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.820412][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.827652][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7026 comm=syz.2.924 [ 99.828124][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.848317][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.848982][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.856050][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.872143][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.875595][ T7026] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 99.880104][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.890453][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.895190][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.910598][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.918307][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.925966][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.933678][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.941386][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.949095][ T8] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 99.961093][ T7027] pimreg: entered allmulticast mode [ 99.966934][ T7027] pimreg: left allmulticast mode [ 99.974315][ T8] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 99.992766][ T7026] netlink: 256 bytes leftover after parsing attributes in process `syz.2.924'. [ 100.045975][ T7031] batadv1: entered promiscuous mode [ 100.052158][ T7031] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.080120][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 100.134409][ T5280] kernel write not supported for file bpf-map (pid: 5280 comm: kworker/1:6) [ 100.167216][ T7040] syz.0.930[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.167311][ T7040] syz.0.930[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.178830][ T7040] syz.0.930[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.194695][ T7040] wireguard0: entered promiscuous mode [ 100.211433][ T7040] wireguard0: entered allmulticast mode [ 100.250715][ T7046] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7046 comm=syz.0.930 [ 100.397581][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.933'. [ 100.406654][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 100.506456][ T7062] rdma_op ffff8881304dd980 conn xmit_rdma 0000000000000000 [ 100.763955][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.772611][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.017798][ T7088] syz.1.944[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.017846][ T7088] syz.1.944[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.029256][ T7088] syz.1.944[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.048086][ T7088] wireguard0: entered promiscuous mode [ 101.064811][ T7088] wireguard0: entered allmulticast mode [ 101.097222][ T7090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7090 comm=syz.1.944 [ 101.152851][ T7097] Unsupported ieee802154 address type: 0 [ 101.258151][ T7101] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.272922][ T7101] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 101.503374][ T7116] __nla_validate_parse: 9 callbacks suppressed [ 101.503398][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.951'. [ 101.603262][ T7121] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.625692][ T7124] loop9: detected capacity change from 0 to 128 [ 101.656097][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.9.956'. [ 101.703019][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.956'. [ 101.752065][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.784379][ T7139] syz.9.959[7139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.789429][ T7139] wireguard0: entered promiscuous mode [ 101.806155][ T7139] wireguard0: entered allmulticast mode [ 101.839119][ T7143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7143 comm=syz.9.959 [ 101.879430][ T7145] bridge0: port 3(vlan2) entered blocking state [ 101.885755][ T7145] bridge0: port 3(vlan2) entered disabled state [ 101.892327][ T7145] vlan2: entered allmulticast mode [ 101.898707][ T7145] vlan2: left allmulticast mode [ 101.962051][ T7154] loop6: detected capacity change from 0 to 512 [ 101.981685][ T7154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.994415][ T7154] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.045584][ T7154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.072195][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.077146][ T7161] futex_wake_op: syz.2.966 tries to shift op by -1; fix this program [ 102.094479][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 102.103774][ T7161] bridge_slave_1: left allmulticast mode [ 102.109483][ T7161] bridge_slave_1: left promiscuous mode [ 102.115347][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.124071][ T7161] bridge_slave_0: left allmulticast mode [ 102.125935][ T7168] loop6: detected capacity change from 0 to 512 [ 102.129864][ T7161] bridge_slave_0: left promiscuous mode [ 102.137122][ T7168] EXT4-fs: Invalid want_extra_isize 524392 [ 102.141752][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.201847][ T7171] vlan3: entered promiscuous mode [ 102.206924][ T7171] vlan3: entered allmulticast mode [ 102.313508][ T7173] loop6: detected capacity change from 0 to 8192 [ 102.320384][ T7173] vfat: Unknown parameter '' [ 102.350202][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.971'. [ 102.388475][ T7176] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.395986][ T7176] vhci_hcd: invalid port number 23 [ 102.480107][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 102.520125][ T7199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7199 comm=syz.2.976 [ 102.520094][ T7193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7193 comm=syz.2.976 [ 102.583840][ T7211] netlink: 'syz.6.980': attribute type 29 has an invalid length. [ 102.597712][ T7213] syz.0.981: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 102.612328][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.0.981 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 102.623076][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.633154][ T7213] Call Trace: [ 102.636474][ T7213] [ 102.636484][ T7213] dump_stack_lvl+0xf2/0x150 [ 102.636531][ T7213] dump_stack+0x15/0x1a [ 102.636622][ T7213] warn_alloc+0x145/0x1b0 [ 102.636708][ T7213] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 102.636737][ T7213] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 102.636773][ T7213] __vmalloc_node_range_noprof+0xaa/0xe80 [ 102.636809][ T7213] ? __rcu_read_unlock+0x4e/0x70 [ 102.636848][ T7213] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 102.636885][ T7213] ? __rcu_read_unlock+0x4e/0x70 [ 102.636913][ T7213] ? xfd_validate_state+0x46/0xf0 [ 102.637003][ T7213] ? save_fpregs_to_fpstate+0x102/0x160 [ 102.637029][ T7213] ? should_fail_ex+0x31/0x230 [ 102.637051][ T7213] ? xskq_create+0x36/0xd0 [ 102.637152][ T7213] ? should_failslab+0x8f/0xb0 [ 102.637190][ T7213] vmalloc_user_noprof+0x59/0x70 [ 102.637220][ T7213] ? xskq_create+0x79/0xd0 [ 102.637258][ T7213] xskq_create+0x79/0xd0 [ 102.637280][ T7213] xsk_init_queue+0x82/0xd0 [ 102.637301][ T7213] xsk_setsockopt+0x409/0x520 [ 102.637332][ T7213] ? __pfx_xsk_setsockopt+0x10/0x10 [ 102.637420][ T7213] __sys_setsockopt+0x187/0x200 [ 102.637448][ T7213] __x64_sys_setsockopt+0x66/0x80 [ 102.637473][ T7213] x64_sys_call+0x282e/0x2dc0 [ 102.637494][ T7213] do_syscall_64+0xc9/0x1c0 [ 102.637568][ T7213] ? clear_bhb_loop+0x55/0xb0 [ 102.637589][ T7213] ? clear_bhb_loop+0x55/0xb0 [ 102.637609][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.637713][ T7213] RIP: 0033:0x7f11756e5d29 [ 102.637729][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.637748][ T7213] RSP: 002b:00007f1173d57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.637789][ T7213] RAX: ffffffffffffffda RBX: 00007f11758d5fa0 RCX: 00007f11756e5d29 [ 102.637804][ T7213] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 102.637881][ T7213] RBP: 00007f1175761b08 R08: 0000000000000020 R09: 0000000000000000 [ 102.637896][ T7213] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 102.637910][ T7213] R13: 0000000000000000 R14: 00007f11758d5fa0 R15: 00007fff4e813ce8 [ 102.638011][ T7213] [ 102.638239][ T7213] Mem-Info: [ 102.638264][ T7213] active_anon:3590 inactive_anon:15531 isolated_anon:0 [ 102.638264][ T7213] active_file:15763 inactive_file:4747 isolated_file:0 [ 102.638264][ T7213] unevictable:0 dirty:44 writeback:0 [ 102.638264][ T7213] slab_reclaimable:3211 slab_unreclaimable:20467 [ 102.638264][ T7213] mapped:28192 shmem:16107 pagetables:743 [ 102.638264][ T7213] sec_pagetables:0 bounce:0 [ 102.638264][ T7213] kernel_misc_reclaimable:0 [ 102.638264][ T7213] free:1831577 free_pcp:44080 free_cma:0 [ 102.638331][ T7213] Node 0 active_anon:14360kB inactive_anon:62124kB active_file:63052kB inactive_file:18988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112768kB dirty:176kB writeback:0kB shmem:64428kB writeback_tmp:0kB kernel_stack:3936kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no [ 102.638405][ T7213] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.638491][ T7213] lowmem_reserve[]: 0 2866 7844 0 [ 102.638523][ T7213] Node 0 DMA32 free:2950284kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 102.638636][ T7213] lowmem_reserve[]: 0 0 4978 0 [ 102.638664][ T7213] Node 0 Normal free:4360664kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14360kB inactive_anon:62124kB active_file:63052kB inactive_file:18988kB unevictable:0kB writepending:176kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:172688kB local_pcp:34848kB free_cma:0kB [ 102.638741][ T7213] lowmem_reserve[]: 0 0 0 0 [ 102.638812][ T7213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 102.835768][ T7225] program syz.9.984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.836708][ T7213] 0*512kB [ 102.919732][ T7228] netlink: 576 bytes leftover after parsing attributes in process `syz.9.985'. [ 102.932179][ T7213] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.061619][ T7213] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950284kB [ 103.084227][ T7213] Node 0 Normal: 557*4kB (UME) 185*8kB (UME) 67*16kB (UM) 89*32kB (UME) 34*64kB (UM) 16*128kB (UME) 109*256kB (UM) 269*512kB (UME) 161*1024kB (UME) 38*2048kB (UME) 962*4096kB (UM) = 4360524kB [ 103.084515][ T7213] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 103.112600][ T7213] 36648 total pagecache pages [ 103.112612][ T7213] 33 pages in swap cache [ 103.112620][ T7213] Free swap = 121196kB [ 103.112628][ T7213] Total swap = 124996kB [ 103.129963][ T7213] 2097051 pages RAM [ 103.129971][ T7213] 0 pages HighMem/MovableOnly [ 103.138482][ T7213] 80180 pages reserved [ 103.186121][ T7235] pim6reg: entered allmulticast mode [ 103.201342][ T7235] pim6reg: left allmulticast mode [ 103.234311][ T7239] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 103.257702][ T7245] loop9: detected capacity change from 0 to 512 [ 103.282530][ T7248] netlink: 'syz.0.991': attribute type 1 has an invalid length. [ 103.292814][ T7245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 103.301210][ T7245] System zones: 0-2, 18-18, 34-34 [ 103.307178][ T7245] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.988: bg 0: block 248: padding at end of block bitmap is not set [ 103.323696][ T7245] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.988: Failed to acquire dquot type 1 [ 103.336053][ T7245] EXT4-fs (loop9): 1 truncate cleaned up [ 103.344123][ T7245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.357022][ T7245] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.423561][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.533961][ T7277] block device autoloading is deprecated and will be removed. [ 103.542579][ T7277] syz.0.996: attempt to access beyond end of device [ 103.542579][ T7277] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.556369][ T7277] FAT-fs (loop1): unable to read boot sector [ 104.043027][ T7289] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff18446744073709551615' [ 104.098098][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 104.105859][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 104.113752][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.121446][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.129175][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.136831][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.144493][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.152244][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.160077][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.168157][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.175856][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.183891][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.191586][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.199534][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.207472][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.215172][ T4045] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 104.224493][ T7301] loop1: detected capacity change from 0 to 128 [ 104.226336][ T4045] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 104.232635][ T7301] EXT4-fs: inline encryption not supported [ 104.247634][ T7301] journal_path: Lookup failure for './file0' [ 104.253757][ T7301] EXT4-fs: error: could not find journal device path [ 104.270705][ T7304] loop6: detected capacity change from 0 to 1024 [ 104.281275][ T7304] __quota_error: 444 callbacks suppressed [ 104.281291][ T7304] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 104.296224][ T7304] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 104.305680][ T7304] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1004: Failed to acquire dquot type 0 [ 104.309358][ T29] audit: type=1326 audit(1735678014.142:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.340507][ T29] audit: type=1326 audit(1735678014.142:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.341150][ C1] hrtimer: interrupt took 25752 ns [ 104.364000][ T29] audit: type=1326 audit(1735678014.142:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.394105][ T29] audit: type=1326 audit(1735678014.152:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.417651][ T29] audit: type=1326 audit(1735678014.152:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.441205][ T29] audit: type=1326 audit(1735678014.152:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.464685][ T29] audit: type=1326 audit(1735678014.152:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.478856][ T7304] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144: [ 104.488126][ T29] audit: type=1326 audit(1735678014.222:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f265e5d29 code=0x7ffc0000 [ 104.488132][ T7304] freeing already freed block (bit 9); block bitmap corrupt. [ 104.497478][ T7304] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.1004: corrupted inode contents [ 104.544822][ T7313] sctp: [Deprecated]: syz.9.1007 (pid 7313) Use of int in max_burst socket option. [ 104.544822][ T7313] Use struct sctp_assoc_value instead [ 104.572577][ T7304] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #13: comm syz.6.1004: mark_inode_dirty error [ 104.622759][ T7304] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.1004: corrupted inode contents [ 104.637798][ T7304] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.1004: mark_inode_dirty error [ 104.654257][ T7304] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.1004: corrupted inode contents [ 104.670490][ T7304] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 104.671620][ T7322] loop1: detected capacity change from 0 to 1024 [ 104.679198][ T7304] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.1004: corrupted inode contents [ 104.686078][ T7322] EXT4-fs: Ignoring removed nobh option [ 104.703066][ T7322] EXT4-fs: Ignoring removed bh option [ 104.709323][ T7304] EXT4-fs error (device loop6): ext4_truncate:4240: inode #13: comm syz.6.1004: mark_inode_dirty error [ 104.724731][ T7304] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 104.725988][ T7322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.734553][ T7304] EXT4-fs (loop6): 1 truncate cleaned up [ 104.764814][ T7304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.803159][ T7304] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.857384][ T7332] loop9: detected capacity change from 0 to 1024 [ 104.858235][ T7335] proc: Bad value for 'gid' [ 104.889041][ T7332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.058165][ T7348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.201687][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.242496][ T7354] bridge_slave_1: left promiscuous mode [ 105.248336][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.257532][ T7354] bridge_slave_0: left allmulticast mode [ 105.263302][ T7354] bridge_slave_0: left promiscuous mode [ 105.269000][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.312119][ T7361] UHID_CREATE from different security context by process 350 (syz.9.1021), this is not allowed. [ 105.313416][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.330077][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.337542][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.345262][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.352763][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.360212][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.367617][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.375018][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.382445][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.389926][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.397401][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.404826][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.412323][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.419772][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.427179][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.434657][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.442167][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.449589][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.456961][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.464671][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.472129][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.479551][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.486979][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.494386][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.501893][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.509306][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.516872][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.524339][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.531739][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.539123][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.546511][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.553964][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.561376][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.568907][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.576359][ T5280] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0 [ 105.587220][ T5280] hid-generic 0000:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 105.628157][ T7366] loop9: detected capacity change from 0 to 1024 [ 105.638730][ T7366] ext4: Unknown parameter 'debug_wa./file0' [ 105.664524][ T7372] loop9: detected capacity change from 0 to 512 [ 105.671385][ T7372] EXT4-fs: Ignoring removed oldalloc option [ 105.677670][ T7372] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 105.688724][ T7372] EXT4-fs (loop9): 1 truncate cleaned up [ 105.694709][ T7372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.719942][ T5606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.818571][ T7386] loop6: detected capacity change from 0 to 1024 [ 105.825542][ T7386] EXT4-fs: Ignoring removed nobh option [ 105.831141][ T7386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.839371][ T7386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.862108][ T7386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.885636][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1028'. [ 105.910229][ T7386] ext4: Unknown parameter '0xffffffffffffffff0000000000000000004018446744073709551615@LqE: 艞t}0$' [ 105.948445][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.995323][ T7395] loop6: detected capacity change from 0 to 512 [ 106.021740][ T7395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.050053][ T7395] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.073078][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1030: corrupted inode contents [ 106.112279][ T7405] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1030: mark_inode_dirty error [ 106.141653][ T6152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.146411][ T7406] 9pnet_fd: Insufficient options for proto=fd [ 106.166350][ T7405] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1030: corrupted inode contents [ 106.196630][ T7405] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1030: mark_inode_dirty error [ 106.278193][ T5122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.312498][ T7409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1034'. [ 106.359219][ T7413] vlan3: entered allmulticast mode [ 106.364405][ T7413] bridge_slave_0: entered allmulticast mode [ 106.376973][ T7413] bridge_slave_0: left allmulticast mode [ 106.433793][ T7412] loop1: detected capacity change from 0 to 1024 [ 106.442139][ T7412] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.453063][ T7412] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 106.507783][ T7412] JBD2: no valid journal superblock found [ 106.513659][ T7412] EXT4-fs (loop1): Could not load journal inode [ 106.617573][ T7429] loop1: detected capacity change from 0 to 512 [ 106.625808][ T7432] netlink: 'syz.9.1037': attribute type 6 has an invalid length. [ 106.629502][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.635985][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1037'. [ 106.646283][ T7429] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.669115][ T7432] netlink: 'syz.9.1037': attribute type 2 has an invalid length. [ 107.397805][ T6152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.469382][ T7465] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.483721][ T7466] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.1053'. [ 107.483930][ T7465] loop6: detected capacity change from 0 to 164 [ 107.503323][ T7469] bridge0: port 3(vlan2) entered blocking state [ 107.509663][ T7469] bridge0: port 3(vlan2) entered disabled state [ 107.519107][ T7469] vlan2: entered allmulticast mode [ 107.524933][ T7469] vlan2: left allmulticast mode [ 107.557342][ T7457] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 107.569126][ T7476] bpf_get_probe_write_proto: 2 callbacks suppressed [ 107.569156][ T7476] syz.1.1055[7476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.575980][ T7476] syz.1.1055[7476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.589526][ T7476] syz.1.1055[7476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.610847][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 107.631238][ T7478] IPVS: Error joining to the multicast group [ 107.835768][ T7490] ================================================================== [ 107.843877][ T7490] BUG: KCSAN: data-race in sg_new_write / sg_new_write [ 107.850742][ T7490] [ 107.853069][ T7490] write to 0xffff88810b951319 of 1 bytes by task 7491 on cpu 1: [ 107.860713][ T7490] sg_new_write+0x88/0x8e0 [ 107.865151][ T7490] sg_ioctl+0xe22/0x1870 [ 107.869407][ T7490] __se_sys_ioctl+0xc9/0x140 [ 107.874016][ T7490] __x64_sys_ioctl+0x43/0x50 [ 107.878615][ T7490] x64_sys_call+0x1690/0x2dc0 [ 107.883318][ T7490] do_syscall_64+0xc9/0x1c0 [ 107.887841][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.893776][ T7490] [ 107.896113][ T7490] write to 0xffff88810b951319 of 1 bytes by task 7490 on cpu 0: [ 107.903815][ T7490] sg_new_write+0x88/0x8e0 [ 107.908256][ T7490] sg_ioctl+0xe22/0x1870 [ 107.912514][ T7490] __se_sys_ioctl+0xc9/0x140 [ 107.917121][ T7490] __x64_sys_ioctl+0x43/0x50 [ 107.921738][ T7490] x64_sys_call+0x1690/0x2dc0 [ 107.926455][ T7490] do_syscall_64+0xc9/0x1c0 [ 107.930962][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.936873][ T7490] [ 107.939195][ T7490] value changed: 0x00 -> 0x01 [ 107.943859][ T7490] [ 107.946171][ T7490] Reported by Kernel Concurrency Sanitizer on: [ 107.952335][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.9.1059 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 107.963003][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.973052][ T7490] ==================================================================