last executing test programs: 3.058927091s ago: executing program 4 (id=148): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(0x0, 0x0) write$binfmt_aout(r5, 0x0, 0x20) r6 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/209, 0xd1}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x861}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) kexec_load(0x4, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb4507b43daa8e0b53a9189fd733533208c21c0629ff77cb9d8ace", 0x1b, 0xfffffffffffffff9, 0x4}, {&(0x7f0000000c00)="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", 0x1000, 0x8000000000000000, 0x8000000000000001}, {&(0x7f0000000300)="acd87cf65e8f433cdec08cf8d421f67b8ce60730468f945cce3b1ada94424266b40305ec6c0bfb3d3d70c8d21b6ff8f58e9044dba9718e715d786ff8e4ffa9acb8b57a3cb44c70628096a569497de90350ee01ddacda2edd16e5e18da8ac7071894e81abff6546b1f7d5b1e3", 0x6c, 0x5, 0x1}, {&(0x7f0000000200)="a55edc5239a6ec14871b431ea6335bcdb212228d4f8c9b1fdf8e0464fe9b10bc36ff29d93a0ed0ae9119794493c6d93d833db305ecda7993da28385cb760278cd342de1f7f0266a655", 0x49, 0x4, 0x9}, {&(0x7f0000001c00)="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", 0x1000, 0x101, 0x12}], 0x3e0000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0xc000000000, 0x80000000}], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRESHEX=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.60858973s ago: executing program 3 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.498364002s ago: executing program 3 (id=165): syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d48", 0x3}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 2.461309253s ago: executing program 3 (id=166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x7c) 2.445024783s ago: executing program 3 (id=167): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0)=0x7fe000000, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000400), 0xc}, 0x0, 0x2, 0x0, 0xc, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) syz_open_dev$usbmon(0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x11, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) 2.387104574s ago: executing program 3 (id=169): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64, @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ce7256e4d2069c98995edfbc7e6366f1b801a2ef84b281b0450eb58b6c40ce0cba3c570ee8a1e7c8e0f85dfc42f28ade9fb80c5906652012471ef619fcd066fe8a76a4a4eaff254ad78a2ecaa9be03c603", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a00000000000000e74d371a1afe10", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 2.138765559s ago: executing program 2 (id=171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x7c) 2.07878672s ago: executing program 2 (id=172): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='ib_mad_recv_done_handler\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cf1b263b5b99a48, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x101}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x0, 0x50c, &(0x7f0000000ac0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) iopl(0x3) 2.019560811s ago: executing program 2 (id=173): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x67, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000700), &(0x7f0000000380), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x210000, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 1.793725346s ago: executing program 4 (id=177): openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b000000000000000000000000000200000000002a1d146d13a815983e02827c613d5cee0360c92a2b4b4959cccfe27aa8f57f28d791fe16d8edffc4fade8a47a54dc575a5e1ec848e2b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000800000", @ANYRES32, @ANYBLOB="0000000000000008b70383ec72f3bbdd2a49b112000000000000850000001b000052b7000000cc5b0000c2aa35eb00c3e533592f69d1c7c87e307a87197600000000000000002cfbd13b09fa83e9635240c49f42705d09c57b1b9fe87acb20b3665b22f09e5577ec9e809aeaf6ddc3898fa538985f7dc7d92855914a26fa485297a0e3c9d1cdc416bc40d198"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2fc, &(0x7f0000000dc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000020000000200009301000000060000000200000000000000005f615f2e2e3000bea787df836e7f6967baa0ad9cfd1ec1c48015a617f1f814b271df8a5fc1f52cc708f858b35da3f85d567b4ad47b1e426803178f3d3c21e52b14a13fa8f4d9cb8f6571c225040ada4776ddd4de3ed5c8c1689cb7c31a3b209c397b8b846c72e14c559dbd1dc2912e702099ab4ad4a82201c5f5eda7a885f69dadb959e41b3f3f1e3c9ccf5b24ef97551e89b9f1e9e8b882e4ea1f4b41aa99bf7d4a6c6dbe32d8badc3d994e399a132dd171507f208312463083b8b9105beee9f6"], &(0x7f0000002e40)=""/217, 0x45, 0xd9, 0x1, 0x6}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) 1.674613998s ago: executing program 4 (id=179): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x10b00) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) read(r3, &(0x7f0000000440)=""/52, 0x34) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.399058983s ago: executing program 3 (id=185): syz_usb_connect$cdc_ncm(0x3, 0x17f, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x2, 0x1, 0x0, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "a72879"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0xd, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xda, 0xc, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x6}, @mdlm_detail={0xff, 0x24, 0x13, 0x1, "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"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6e, 0xc9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0x4}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0xd, 0x1, 0x8, 0x8, 0x7}, 0xf, &(0x7f0000000900)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x3, 0x1}]}, 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x444}}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000001c0)=0x2, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x904c01, &(0x7f0000000a40), 0x2, 0x5b1, &(0x7f0000000180)="$eJzs3c9vVEUcAPDv290WStVWYlQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2ve7tvt2u6229Ll1b7PJ3ndmTe7nXnQb2f2zUw3gMIaS7+UIvZExOUkYqStrBJZ4VjjeXd/f/90eiRRq736WxJJdq75/CR7HM5e/PdIxPffJLG7vLLeuYWr56er1dkrWX5i/sLlibmFqwfOXZg+O3t29uLUc1NHjxw+cnTy4D1dX6ktfeL6W++MfHTy9S8++yuZ/PKnk0kci1/PNMrar2OzjMVY/FGrfbD8fPrvenSzK8tJufVzsiRZfoItq5LFyGBEPBYjUW773xyJD1/OtXFAX9WSiBpQUIn4h4JqjgOa7+17ex9c6vOoBLgf7hxPvw50iP9K495gjMZAROxd9roOt/Q2JK3ju29PXk+P6NN9OKCzxWs7stTy+E/qsTkaO+u5XXdLrfv7kY0ATmWPlYh4ZYP1jy3Li3+4fxavRcTjncb/K+O/fVonjfs32uL/zQ3WL/4BAAAAAABg89w6HhHPdpr/K2Vzczvjqfr8X9KY//thaYfgsU2of+35v9LtTagG6ODO8YiXOq7/ba3xHS1nuQcbqwGTM+eqswcj4qGI2B8DO9L85Cp1HPh4941uZe3r/9Ijrb+5FjBrx+3Kjv++ZmZ6fvperhlouHMt4olK9/U/af+ftPf/mfT3weUe69i99+apbmVrxz/QL7XPI/Z17P+XVvsmq/99jon6eGCiOSpY6cn3PvmqW/3iH/KT9v+7Vo//0aT97/XMre/7D0bEoYVKrVv5Rsf/g8lr5eb3T707PT9/ZTJiMDmx8vzU+toM21UzHprxksb//qdXv//XGv+3xeFQRCz2WOej/wz/3K1M/w/5SeN/Zl39//oTUzdHv+5Wf2/9/+F6n74/O+P+H6yu1wDNu50AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H9UiogHIimNt9Kl0vh4xHBEPBK7StVLc/PPnLn09sWZtKz++f+l5if9jjTySfPz/0fb8lPL8oci4uGI+LQ8VM+Pn75Uncn74gEAAAAAAAAAAAAAAAAAAGCLGO6y/z/1Sznv1gF9V8kexTsUTyXvBgC5Ef9QXOIfikv8Q3GJfyiuDca/6QLYBvT/UFQDvT1tZ7/bAeRB/w8AAAAAANvKrRefv5FExOILQ/UjNZiVtSYGh/JqHdBPpbwbAOTGGl4oLkt/oLh6XPwLbGNJK/VnrVN599X/SX8aBAAAAAAAAAAAAACssG/PrR/X3P8PbEv2/0Nx2f8PxWX/PxSX9/jAWrv47f8HAAAAAAAAAAAAgPzNLVw9P12tzl6RkNhqiYGI2ALNyCExmH945vyLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPk3AAD//54nJPo=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31"], 0x25c}}, 0x0) r7 = getpid() add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0100001200576d10000010fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d00ca0e00000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 849.327724ms ago: executing program 2 (id=187): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x60) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x5f8, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x342, 0x2, 0x30d7, 0xb367, 0x7ff, 0x4, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x2, 0x4, 0xffff, 0x0, 0x4fb, 0x8000]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x1, 0x24, 0x0, 0x3, 0x6c, 0x6c, 0x6, 0xc, 0xc, 0x6, 0x6, 0x6c, 0x24, 0x6c, 0x6c, 0x2, 0x18, 0x1, 0x60, 0x12, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc, 0xf3ba, 0x5, 0xff, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x9877, 0x0, 0x6, 0x2, 0x10, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe3, 0x9, 0x3, 0x9, 0xff01, 0x0, 0x352]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1000, 0x9, 0x7f, 0xe, 0x5, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xffc0, 0x3, 0xf, 0x40ae, 0x5, 0xb, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x0, 0x1, 0x3, 0x16, 0x1c, 0x30, 0x48, 0x9, 0x4, 0x9, 0x16, 0x1, 0xc, 0xb, 0x30, 0x2, 0x24, 0x18, 0x16, 0x18, 0x56, 0x24, 0x60, 0x48, 0x16]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xab4e, 0x5, 0x300, 0x9, 0x1ff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf, 0xffff, 0x5, 0xb, 0x3, 0x0, 0x8001]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2c, 0x0, 0xa6a, 0x6, 0x7, 0x800]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x1, 0x6c, 0x9, 0x2, 0x16, 0x6, 0x1, 0x60, 0x4, 0x36, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x88, 0xebd6, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0xd}, {0x6, 0x6}, {0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5800, 0x0, 0xeac2, 0x1, 0xcf0, 0x3, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x2, 0xc, 0x1, 0x2, 0x16, 0xc, 0x5e, 0x18, 0x4, 0x5, 0x12, 0x60, 0x0, 0x6c, 0x5, 0x2, 0xb, 0x1b, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x9, 0x0, 0x8, 0xf3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x46}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x4}, {0x3}, {0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x4}, {0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x19}, {0x0, 0x3}, {0x5, 0x2}, {0x6}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {}, {0x3}, {0x0, 0xc}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc9f, 0x5, 0x7, 0x4, 0x0, 0x1ff, 0x3]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x1, 0xf8, 0x2, 0x1, 0x7f, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x7}, {0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x0, 0xec, 0x200, 0x2, 0xacee, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1b4, 0x7ff, 0x6, 0x9, 0xfffe, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x6}, {0x6, 0x3}, {}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x13}, {0x6, 0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x2, 0x16, 0x1, 0x6, 0x5, 0x1b, 0x30, 0x48, 0x4, 0x4, 0x2, 0x1, 0x6, 0x9, 0x9, 0x9, 0x60, 0x1, 0x16]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1b, 0x5, 0xb, 0xc, 0x42, 0xb, 0x4, 0x6c, 0x6, 0x2, 0x3, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x2, 0xa}, {}, {0x7, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3a82dcd1af788352, 0x24, 0x5, 0x6, 0x2, 0x0, 0x2, 0x3, 0x2, 0xb, 0x1b, 0x1, 0x6, 0x2, 0x24, 0xc, 0xc, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x7b, 0x3, 0xb, 0xc, 0x60, 0x16, 0x16, 0x18, 0x5, 0x6c, 0x30, 0x16, 0x12, 0x9, 0xb55c79c8a432c922, 0x48, 0x12, 0x12, 0x24, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x354a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}]}]}]}, 0x5f8}}, 0x0) 813.310465ms ago: executing program 2 (id=189): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) 796.434995ms ago: executing program 4 (id=191): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000300), r0, &(0x7f00000003c0)=0x7fe000000, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000400), 0xc}, 0x0, 0x2, 0x0, 0xc, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) syz_open_dev$usbmon(0x0, 0x7, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) 780.948635ms ago: executing program 4 (id=192): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x200000000000000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 698.562667ms ago: executing program 4 (id=195): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64, @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001700000085000000860000008500000023000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ce7256e4d2069c98995edfbc7e6366f1b801a2ef84b281b0450eb58b6c40ce0cba3c570ee8a1e7c8e0f85dfc42f28ade9fb80c5906652012471ef619fcd066fe8a76a4a4eaff254ad78a2ecaa9be03c603", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001a00000000000000e74d371a1afe10", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 680.826497ms ago: executing program 1 (id=196): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c5db8d, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20001, 0x800, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105500, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x6, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000400)={0x100000001, 0x401, 0x1, 0x0, 0x0, [{{r3}, 0x9}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 623.412588ms ago: executing program 2 (id=197): syz_usb_connect$cdc_ncm(0x3, 0x17f, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x2, 0x1, 0x0, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "a72879"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x10, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0xd, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xda, 0xc, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x6, 0x6}, @mdlm_detail={0xff, 0x24, 0x13, 0x1, "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"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6e, 0xc9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0x4}}}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0xd, 0x1, 0x8, 0x8, 0x7}, 0xf, &(0x7f0000000900)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x3, 0x1}]}, 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x444}}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000001c0)=0x2, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x904c01, &(0x7f0000000a40), 0x2, 0x5b1, &(0x7f0000000180)="$eJzs3c9vVEUcAPDv290WStVWYlQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2ve7tvt2u6229Ll1b7PJ3ndmTe7nXnQb2f2zUw3gMIaS7+UIvZExOUkYqStrBJZ4VjjeXd/f/90eiRRq736WxJJdq75/CR7HM5e/PdIxPffJLG7vLLeuYWr56er1dkrWX5i/sLlibmFqwfOXZg+O3t29uLUc1NHjxw+cnTy4D1dX6ktfeL6W++MfHTy9S8++yuZ/PKnk0kci1/PNMrar2OzjMVY/FGrfbD8fPrvenSzK8tJufVzsiRZfoItq5LFyGBEPBYjUW773xyJD1/OtXFAX9WSiBpQUIn4h4JqjgOa7+17ex9c6vOoBLgf7hxPvw50iP9K495gjMZAROxd9roOt/Q2JK3ju29PXk+P6NN9OKCzxWs7stTy+E/qsTkaO+u5XXdLrfv7kY0ATmWPlYh4ZYP1jy3Li3+4fxavRcTjncb/K+O/fVonjfs32uL/zQ3WL/4BAAAAAABg89w6HhHPdpr/K2Vzczvjqfr8X9KY//thaYfgsU2of+35v9LtTagG6ODO8YiXOq7/ba3xHS1nuQcbqwGTM+eqswcj4qGI2B8DO9L85Cp1HPh4941uZe3r/9Ijrb+5FjBrx+3Kjv++ZmZ6fvperhlouHMt4olK9/U/af+ftPf/mfT3weUe69i99+apbmVrxz/QL7XPI/Z17P+XVvsmq/99jon6eGCiOSpY6cn3PvmqW/3iH/KT9v+7Vo//0aT97/XMre/7D0bEoYVKrVv5Rsf/g8lr5eb3T707PT9/ZTJiMDmx8vzU+toM21UzHprxksb//qdXv//XGv+3xeFQRCz2WOej/wz/3K1M/w/5SeN/Zl39//oTUzdHv+5Wf2/9/+F6n74/O+P+H6yu1wDNu50AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H9UiogHIimNt9Kl0vh4xHBEPBK7StVLc/PPnLn09sWZtKz++f+l5if9jjTySfPz/0fb8lPL8oci4uGI+LQ8VM+Pn75Uncn74gEAAAAAAAAAAAAAAAAAAGCLGO6y/z/1Sznv1gF9V8kexTsUTyXvBgC5Ef9QXOIfikv8Q3GJfyiuDca/6QLYBvT/UFQDvT1tZ7/bAeRB/w8AAAAAANvKrRefv5FExOILQ/UjNZiVtSYGh/JqHdBPpbwbAOTGGl4oLkt/oLh6XPwLbGNJK/VnrVN599X/SX8aBAAAAAAAAAAAAACssG/PrR/X3P8PbEv2/0Nx2f8PxWX/PxSX9/jAWrv47f8HAAAAAAAAAAAAgPzNLVw9P12tzl6RkNhqiYGI2ALNyCExmH945vyLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPk3AAD//54nJPo=") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r4, &(0x7f0000000c00)="b8286d8bef4a67af9f76371c9d83ab95f8368685cacb7f6737a06b84d4fcc8badbc5cf8aaf74004a0627670fd1b603bc4903c10e587b59c384888dfb72219e7de141f56b1da303de7d6caf4c30ba8f38e8c2958331678a2090b00080fdd934d56c85480ff8047acc745cddbaba3398ada520e3ddecc6adc0a1c82c9a4bc2879c57d3c183e7dfbca3742908cffa41"}, 0x20) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0100001200576d10000010fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d00ca0e00000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 620.856039ms ago: executing program 0 (id=198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x0, 0x0) 327.227474ms ago: executing program 0 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000480)={@local, @random="ab3fcfbd08d0", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x42, 0x1ff}, @md5sig={0x13, 0x12, "8900"}, @exp_fastopen={0xfe, 0xb, 0xf989, "f36131b8ef53c3"}, @mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x81, 0x4, 0x9378}, @sack={0x5, 0xa, [0xa, 0x10]}]}}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 314.170384ms ago: executing program 1 (id=200): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x60) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x5f8, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ec, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x342, 0x2, 0x30d7, 0xb367, 0x7ff, 0x4, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x2, 0x4, 0xffff, 0x0, 0x4fb, 0x8000]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x1, 0x24, 0x0, 0x3, 0x6c, 0x6c, 0x6, 0xc, 0xc, 0x6, 0x6, 0x6c, 0x24, 0x6c, 0x6c, 0x2, 0x18, 0x1, 0x60, 0x12, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xdc, 0xf3ba, 0x5, 0xff, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x9877, 0x0, 0x6, 0x2, 0x10, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe3, 0x9, 0x3, 0x9, 0xff01, 0x0, 0x352]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1000, 0x9, 0x7f, 0xe, 0x5, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xffc0, 0x3, 0xf, 0x40ae, 0x5, 0xb, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x0, 0x1, 0x3, 0x16, 0x1c, 0x30, 0x48, 0x9, 0x4, 0x9, 0x16, 0x1, 0xc, 0xb, 0x30, 0x2, 0x24, 0x18, 0x16, 0x18, 0x56, 0x24, 0x60, 0x48, 0x16]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xab4e, 0x5, 0x300, 0x9, 0x1ff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf, 0xffff, 0x5, 0xb, 0x3, 0x0, 0x8001]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2c, 0x0, 0xa6a, 0x6, 0x7, 0x800]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x1, 0x6c, 0x9, 0x2, 0x16, 0x6, 0x1, 0x60, 0x4, 0x36, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x88, 0xebd6, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x1}, {0x1, 0x4}, {0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0xd}, {0x6, 0x6}, {0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5800, 0x0, 0xeac2, 0x1, 0xcf0, 0x3, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x2, 0xc, 0x1, 0x2, 0x16, 0xc, 0x5e, 0x18, 0x4, 0x5, 0x12, 0x60, 0x0, 0x6c, 0x5, 0x2, 0xb, 0x1b, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x9, 0x0, 0x8, 0xf3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x46}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x90}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x5}, {0x3, 0x1}, {0x3}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x7}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x4}, {0x3}, {0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x4}, {0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0x7}, {0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x9}, {0x4, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x19}, {0x0, 0x3}, {0x5, 0x2}, {0x6}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {}, {0x3}, {0x0, 0xc}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc9f, 0x5, 0x7, 0x4, 0x0, 0x1ff, 0x3]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x41, 0x1, 0xf8, 0x2, 0x1, 0x7f, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x7}, {0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x2}, {0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x0, 0xec, 0x200, 0x2, 0xacee, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa1b4, 0x7ff, 0x6, 0x9, 0xfffe, 0x4, 0x2]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x4, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x8}, {0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x6}, {0x6, 0x3}, {}, {0x2, 0x6}, {0x3, 0x4}, {0x4, 0x13}, {0x6, 0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x5, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x2, 0x16, 0x1, 0x6, 0x5, 0x1b, 0x30, 0x48, 0x4, 0x4, 0x2, 0x1, 0x6, 0x9, 0x9, 0x9, 0x60, 0x1, 0x16]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1b, 0x5, 0xb, 0xc, 0x42, 0xb, 0x4, 0x6c, 0x6, 0x2, 0x3, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x2, 0xa}, {}, {0x7, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3a82dcd1af788352, 0x24, 0x5, 0x6, 0x2, 0x0, 0x2, 0x3, 0x2, 0xb, 0x1b, 0x1, 0x6, 0x2, 0x24, 0xc, 0xc, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x7b, 0x3, 0xb, 0xc, 0x60, 0x16, 0x16, 0x18, 0x5, 0x6c, 0x30, 0x16, 0x12, 0x9, 0xb55c79c8a432c922, 0x48, 0x12, 0x12, 0x24, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xde}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x354a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}]}]}]}, 0x5f8}}, 0x0) 272.844905ms ago: executing program 0 (id=201): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2000, 0xc9, 0x10}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x4000, 0xa1, 0x2}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000042707098cd32a107604a7116c85cea8e197634c95d733f911d9dfae946fb5208a55abec5b0d86fbbeab5e002fc5992b8455e8ee6ec4e256640ba6c7fd8a5e83b2", @ANYRES16=r3, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x52}, 0x40040) shutdown(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0cbb4deed64e2a0725181ebe2e616313677fd7661dcf1de248fa3826182601b60f09a3ab5679e8287de2fbf4f764058e98ecaf5c6fd1cb80118c424484285da7f77d5bc124dc6583957e134a2f945e3eb943f2d2a4b822ae79546ffd3d29ce96fff053dc8e593d9a3d51687680008789fb3c832182a98d74e655d928e2c90eb1bcdcf58d3695d391adb26abaa59609f47c7d8f315df8aed8339728f02302c70fa15", @ANYRES16=r5, @ANYBLOB="20002dbd7000fedbdf25080000000c0099000500000010000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 199.161067ms ago: executing program 1 (id=202): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy_home_node(&(0x7f000047f000/0x4000)=nil, 0x4000, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x25, &(0x7f0000000040)=""/37, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x359, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x5, 0x0, 0x1}], 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 193.237457ms ago: executing program 0 (id=203): unshare(0x480) r0 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2101400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40c0840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x6f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 169.360637ms ago: executing program 1 (id=204): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b61"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_pts(0xffffffffffffffff, 0x141001) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = inotify_init1(0x0) sendmmsg$sock(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)="08ca15e47fb91e46ba2c460f71d855a755325a5eb1c0c243994fc19f80f39aec41d59d1371b1b547fdedd7de0a3c092de1c1e58ef44732e53f92c677162d2f0b7067f56b38d35bf81cbc44b464e7b4abead861fc1f0d47e185a643e88443db5dfe7eedc46a0648c0865b91be201280a5f47c7da8d7a24420433343c0d64cb61a38d063b18ea24e9f68dfe4889b5d4f8b32a2bbe27adfbfd149c7edfdcaedd0de8f7a8fbdc3cbd11b4f9050b9be51dae50cf4f9fdd11046e6fe26aee5df26e83b8bc59e2d7e4cb127455601bb5854f5b1a00722e17662d94d92c9a13fa51ea7779bf738395a7ac053323843fab0e2e08f840223", 0xf3}], 0x1, &(0x7f0000000840)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1a}}], 0x48}}], 0x1, 0x20008811) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06dec17250000200000000000000000002000000", @ANYRES32, @ANYBLOB="fbff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x8008, 0x9, 0x10}, &(0x7f00000006c0)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x88, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_EMATCHES={0x54, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x81, 0x8, 0xcb}, {0x4}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4084021}, 0x20040054) 117.888348ms ago: executing program 0 (id=205): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000140)=""/207, 0xcf, 0x0, &(0x7f0000000080)=""/108, 0x6c}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x7fffffffffffffff}, 0x100b28, 0x1, 0x0, 0x5, 0x400, 0x21005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20], 0x48) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x678d, &(0x7f0000000340)={0x0, 0xffffffff, 0x80, 0x0, 0xf1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x23, 0x0, [0x4, 0x4, 0x3f550a8b, 0x9, 0x61, 0x9, 0x0, 0x5, 0x4, 0x5, 0x5, 0x400e9, 0x8001, 0x8, 0x9, 0xdf39]}, {0x2b, 0x0, [0xffff3ee4, 0x8, 0x5, 0x4, 0xe0000000, 0x1, 0x7, 0x8, 0x8cd, 0x5, 0x3, 0x9, 0x6, 0x6, 0x2, 0x4]}], r5, 0x1, 0x1, 0x90}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000400000008000000080000", @ANYRES32], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x8, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x8, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec19, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x4, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0xb, 0x0, 0x8, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x7, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x4f7, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0x9, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee4, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8001, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 51.328519ms ago: executing program 0 (id=206): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 17.69976ms ago: executing program 1 (id=207): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x122) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x2, 0x8, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000000801020000000000000091020000020900010073797a310000000004000480050003002f0000000600024060"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80d0) 0s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095e34e5361ab0dcd76ae05f3bc36931eea7c445bbe823d73649a946585201c0abf583d8bf1206ba1811cce39e02647fcdf79ddb38cfab825fe91751de361c689c236f2e3200bb45f1b5cda82b7fc58774df0e60238d0d4aee7febae25a3446df8fcccf0acb816962262c5f67712efc71d7ea94b1e2fa93ec4dea424bdc7dbed4283447b8e41f9231eb1d0f0f6f9d6d198354d5cf56b8ba3cb3762c1bbb829161043f209437583e598a67608aa7"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="73e36ecfe778c3eefb8b19d81f1195d225e8431b6eb021f83126a18cfb37c65b07e6b0c7e87e7c973b7f3698d5ee9ead1aff9851551b70b94852c5a661c0a0a3a4bb8f79ee8aaa71b4724dad51d1e704eb8b2ceb8277987dad2e2fd5ae404e43e5cfa63fd75c041dd5953dc869dcc98fef92445b5e", @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESDEC=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e24, 0x200, @local}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x8, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfb, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cgroup.controllers\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x80}, 0x4000000) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/207, 0xcf}], 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 23.910620][ T29] audit: type=1400 audit(1757327535.037:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.911437][ T3294] cgroup: Unknown subsys name 'net' [ 23.933320][ T29] audit: type=1400 audit(1757327535.037:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.960640][ T29] audit: type=1400 audit(1757327535.067:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.118937][ T3294] cgroup: Unknown subsys name 'cpuset' [ 24.124966][ T3294] cgroup: Unknown subsys name 'rlimit' [ 24.293646][ T29] audit: type=1400 audit(1757327535.417:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.316944][ T29] audit: type=1400 audit(1757327535.417:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.337443][ T29] audit: type=1400 audit(1757327535.417:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.357838][ T29] audit: type=1400 audit(1757327535.417:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.378117][ T29] audit: type=1400 audit(1757327535.427:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.384813][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.402920][ T29] audit: type=1400 audit(1757327535.427:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.434714][ T29] audit: type=1400 audit(1757327535.537:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.491779][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.375666][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.387750][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.417775][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.460048][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.514434][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.523137][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.530268][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.537351][ T3308] bridge_slave_0: entered allmulticast mode [ 26.543785][ T3308] bridge_slave_0: entered promiscuous mode [ 26.557094][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.564179][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.572192][ T3305] bridge_slave_0: entered allmulticast mode [ 26.578473][ T3305] bridge_slave_0: entered promiscuous mode [ 26.591546][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.598601][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.605695][ T3304] bridge_slave_0: entered allmulticast mode [ 26.612159][ T3304] bridge_slave_0: entered promiscuous mode [ 26.618737][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.625748][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.632857][ T3308] bridge_slave_1: entered allmulticast mode [ 26.639080][ T3308] bridge_slave_1: entered promiscuous mode [ 26.647079][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.654136][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.661250][ T3305] bridge_slave_1: entered allmulticast mode [ 26.667469][ T3305] bridge_slave_1: entered promiscuous mode [ 26.680460][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.687608][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.694733][ T3304] bridge_slave_1: entered allmulticast mode [ 26.701013][ T3304] bridge_slave_1: entered promiscuous mode [ 26.731696][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.749469][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.759447][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.773827][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.800909][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.818452][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.825520][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.832798][ T3312] bridge_slave_0: entered allmulticast mode [ 26.839136][ T3312] bridge_slave_0: entered promiscuous mode [ 26.845281][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.852359][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.859455][ T3314] bridge_slave_0: entered allmulticast mode [ 26.865739][ T3314] bridge_slave_0: entered promiscuous mode [ 26.872916][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.887058][ T3305] team0: Port device team_slave_0 added [ 26.896458][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.903602][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.911570][ T3312] bridge_slave_1: entered allmulticast mode [ 26.917808][ T3312] bridge_slave_1: entered promiscuous mode [ 26.923903][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.930946][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.938054][ T3314] bridge_slave_1: entered allmulticast mode [ 26.944364][ T3314] bridge_slave_1: entered promiscuous mode [ 26.958914][ T3305] team0: Port device team_slave_1 added [ 26.965173][ T3304] team0: Port device team_slave_0 added [ 26.971643][ T3308] team0: Port device team_slave_0 added [ 26.977835][ T3304] team0: Port device team_slave_1 added [ 26.996963][ T3308] team0: Port device team_slave_1 added [ 27.016556][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.031063][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.037984][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.063862][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.080579][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.090465][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.104500][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.111522][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.137456][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.148345][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.155325][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.181316][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.193213][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.202528][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.209485][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.235520][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.251044][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.257976][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.283943][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.295312][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.302291][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.328235][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.359033][ T3314] team0: Port device team_slave_0 added [ 27.365489][ T3314] team0: Port device team_slave_1 added [ 27.372837][ T3312] team0: Port device team_slave_0 added [ 27.379781][ T3312] team0: Port device team_slave_1 added [ 27.412116][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.419093][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.444982][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.456085][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.463034][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.489041][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.528998][ T3304] hsr_slave_0: entered promiscuous mode [ 27.534940][ T3304] hsr_slave_1: entered promiscuous mode [ 27.541715][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.548685][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.574579][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.586051][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.593019][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.618944][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.632274][ T3308] hsr_slave_0: entered promiscuous mode [ 27.638102][ T3308] hsr_slave_1: entered promiscuous mode [ 27.643885][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.649601][ T3308] Cannot create hsr debugfs directory [ 27.656830][ T3305] hsr_slave_0: entered promiscuous mode [ 27.662910][ T3305] hsr_slave_1: entered promiscuous mode [ 27.668711][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.674434][ T3305] Cannot create hsr debugfs directory [ 27.706603][ T3314] hsr_slave_0: entered promiscuous mode [ 27.712626][ T3314] hsr_slave_1: entered promiscuous mode [ 27.718381][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.725628][ T3314] Cannot create hsr debugfs directory [ 27.771325][ T3312] hsr_slave_0: entered promiscuous mode [ 27.777268][ T3312] hsr_slave_1: entered promiscuous mode [ 27.783397][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.789176][ T3312] Cannot create hsr debugfs directory [ 27.940990][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.951477][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.961850][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.972735][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.981134][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.990222][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.000215][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.008861][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.046057][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.064444][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.073232][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.086196][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.104217][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.112530][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.121895][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.130338][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.169370][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.179005][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.190185][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.197080][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.205416][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.213804][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.244640][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.254511][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.267744][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.274859][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.289146][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.296225][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.305145][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.312225][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.331544][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.338689][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.364793][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.375195][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.403867][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.417044][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.426240][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.445153][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.468609][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.475692][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.485893][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.492954][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.509568][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.521038][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.533421][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.546537][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.557995][ T1961] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.565034][ T1961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.579249][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.586283][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.608709][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.615856][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.624439][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.631478][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.644661][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.712612][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.734871][ T3304] veth0_vlan: entered promiscuous mode [ 28.745336][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.772544][ T3304] veth1_vlan: entered promiscuous mode [ 28.809586][ T3308] veth0_vlan: entered promiscuous mode [ 28.822583][ T3304] veth0_macvtap: entered promiscuous mode [ 28.831338][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.843237][ T3308] veth1_vlan: entered promiscuous mode [ 28.850541][ T3304] veth1_macvtap: entered promiscuous mode [ 28.863242][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.874409][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.887654][ T3308] veth0_macvtap: entered promiscuous mode [ 28.896083][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.919413][ T3308] veth1_macvtap: entered promiscuous mode [ 28.937365][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.951169][ T3314] veth0_vlan: entered promiscuous mode [ 28.963578][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.970986][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.988567][ T3314] veth1_vlan: entered promiscuous mode [ 29.002053][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.002112][ T29] audit: type=1400 audit(1757327540.127:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.vZA9ro/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.032384][ T29] audit: type=1400 audit(1757327540.127:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.043814][ T3314] veth0_macvtap: entered promiscuous mode [ 29.054321][ T29] audit: type=1400 audit(1757327540.127:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.vZA9ro/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.075000][ T3305] veth0_vlan: entered promiscuous mode [ 29.090681][ T29] audit: type=1400 audit(1757327540.187:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.102457][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.112448][ T29] audit: type=1400 audit(1757327540.187:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.vZA9ro/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.126285][ T3305] veth1_vlan: entered promiscuous mode [ 29.146146][ T29] audit: type=1400 audit(1757327540.187:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.vZA9ro/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.159800][ T3305] veth0_macvtap: entered promiscuous mode [ 29.178923][ T29] audit: type=1400 audit(1757327540.187:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.187876][ T3305] veth1_macvtap: entered promiscuous mode [ 29.209804][ T29] audit: type=1400 audit(1757327540.217:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.228510][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.232510][ T29] audit: type=1400 audit(1757327540.217:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=3813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.252384][ T3314] veth1_macvtap: entered promiscuous mode [ 29.275461][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.276218][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.284359][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.313547][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.326539][ T29] audit: type=1400 audit(1757327540.447:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.362292][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.371343][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.381215][ T3312] veth0_vlan: entered promiscuous mode [ 29.395642][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.404814][ T3312] veth1_vlan: entered promiscuous mode [ 29.412297][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.422398][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.431755][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.445928][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.461532][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.474833][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.485195][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.506722][ T3312] veth0_macvtap: entered promiscuous mode [ 29.513850][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.524787][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.534228][ T3312] veth1_macvtap: entered promiscuous mode [ 29.541090][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.553463][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.569534][ T3476] loop3: detected capacity change from 0 to 128 [ 29.575410][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.595558][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.613898][ T139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.627516][ T3478] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 29.635105][ T3478] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 29.638323][ T3482] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.665940][ T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.685348][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.685348][ T51] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 29.703467][ T3478] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 29.716343][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.718046][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.728480][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.728480][ T51] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 29.748999][ T3485] syz.0.1 (3485) used greatest stack depth: 10816 bytes left [ 29.752673][ T139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.765983][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.765983][ T51] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 29.780145][ T3478] syz.1.2 (3478) used greatest stack depth: 10736 bytes left [ 29.780885][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.780885][ T51] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 29.809604][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.809604][ T51] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 29.814609][ T3490] can0: slcan on ttyS3. [ 29.824447][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.824447][ T51] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 29.872759][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.872759][ T51] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 29.892139][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.892139][ T51] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 29.917328][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.917328][ T51] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 29.967236][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.977725][ T51] kworker/u8:3: attempt to access beyond end of device [ 29.977725][ T51] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 29.994190][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.031231][ T3508] loop0: detected capacity change from 0 to 1024 [ 30.206985][ T3516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 30.216368][ T3516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 30.279733][ T3528] netlink: 404 bytes leftover after parsing attributes in process `syz.0.11'. [ 30.296877][ T3528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.584240][ T3530] random: crng reseeded on system resumption [ 30.658976][ T3487] can0 (unregistered): slcan off ttyS3. [ 30.765718][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 31.015403][ T3601] random: crng reseeded on system resumption [ 31.027134][ T3610] loop2: detected capacity change from 0 to 164 [ 31.044208][ T3610] iso9660: Unknown parameter '00000000000000000000010' [ 31.060775][ T3612] loop4: detected capacity change from 0 to 128 [ 31.139949][ T3616] loop3: detected capacity change from 0 to 128 [ 31.274254][ T3628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 31.296971][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 31.309179][ T3630] udevd[3630]: failed to send result of seq 7412 to main daemon: Connection refused [ 31.319440][ T3628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 31.338269][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 31.349429][ T3528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.411966][ T3640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.421664][ T3640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.435539][ T3640] loop2: detected capacity change from 0 to 1024 [ 31.597103][ T3643] can0: slcan on ttyS3. [ 31.706772][ T3647] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.121731][ T3651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.133277][ T3651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.147905][ T3651] loop1: detected capacity change from 0 to 1024 [ 32.352081][ T3662] netlink: 'syz.3.42': attribute type 30 has an invalid length. [ 32.387895][ T3663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.408707][ T3638] can0 (unregistered): slcan off ttyS3. [ 32.423289][ T3664] loop3: detected capacity change from 0 to 512 [ 32.451527][ T3662] Zero length message leads to an empty skb [ 32.531693][ T3669] loop4: detected capacity change from 0 to 128 [ 32.550555][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.593815][ T3664] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.683572][ T3664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.141131][ T3663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.192012][ T3663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.211558][ T3528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.241827][ T3663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.261617][ T3647] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.275566][ T3528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.304255][ T3579] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.315238][ T3579] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326398][ T3579] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.336798][ T3579] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.371534][ T3647] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.388284][ T3558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399070][ T3579] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.410131][ T3579] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.421014][ T3579] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464466][ T3647] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.512056][ T3579] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.536045][ T3579] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.544676][ T3579] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.553448][ T3579] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.574185][ T3682] SELinux: Context is not valid (left unmapped). [ 33.584164][ T3683] kernel read not supported for file /!selinuxwk1m9ɞ*T"#jmVvm(p-WZ#{ (pid: 3683 comm: syz.0.47) [ 33.690755][ T3695] loop4: detected capacity change from 0 to 128 [ 33.840801][ T3700] kernel read not supported for file /!selinuxwk1m9ɞ*T"#jmVvm(p-WZ#{ (pid: 3700 comm: syz.4.55) [ 33.992846][ T3706] loop3: detected capacity change from 0 to 128 [ 34.021184][ T3708] loop4: detected capacity change from 0 to 164 [ 34.028109][ T3708] iso9660: Unknown parameter '00000000000000000000010' [ 34.060767][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 34.060778][ T29] audit: type=1326 audit(1757327545.187:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.093468][ T29] audit: type=1326 audit(1757327545.187:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.117045][ T29] audit: type=1326 audit(1757327545.217:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.140363][ T29] audit: type=1326 audit(1757327545.217:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.163522][ T29] audit: type=1326 audit(1757327545.217:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.186645][ T29] audit: type=1326 audit(1757327545.217:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.210189][ T29] audit: type=1326 audit(1757327545.217:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.233331][ T29] audit: type=1326 audit(1757327545.217:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.256543][ T29] audit: type=1326 audit(1757327545.217:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.279919][ T29] audit: type=1326 audit(1757327545.227:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 34.696702][ T3734] loop3: detected capacity change from 0 to 128 [ 34.731535][ T3732] loop2: detected capacity change from 0 to 128 [ 34.815878][ T3579] bio_check_eod: 423 callbacks suppressed [ 34.815891][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.815891][ T3579] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 34.835593][ T3537] kworker/u8:15: attempt to access beyond end of device [ 34.835593][ T3537] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 34.836939][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.836939][ T3579] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 34.849527][ T3537] kworker/u8:15: attempt to access beyond end of device [ 34.849527][ T3537] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 34.863671][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.863671][ T3579] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 34.876145][ T3537] kworker/u8:15: attempt to access beyond end of device [ 34.876145][ T3537] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 34.889443][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.889443][ T3579] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 34.903190][ T3537] kworker/u8:15: attempt to access beyond end of device [ 34.903190][ T3537] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 34.917664][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.917664][ T3579] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 34.943478][ T3579] kworker/u8:57: attempt to access beyond end of device [ 34.943478][ T3579] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 34.991076][ T3743] __nla_validate_parse: 7 callbacks suppressed [ 34.991087][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 35.025055][ T3747] netlink: 76 bytes leftover after parsing attributes in process `syz.3.76'. [ 35.040110][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 35.055961][ T3747] syz.3.76 (3747) used greatest stack depth: 9784 bytes left [ 35.064949][ T3748] kernel read not supported for file /!selinuxwk1m9ɞ*T"#jmVvm(p-WZ#{ (pid: 3748 comm: syz.2.74) [ 35.284805][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 35.290984][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.346750][ T3767] kernel read not supported for file /!selinuxwk1m9ɞ*T"#jmVvm(p-WZ#{ (pid: 3767 comm: syz.4.83) [ 35.430945][ T3774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.87'. [ 35.445012][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 35.511809][ T3785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.520380][ T3785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.534675][ T3785] loop1: detected capacity change from 0 to 1024 [ 35.759060][ T3788] netlink: 404 bytes leftover after parsing attributes in process `syz.1.90'. [ 35.771772][ T3788] netlink: 232 bytes leftover after parsing attributes in process `syz.1.90'. [ 36.247653][ T3791] can0: slcan on ttyS3. [ 36.394180][ T3796] bridge0: entered promiscuous mode [ 36.400338][ T3796] macvtap1: entered allmulticast mode [ 36.405694][ T3796] bridge0: entered allmulticast mode [ 36.412755][ T3796] bridge0: port 3(macvtap1) entered blocking state [ 36.419309][ T3796] bridge0: port 3(macvtap1) entered disabled state [ 36.427876][ T3796] bridge0: left allmulticast mode [ 36.432937][ T3796] bridge0: left promiscuous mode [ 36.493093][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 36.812506][ T3813] FAULT_INJECTION: forcing a failure. [ 36.812506][ T3813] name failslab, interval 1, probability 0, space 0, times 1 [ 36.825199][ T3813] CPU: 0 UID: 0 PID: 3813 Comm: syz.4.99 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.825272][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.825278][ T3813] Call Trace: [ 36.825282][ T3813] [ 36.825287][ T3813] __dump_stack+0x1d/0x30 [ 36.825300][ T3813] dump_stack_lvl+0xe8/0x140 [ 36.825323][ T3813] dump_stack+0x15/0x1b [ 36.825378][ T3813] should_fail_ex+0x265/0x280 [ 36.825391][ T3813] should_failslab+0x8c/0xb0 [ 36.825404][ T3813] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 36.825440][ T3813] ? sock_alloc_inode+0x34/0xa0 [ 36.825508][ T3813] ? __pfx_sock_alloc_inode+0x10/0x10 [ 36.825574][ T3813] sock_alloc_inode+0x34/0xa0 [ 36.825591][ T3813] alloc_inode+0x3d/0x170 [ 36.825602][ T3813] __sock_create+0x122/0x5b0 [ 36.825612][ T3813] ? fput+0x8f/0xc0 [ 36.825706][ T3813] __sys_socket+0xb0/0x180 [ 36.825717][ T3813] __x64_sys_socket+0x3f/0x50 [ 36.825726][ T3813] x64_sys_call+0x1147/0x2ff0 [ 36.825739][ T3813] do_syscall_64+0xd2/0x200 [ 36.825784][ T3813] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.825797][ T3813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 36.825811][ T3813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.825849][ T3813] RIP: 0033:0x7f07b10febe9 [ 36.825858][ T3813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.825866][ T3813] RSP: 002b:00007f07afb67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 36.825881][ T3813] RAX: ffffffffffffffda RBX: 00007f07b1335fa0 RCX: 00007f07b10febe9 [ 36.825888][ T3813] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 36.826037][ T3813] RBP: 00007f07afb67090 R08: 0000000000000000 R09: 0000000000000000 [ 36.826044][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.826050][ T3813] R13: 00007f07b1336038 R14: 00007f07b1335fa0 R15: 00007ffd7d090698 [ 36.826060][ T3813] [ 36.826064][ T3813] socket: no more sockets [ 37.078581][ T3790] can0 (unregistered): slcan off ttyS3. [ 37.290099][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.298652][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.311220][ T3824] loop4: detected capacity change from 0 to 1024 [ 37.524876][ T3826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.573242][ T3826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.632041][ T3826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.693181][ T3826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.791333][ T3565] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.799715][ T3565] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.808131][ T3565] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.817069][ T3565] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.036625][ T3831] can0: slcan on ttyS3. [ 38.068016][ T3830] loop0: detected capacity change from 0 to 128 [ 38.767588][ T3861] loop1: detected capacity change from 0 to 1024 [ 38.774292][ T3861] ======================================================= [ 38.774292][ T3861] WARNING: The mand mount option has been deprecated and [ 38.774292][ T3861] and is ignored by this kernel. Remove the mand [ 38.774292][ T3861] option from the mount to silence this warning. [ 38.774292][ T3861] ======================================================= [ 38.821685][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.839438][ T3861] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.117: Allocating blocks 385-513 which overlap fs metadata [ 38.855689][ T3860] EXT4-fs (loop1): pa ffff88810721a070: logic 16, phys. 129, len 24 [ 38.863737][ T3860] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 38.871456][ T3866] loop3: detected capacity change from 0 to 1024 [ 38.889124][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.900147][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.914456][ T3866] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.118: Allocating blocks 385-513 which overlap fs metadata [ 38.931081][ T3865] EXT4-fs (loop3): pa ffff88810721a070: logic 16, phys. 129, len 24 [ 38.939148][ T3865] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 38.943928][ T3870] loop1: detected capacity change from 0 to 512 [ 38.959902][ T3870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.975495][ T3870] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.987146][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.095967][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 39.095981][ T29] audit: type=1326 audit(1757327550.217:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.126013][ T3878] loop3: detected capacity change from 0 to 512 [ 39.127223][ T29] audit: type=1326 audit(1757327550.217:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.155667][ T29] audit: type=1326 audit(1757327550.217:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.167762][ T3878] EXT4-fs: Ignoring removed nobh option [ 39.179303][ T29] audit: type=1326 audit(1757327550.217:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.207946][ T29] audit: type=1326 audit(1757327550.217:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.231382][ T29] audit: type=1326 audit(1757327550.217:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.254864][ T29] audit: type=1326 audit(1757327550.217:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.278118][ T29] audit: type=1326 audit(1757327550.217:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.301419][ T29] audit: type=1326 audit(1757327550.217:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.303141][ T3878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.324793][ T29] audit: type=1326 audit(1757327550.217:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3102d4ebe9 code=0x7ffc0000 [ 39.362409][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.373884][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.122: corrupted inode contents [ 39.385927][ T3878] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.122: mark_inode_dirty error [ 39.399036][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.122: corrupted inode contents [ 39.402361][ T3882] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 39.412947][ T3878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.122: mark_inode_dirty error [ 39.419367][ T3847] can0 (unregistered): slcan off ttyS3. [ 39.430080][ T3878] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.122: Failed to acquire dquot type 0 [ 39.447704][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.122: corrupted inode contents [ 39.459825][ T3882] loop1: detected capacity change from 0 to 512 [ 39.460727][ T3878] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.122: mark_inode_dirty error [ 39.478823][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.122: corrupted inode contents [ 39.491789][ T3878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.122: mark_inode_dirty error [ 39.503366][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.122: corrupted inode contents [ 39.516404][ T3878] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 39.525660][ T3878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.122: corrupted inode contents [ 39.538771][ T3878] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.122: mark_inode_dirty error [ 39.551053][ T3878] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 39.560918][ T3878] EXT4-fs (loop3): 1 truncate cleaned up [ 39.561250][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.561303][ T3882] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.562399][ T3878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.562454][ T3878] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.563892][ T3878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.582627][ T3884] random: crng reseeded on system resumption [ 39.594920][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.684862][ T3878] syz.3.122 (3878) used greatest stack depth: 9680 bytes left [ 39.768241][ T3908] loop1: detected capacity change from 0 to 1024 [ 39.782803][ T3908] EXT4-fs: Ignoring removed orlov option [ 39.790161][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.791658][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.798765][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.827876][ T3910] loop0: detected capacity change from 0 to 1024 [ 40.024967][ T3915] __nla_validate_parse: 10 callbacks suppressed [ 40.024996][ T3915] netlink: 232 bytes leftover after parsing attributes in process `syz.0.135'. [ 40.231860][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.365507][ T3917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.427687][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 40.454496][ T3925] loop4: detected capacity change from 0 to 128 [ 40.469934][ T3921] loop1: detected capacity change from 0 to 128 [ 40.552228][ T3929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.647748][ T3566] bio_check_eod: 277 callbacks suppressed [ 40.647760][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.647760][ T3566] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 40.668545][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.668545][ T3566] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 40.682775][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.682775][ T3566] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 40.687448][ T3941] loop3: detected capacity change from 0 to 1024 [ 40.696457][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.696457][ T3566] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 40.716474][ T3537] kworker/u8:15: attempt to access beyond end of device [ 40.716474][ T3537] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 40.729959][ T3537] kworker/u8:15: attempt to access beyond end of device [ 40.729959][ T3537] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 40.731376][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.743517][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.743517][ T3566] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 40.761453][ T3537] kworker/u8:15: attempt to access beyond end of device [ 40.761453][ T3537] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 40.783436][ T3537] kworker/u8:15: attempt to access beyond end of device [ 40.783436][ T3537] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 40.786445][ T3566] kworker/u8:44: attempt to access beyond end of device [ 40.786445][ T3566] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 40.810861][ T3941] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.146: Allocating blocks 385-513 which overlap fs metadata [ 40.827844][ T3940] EXT4-fs (loop3): pa ffff88810721a150: logic 16, phys. 129, len 24 [ 40.835984][ T3940] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 40.852617][ T3947] random: crng reseeded on system resumption [ 40.880230][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.932066][ T3961] random: crng reseeded on system resumption [ 40.963902][ T3972] netlink: 76 bytes leftover after parsing attributes in process `syz.2.156'. [ 40.974720][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 41.069304][ T3983] netlink: 76 bytes leftover after parsing attributes in process `syz.2.161'. [ 41.088203][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 41.124033][ T3987] loop2: detected capacity change from 0 to 1024 [ 41.141388][ T3987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.155130][ T3987] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.163: Allocating blocks 385-513 which overlap fs metadata [ 41.170441][ T3986] EXT4-fs (loop2): pa ffff88810068d0e0: logic 16, phys. 129, len 24 [ 41.178539][ T3986] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 41.209853][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.236190][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 41.278711][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 41.291880][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 41.311500][ T4000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.168'. [ 41.380894][ T4006] can0: slcan on ttyS3. [ 41.594053][ T4011] loop2: detected capacity change from 0 to 512 [ 41.602941][ T4011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.615821][ T4011] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.688253][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845975][ T4021] loop1: detected capacity change from 0 to 1024 [ 41.899399][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.916760][ T4021] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.176: Allocating blocks 385-513 which overlap fs metadata [ 41.943668][ T4025] loop4: detected capacity change from 0 to 128 [ 41.968044][ T4020] EXT4-fs (loop1): pa ffff88810721a1c0: logic 16, phys. 129, len 24 [ 41.976115][ T4020] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 41.995911][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.208780][ T4003] can0 (unregistered): slcan off ttyS3. [ 42.265288][ T4047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.273772][ T4047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.286878][ T4047] loop3: detected capacity change from 0 to 1024 [ 42.981013][ T4069] loop0: detected capacity change from 0 to 512 [ 42.992363][ T4069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.005007][ T4069] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.048984][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.057456][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.075409][ T4077] loop2: detected capacity change from 0 to 1024 [ 43.075770][ T4078] can0: slcan on ttyS3. [ 43.087052][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.622294][ T4100] loop0: detected capacity change from 0 to 1024 [ 43.629002][ T4100] EXT4-fs: Ignoring removed orlov option [ 43.636518][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.716239][ T4100] ================================================================== [ 43.724338][ T4100] BUG: KCSAN: data-race in filemap_read / filemap_read [ 43.731187][ T4100] [ 43.733513][ T4100] read to 0xffff888117d7dbe8 of 8 bytes by task 4106 on cpu 1: [ 43.741119][ T4100] filemap_read+0x6f/0xa00 [ 43.745550][ T4100] generic_file_read_iter+0x79/0x330 [ 43.750837][ T4100] ext4_file_read_iter+0x1cc/0x290 [ 43.755961][ T4100] copy_splice_read+0x43f/0x660 [ 43.760808][ T4100] splice_direct_to_actor+0x290/0x680 [ 43.766170][ T4100] do_splice_direct+0xda/0x150 [ 43.770930][ T4100] do_sendfile+0x380/0x650 [ 43.775341][ T4100] __x64_sys_sendfile64+0x105/0x150 [ 43.780543][ T4100] x64_sys_call+0x2bb0/0x2ff0 [ 43.785218][ T4100] do_syscall_64+0xd2/0x200 [ 43.789729][ T4100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.795623][ T4100] [ 43.797935][ T4100] write to 0xffff888117d7dbe8 of 8 bytes by task 4100 on cpu 0: [ 43.805570][ T4100] filemap_read+0x974/0xa00 [ 43.810046][ T4100] generic_file_read_iter+0x79/0x330 [ 43.815309][ T4100] ext4_file_read_iter+0x1cc/0x290 [ 43.820402][ T4100] copy_splice_read+0x43f/0x660 [ 43.825239][ T4100] splice_direct_to_actor+0x290/0x680 [ 43.830596][ T4100] do_splice_direct+0xda/0x150 [ 43.835345][ T4100] do_sendfile+0x380/0x650 [ 43.839755][ T4100] __x64_sys_sendfile64+0x105/0x150 [ 43.844941][ T4100] x64_sys_call+0x2bb0/0x2ff0 [ 43.849599][ T4100] do_syscall_64+0xd2/0x200 [ 43.854092][ T4100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.859965][ T4100] [ 43.862266][ T4100] value changed: 0x000000000000013b -> 0x000000000000013c [ 43.869348][ T4100] [ 43.871650][ T4100] Reported by Kernel Concurrency Sanitizer on: [ 43.877776][ T4100] CPU: 0 UID: 0 PID: 4100 Comm: syz.0.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.887391][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.897425][ T4100] ================================================================== [ 43.930071][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.939251][ T4073] can0 (unregistered): slcan off ttyS3.