last executing test programs: 22.565154186s ago: executing program 1 (id=2): mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x68040200) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x22c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x278, 0x13, 0x200, 0x70bd2b, 0x9, {0x29, 0x6, 0x9, 0xff, {0x4e20, 0x4e24, [0x400, 0x7, 0x200, 0x8], [0x8, 0xa290, 0x7fff, 0x1], r5, [0x5, 0x7f]}, 0x5, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "2dc59d24613808fbc6f632562ce71d2d1595a31e0723f7834b39d54e2d9ec0a582335247eaec3c1f92b2334e0ad164a80b10e6b17127b9b8364302a148e7d0b047f0914936bbd3a9b9c32ab8ff8441835798aea4690cd22fc99b297e0212ecc78995eba472fe03e0a73b2fb070d52f76930e902333b0e60d5e721af3c6aa785c9bc9a6eb89f7bb916ee0a94991b0e8ce2cb9a2396a0329faeac4cc7837ae9645f4d44f6a3356c58559e7e89d48c962b202b67cf76496306290c3677e8050"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "03ac9a2ba5bfeecb36b77a31595366a1dd8eab1b1ef3a06be9205396e3a348dd8a8d8503254d27370404b348d5bb605f3ecfdecc48480a37ae745c342506c0e0403b2c1d3ae3fe05c759f14a5da66749b65817c9aedbf95156cc7f9013860a9a1f4009d64b60678fb910f683cb140855de29c0ea0103bb76a57d95"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "6cfc903c10b58be78f784a672a5ddb1c89d41ab8c4d5c4242512f7282bc864fdd48d10a58684bf978af13fb74379ef77609a011ff0408de28beb7f77d4d4bcaf22e6cb46553a539818425f3d4cc1b3124d60d9492adf2a39a4021613f0925f3c800489d8e2522f9e7df4620ed439b87544ce0f7e7c828373232ecb311781d0389c2f98b8a826e626bfc119bf26482d5a9ed40ab7dcf88c88d5e569c0c7987d90fc7393ef64b2306cb037fe6dbf85e6a9ed9d650d77a8e21deee9a1144ebed0b129c0ab173990f31fc56cc64eccae7f02dfea5305e4b49785e7283897b09a9343b5"}]}, 0x278}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r6, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = gettid() tkill(r9, 0x11) socket$nl_route(0x10, 0x3, 0x0) 22.149547223s ago: executing program 1 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f00000001c0)='2', 0x1, 0xfecd) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0xffc}, {0xffffffff, 0x80000000, 0x1, 0x0, 0x0, 0x200}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 21.25705682s ago: executing program 1 (id=11): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000004c6060b4fc9c25c0dbb0aec24eb4939aebf768e4f4259b63", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000009c0)='dns_resolver\x00', &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r9}, 0x18) r10 = getpgid(0x0) sched_getparam(r10, &(0x7f0000000200)) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x2, 0x7, 0x81, 0x0, 0x40, 0x840, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0x7fffffff}, 0x100040, 0x10000, 0x3, 0x7, 0x2, 0x8, 0x1f, 0x0, 0x80000001}, r4, 0x7, r0, 0x0) 21.02977694s ago: executing program 1 (id=12): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000340)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "04"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}]}, 0x60}, 0x1, 0x7}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x4004844) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0x4000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r8, 0x6000000) copy_file_range(r8, 0x0, r8, &(0x7f00000004c0)=0x102, 0x9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 19.311767521s ago: executing program 1 (id=21): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x24, 0x18, 0x111, 0x70bd29, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7, 0x0, 0x100}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) 19.303831471s ago: executing program 32 (id=21): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x24, 0x18, 0x111, 0x70bd29, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8EJwlAQBND5MYkBPaQDtRR70H4C9uLBArxaik1YgPhREAtQD+9ddmGGhQ0/dk1K0iRllsdaPvI2mSe5ZVFb3fCWTetNDtsmGZJyWWZKcly90u45+5RxTJtzpvTZlVqvl/enb3wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/uHgAA//+AkQhu") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7, 0x0, 0x100}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) 4.809499231s ago: executing program 0 (id=128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000240)=[{0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback, 0xa1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "0020000e", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f00000013c0)=""/4100, 0x1004) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r8 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@loopback, @in=@private=0xa010101, 0x4e22, 0x0, 0xce22, 0x2, 0x2}, {0x80, 0x200000004, 0x5, 0x20000a0da, 0x6, 0x4, 0x200000003, 0x9}, {0x8}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.332043141s ago: executing program 3 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180f0000da0000110000000070d01f49cc8573a5d41b1925e6e75b1603dd49ba786189a323f605000000000000000000000000559c8a2152d646dfd495c8a502dd0d3d89419d90e766cb1afa3960d2e99870a6776c11511318cd8d2c35c1bf13cb4df55b", @ANYRES32=r7, @ANYBLOB="00000000000000000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRESDEC=r8, @ANYRES32=r2, @ANYRES8=r6, @ANYRES32=r4], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='sctp_probe_path\x00', r10, 0x0, 0x1}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x2000000, [{0x8, 0x401}, {0x1}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0xf5ffffffffffffff) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYRES64=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90, 0x0, 0x1}}, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 3.721712576s ago: executing program 2 (id=137): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x800000000006}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0xc20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000002030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.497819455s ago: executing program 0 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x80001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffff68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000680)={0x0, 0x17, "6101663f9dd66bfa29ea805e3fca3e8a22b4b965db23d2"}, &(0x7f0000000700)=0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x19, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32=r9, @ANYRES16=0x0, @ANYBLOB="0000000000000000b70200000000000085000000860000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x90, &(0x7f0000000b40)=""/144, 0x40f00, 0xa, '\x00', 0x0, @cgroup_sockopt=0x15, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x0, 0xf, 0xb8, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000f00), 0x0, 0x10, 0x4}, 0x94) getpriority(0x1, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.434271708s ago: executing program 3 (id=140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a011000000004"], 0x57) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[K\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYRES8=r3, @ANYRES16=r5], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x57, 0x28, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1d059d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x183, 0xa}, 0x6025, 0xffffffff, 0xb, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6}, r9, 0x3, 0xffffffffffffffff, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.431093248s ago: executing program 5 (id=150): syz_clone3(&(0x7f0000000400)={0x42000080, &(0x7f0000000000), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x10}, &(0x7f00000001c0)=""/33, 0x21, &(0x7f00000002c0)=""/203, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) prlimit64(r0, 0x1b2a93a5171d767, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008100000b704000000000400850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x52, 0x8}, {0x8, 0x1, 0x11, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0xfffffffffffffe33, 0x6, r4}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x8}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x800, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.282102234s ago: executing program 3 (id=141): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") openat(0xffffffffffffffff, 0x0, 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r1, 0x0, 0x0, 0x2000, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socket(0x25, 0x5, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0xfffffffd, 0x400}, &(0x7f0000000100), &(0x7f00000003c0)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x11, 0xffffffffffffffff, 0x0) io_uring_setup(0x6bfb, &(0x7f0000000580)={0x0, 0x2802, 0xfc4d211861644d6a, 0xfffffdff, 0x183}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x26, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) 3.005350246s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="084318934a8b10b3a4420818000000000000000000000000000000c967bd30", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, 0xfffffffffffffffe, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x5, 0x0, 'queue0\x00', 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x4cc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PBURST={0x8, 0x7, 0x55f}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="912fd0d0f8b4f45e2a013e60a3db1ac4576a2e7d215e45102428e1ca2fd7a9dcc63735750bc8a82af3d16b4ca36178fa2aa896e260127b", @ANYRESDEC], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000040)={0x28, r11, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40089}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x7eda}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 2.942488159s ago: executing program 2 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x4000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 2.829966483s ago: executing program 2 (id=144): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r1, &(0x7f0000004280)={0x2, "fb22bbcd82891a248ea851af2346030ac2de4d949ed662f7fa3e587420af8b24c80ee440f2449881c7dd6609c81ce9931770e117123f5578c1b2863d36718f14f7a9955714473ce8f5b55a90f728e8fe11d6fb3b88bd1cd55d2a34b4d6a4a6495bbf3a91456b20ce357ec4d3c1704212bb21c782513f0d77e4ca03e8db7cd0480f5b8cfe699b560a3f48c3f599660e191664270effe3b7b5a7e716923a2e764f6897bd26abcb71d358715f1662ad91a8a7659352cecf119b7943342acf3f51184847b401ac8737892a09a89828ca9fb09f7a27a6b896d221d719030b714d51dfd62137b9ccb5cef41eb7c25ba79e964ab1e2b62fa558034fc98258391ceb09ec34a8fbc72a41e699143295566c41c467b06e42014730f27a7de917b1dc75a177754bde4da9a535f3b8e17cc7d7943d5de99ec3d3ed3127f49745b20a3f99ae933127cad289774104724cf8fca3e39ddae85d02263480cb43a9b8322ab640f2246b38db2334404e4beb0469a2a00b42cf9c1962855604b52097b901cf31cc16977f2b65cdbe4146eff6dc8045258a9a1ba5ac22800c7effac70c2cc88d653e7e0ab491eeae6f415a45ab328976eb8cc065e01cff73f36b8b5610576b91ac89d033d24d775afc4bf5542c6d22b721a8f3a8b716cf979e5ee55ea51cefa3773c7d02563103761525e30cf68833d67edd858badebc4a88232a090ab2161fdb8b98f30c89746629c1f5e8646d811362302731f0270783d664d9bed4878e9320e74d9ab9d50addfa9b137d806cfa50f03abc72b4d6f1ac770b5baa3e5a1c5a080d21c1b1cd4012c33245a8df8abf042d7b1eeafe4916e4c771e98147bf6cc56af09f99fca42a85b04fa45aebfb685671ba4bb402b8cc79fa9637498a43798a512b300ade815955caef857dfdfec3caec1a5f2d086043770d13ba08a17c1ab6b6b59e91c53a0437c84967f462ca53c3b1be51f9b6a685a6a803ca73ce8f67ff3c150227c5989315636005ed3325d837295ddb582405a728b5bc3ba31f46aeada843629f95186fd694d0f02e9eae476861468ddd354c710f1a19080617e5fbbe6bdd3d41f077046716f9f7837a69c978cc6c3340599fdc43363b5c6e2b98975053b4486f78a428b30b0eee04c77d20b75ec097ec15e17bc373ccbdea9784776b9d411a9394ec90be6246ff7a6200b6c3f89e57d3a368fce66bc7820f2a38c4dbf037675293fa114125ae0bfeb4dc15d8072f574f073fa572b5a2ca224303ac44cb1231c0ffe106761e308af02a070b501e8f891aa9a2554787f1e31dc2af0902639aad9154d233ccee4e172c549979be99548f87eec76138b7948c10ad95f50a04a4e2bd3192cab9e6f64eb5783832070a7ee59f41281eea1918819da735f509033ff45a8489d3656afcab3180a08bd437435f074bb8987c54947c60f0"}, 0x401, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x7, 0x6d, 0x8, 0x4, 0x3, 0x3, 0x1, 0x7}) r2 = epoll_create1(0x80000) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = dup(r3) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0x800802, &(0x7f0000000500)=ANY=[], 0x84, 0x2c4, &(0x7f0000000380)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8842, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'syzkaller\x00'}}]}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = syz_io_uring_setup(0x3306, &(0x7f0000000000)={0x0, 0x5357, 0x2, 0x2, 0x4d}, &(0x7f0000000080), &(0x7f00000000c0)) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) symlinkat(&(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000040)='./file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x5c, r10, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) 2.828980113s ago: executing program 0 (id=155): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.280887906s ago: executing program 5 (id=146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x6813d5f3ba64131a, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) clock_adjtime(0x1, &(0x7f0000000040)={0xd53, 0x3, 0x8, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xdf, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000080, 0x0, 0x100}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001040)="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", 0xd3a}], 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 2.280142136s ago: executing program 3 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) creat(0x0, 0xd931d3864d39dcdb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x1000000, 0x0, 0x1, 0x1}, 0x21) r5 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 2.122001733s ago: executing program 2 (id=148): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.566423656s ago: executing program 0 (id=161): socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.315936326s ago: executing program 5 (id=151): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64=0x0, @ANYRES8=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) socketpair(0x23, 0x2, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r9, 0x5441, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) faccessat2(r11, &(0x7f0000000080)='./file0\x00', 0x2, 0x1800) socket$kcm(0x29, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffff7a, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x10000000, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.315319086s ago: executing program 3 (id=152): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000007250bcd80000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02}) r5 = epoll_create1(0x0) r6 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000180)={0x80002014}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) keyctl$get_persistent(0x16, 0x0, r2) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) 1.158690522s ago: executing program 2 (id=153): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback={0xffffffffffff0000}, 0xa098}, {0xa, 0x4e21, 0xa, @empty, 0x4}, r5, 0x8001}}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x40408c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000240)={0xdc7, 0x4, 0x9, 0x5, 0x17, "ee0d7c2bda27e8a956df44765e07d311c8a410"}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) 1.146345963s ago: executing program 5 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x800, 0x70bd26, 0x25dfdc00, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x220000, 0x3, 0xffffeffe, 0x4, 0xebe, 0xcd}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r5, 0x7) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) io_setup(0x202, &(0x7f0000000200)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) r6 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) shmctl$IPC_RMID(0x0, 0x13) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) 625.687394ms ago: executing program 4 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 612.389005ms ago: executing program 3 (id=157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) stat(&(0x7f0000000000)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, &(0x7f0000000180)=[{0x98, 0xed, 0x0, 0x7f, @tick=0x8, {0x0, 0x7}, {0x9, 0x6}, @connect={{0x4, 0x3}, {0x5, 0xa6}}}], 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000740)={[{@abort}, {@jqfmt_vfsv0}, {@acl}, {@data_writeback}], [{@fowner_lt={'fowner<', r0}}, {@fsname={'fsname', 0x3d, ')$:'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kmem_cache_free\x00'}}, {@subj_role={'subj_role', 0x3d, '#:[][(\'\x10]]&.,:,}@&'}}, {@subj_user={'subj_user', 0x3d, 'abort'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'abort'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x36, 0x33, 0x38, 0x36, 0x38, 0x32, 0x34], 0x2d, [0x39, 0x39, 0x37, 0x31], 0x2d, [0x30, 0x34, 0x38, 0x35], 0x2d, [0x63, 0x62, 0x30, 0x33], 0x2d, [0x32, 0x37, 0x32, 0x30, 0x62, 0x34048abc90316b9b, 0x35, 0x31]}}}]}, 0x0, 0x5f6, &(0x7f0000001440)="$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") gettid() r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700ff02000000000000000000000000000114000600fe80000000000000000000000000003508000100", @ANYRES32=r4, @ANYBLOB="08000400b6"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r9, 0x4e, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x521600, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="280000004e0000000000000000000000020000000001000000a60200000000000004000000ff0f000000000000"], 0x109500) 421.641422ms ago: executing program 0 (id=158): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0xfdff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0xa, 0x5, 0x0) r8 = syz_io_uring_setup(0x1852, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r11 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000000600)}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x1c8, 0x478, 0x1c8, 0x0, 0x368, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0xff000000], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x67}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0xa}, {0x0, 0x5, 0x5}}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b, 0x0, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0xff000000], 'veth1_virt_wifi\x00', 'rose0\x00', {}, {}, 0x5c, 0xb, 0x1, 0x19}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r13}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @remote, @multicast2}}}], 0x50}}], 0x2, 0x40040) 420.580433ms ago: executing program 4 (id=169): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000007250bcd80000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02}) r5 = epoll_create1(0x0) r6 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000180)={0x80002014}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) keyctl$get_persistent(0x16, 0x0, r2) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) 295.051878ms ago: executing program 5 (id=159): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x9}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x3, r3}]) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x1a1}) close(0x3) personality(0x5000002) ppoll(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r11], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0100008000000000018000000000000001000000050000000400000000000000dc1cffffffffffffffff0000000000000000000000000000000000000000000000000000000000000c0200000000000000000000000000000300000000000000030000000000000007000000000000000000000000000000000000000000000002240000000000000000000000000000090000000000000009000000000000002900000000000000000000000000000000000000000000000e00000000000000000000000000000005000000000000de137e350000000000060000000000000000000000000000000000000000000000881000"/256]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="180000007f00007c3db2b57fadef30477a1c035a6f7267376e50de3d9479920730da0feddc04469ab68f5e0ef9ae7360a5fc42e16bf2a2a3b0537b52a36e0c9ac6db3897e7367c0f0214443518bb9b91c880697733f06c735c428e37de1fb4086102ba527ffce009570e7b5c4404b9bab304cd81c381d6c02971a60a28fcff79353d0815122244b56511e40bd368f63ab3d2249aabe6c84ac0ee97fc2093f703e046216cb118fb2ce503abe3a984de"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80000) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r13, 0x29, 0xc8, &(0x7f00000001c0), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'bridge0\x00', @multicast}) 294.608458ms ago: executing program 4 (id=160): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000740)=""/176, &(0x7f0000000240)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="ab0200", @ANYRES32=r6], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sync() sync() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 114.920485ms ago: executing program 5 (id=162): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000006000000000002003025244321a211e0edbf1f297f03cd3e200e59e1c311c8f570aec89a85528d669b25d7e67d4c5c45", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r5}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000007b40)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 114.266045ms ago: executing program 4 (id=163): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/xfrm_stat\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/2, 0x2}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x5, 0xfff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000001480)=0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x7}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r12], 0x20) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r13, 0x400448e6, 0x0) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 112.425065ms ago: executing program 0 (id=173): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) wait4(0x0, 0x0, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x422002) add_key$keyring(&(0x7f0000000540), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='rxrpc_receive\x00', 0xffffffffffffffff, 0x0, 0xb9}, 0x57) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x508e, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@user_xattr}, {@noinit_itable}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100040000000800000004000000"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 28.087079ms ago: executing program 4 (id=164): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') unshare(0x6020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r2) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @mcast2, 0x4}, 0x1c) eventfd(0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) mremap(&(0x7f0000854000/0x3000)=nil, 0x3000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000c1291c6a7891a10e6d9a93c6d770f67e1652c6be1a05b582f8be4b29ebdc337659f70d0882", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x20000000000000, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x10) 0s ago: executing program 4 (id=165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0700000404000000080000000100000008ff0c8243d04e2e6d7efb25410ef1daff3cc3994f542644abac5a9c57410da2174643e4f9c6f83f7446a300"/74, @ANYRES32, @ANYBLOB="00001b0000000000000000000000020000000000", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x4) vmsplice(r5, &(0x7f0000000880)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) write$selinux_attr(r6, &(0x7f00000002c0)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000100000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xacd42, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.321669][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 24.321687][ T29] audit: type=1400 audit(1763762788.001:57): avc: denied { transition } for pid=3294 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.325979][ T29] audit: type=1400 audit(1763762788.001:58): avc: denied { noatsecure } for pid=3294 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.329130][ T29] audit: type=1400 audit(1763762788.001:59): avc: denied { write } for pid=3294 comm="sh" path="pipe:[1642]" dev="pipefs" ino=1642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.332520][ T29] audit: type=1400 audit(1763762788.001:60): avc: denied { rlimitinh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.335444][ T29] audit: type=1400 audit(1763762788.001:61): avc: denied { siginh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 31.630854][ T29] audit: type=1400 audit(1763762795.311:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.654216][ T29] audit: type=1400 audit(1763762795.331:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.654917][ T3305] cgroup: Unknown subsys name 'net' [ 31.681969][ T29] audit: type=1400 audit(1763762795.361:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.838372][ T3305] cgroup: Unknown subsys name 'cpuset' [ 31.844578][ T3305] cgroup: Unknown subsys name 'rlimit' [ 31.964391][ T29] audit: type=1400 audit(1763762795.641:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.987781][ T29] audit: type=1400 audit(1763762795.641:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.008458][ T29] audit: type=1400 audit(1763762795.641:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.018393][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.028867][ T29] audit: type=1400 audit(1763762795.641:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.057985][ T29] audit: type=1400 audit(1763762795.641:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.082936][ T29] audit: type=1400 audit(1763762795.641:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.106300][ T29] audit: type=1400 audit(1763762795.711:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.142075][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.920287][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 33.994311][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 34.021976][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 34.041036][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.048235][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.055469][ T3316] bridge_slave_0: entered allmulticast mode [ 34.061949][ T3316] bridge_slave_0: entered promiscuous mode [ 34.082997][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.090111][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.097221][ T3316] bridge_slave_1: entered allmulticast mode [ 34.103613][ T3316] bridge_slave_1: entered promiscuous mode [ 34.119147][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.154194][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.182135][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.196004][ T3330] chnl_net:caif_netlink_parms(): no params data found [ 34.204873][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.212016][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.219365][ T3314] bridge_slave_0: entered allmulticast mode [ 34.225672][ T3314] bridge_slave_0: entered promiscuous mode [ 34.245612][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.252788][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.259985][ T3314] bridge_slave_1: entered allmulticast mode [ 34.266290][ T3314] bridge_slave_1: entered promiscuous mode [ 34.292563][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.299819][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.306917][ T3323] bridge_slave_0: entered allmulticast mode [ 34.313336][ T3323] bridge_slave_0: entered promiscuous mode [ 34.320555][ T3316] team0: Port device team_slave_0 added [ 34.337131][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.344331][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.351490][ T3323] bridge_slave_1: entered allmulticast mode [ 34.357848][ T3323] bridge_slave_1: entered promiscuous mode [ 34.364432][ T3316] team0: Port device team_slave_1 added [ 34.378019][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.403745][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.424280][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.431450][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.438628][ T3315] bridge_slave_0: entered allmulticast mode [ 34.444851][ T3315] bridge_slave_0: entered promiscuous mode [ 34.461027][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.470618][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.477557][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.503662][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.514975][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.522132][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.529315][ T3315] bridge_slave_1: entered allmulticast mode [ 34.535933][ T3315] bridge_slave_1: entered promiscuous mode [ 34.551499][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.560627][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.567769][ T3330] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.574965][ T3330] bridge_slave_0: entered allmulticast mode [ 34.581455][ T3330] bridge_slave_0: entered promiscuous mode [ 34.588077][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.595074][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.621033][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.639197][ T3314] team0: Port device team_slave_0 added [ 34.658598][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.665686][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.673007][ T3330] bridge_slave_1: entered allmulticast mode [ 34.679391][ T3330] bridge_slave_1: entered promiscuous mode [ 34.687006][ T3314] team0: Port device team_slave_1 added [ 34.693626][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.703628][ T3323] team0: Port device team_slave_0 added [ 34.723536][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.733284][ T3323] team0: Port device team_slave_1 added [ 34.744924][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.773423][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.782833][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.789805][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.815820][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.837800][ T3316] hsr_slave_0: entered promiscuous mode [ 34.843713][ T3316] hsr_slave_1: entered promiscuous mode [ 34.854687][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.861836][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.888088][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.899536][ T3315] team0: Port device team_slave_0 added [ 34.907705][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.914664][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.940832][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.952094][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.959091][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.985030][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.002089][ T3315] team0: Port device team_slave_1 added [ 35.015832][ T3330] team0: Port device team_slave_0 added [ 35.022812][ T3330] team0: Port device team_slave_1 added [ 35.078810][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.085793][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.111897][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.125180][ T3323] hsr_slave_0: entered promiscuous mode [ 35.131759][ T3323] hsr_slave_1: entered promiscuous mode [ 35.137875][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 35.143595][ T3323] Cannot create hsr debugfs directory [ 35.151256][ T3314] hsr_slave_0: entered promiscuous mode [ 35.157257][ T3314] hsr_slave_1: entered promiscuous mode [ 35.163112][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 35.168869][ T3314] Cannot create hsr debugfs directory [ 35.174776][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.181762][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.207781][ T3330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.219292][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.226250][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.252220][ T3330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.265401][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.272388][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.298512][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.372771][ T3315] hsr_slave_0: entered promiscuous mode [ 35.379151][ T3315] hsr_slave_1: entered promiscuous mode [ 35.385105][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 35.390868][ T3315] Cannot create hsr debugfs directory [ 35.417860][ T3330] hsr_slave_0: entered promiscuous mode [ 35.423956][ T3330] hsr_slave_1: entered promiscuous mode [ 35.429839][ T3330] debugfs: 'hsr0' already exists in 'hsr' [ 35.435575][ T3330] Cannot create hsr debugfs directory [ 35.570730][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.581873][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.590527][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.601396][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.620528][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.638198][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.646857][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.659523][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.681784][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.695888][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.705620][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.714455][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.747736][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.762708][ T3330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.782335][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.789689][ T3330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.800672][ T3330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.818966][ T1705] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.826103][ T1705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.834794][ T1705] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.841861][ T1705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.849922][ T3330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.882755][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.892404][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.901346][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.910660][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.926986][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.958994][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.988624][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.003211][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.016260][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.023481][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.032304][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.039425][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.060723][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.067907][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.084844][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.092073][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.103030][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.120160][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.131179][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.154037][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.170241][ T3330] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.179281][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.209817][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.216906][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.226649][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.233764][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.245449][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.252645][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.270668][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.277814][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.311652][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.410024][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.433045][ T3323] veth0_vlan: entered promiscuous mode [ 36.460514][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.473642][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.494912][ T3323] veth1_vlan: entered promiscuous mode [ 36.526142][ T3316] veth0_vlan: entered promiscuous mode [ 36.550941][ T3323] veth0_macvtap: entered promiscuous mode [ 36.561682][ T3323] veth1_macvtap: entered promiscuous mode [ 36.571942][ T3316] veth1_vlan: entered promiscuous mode [ 36.609534][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.632834][ T3314] veth0_vlan: entered promiscuous mode [ 36.639747][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.657365][ T3315] veth0_vlan: entered promiscuous mode [ 36.669383][ T3316] veth0_macvtap: entered promiscuous mode [ 36.677136][ T3316] veth1_macvtap: entered promiscuous mode [ 36.683555][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.692901][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.705844][ T3330] veth0_vlan: entered promiscuous mode [ 36.712566][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.724098][ T3315] veth1_vlan: entered promiscuous mode [ 36.733879][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.741898][ T3314] veth1_vlan: entered promiscuous mode [ 36.747909][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.762035][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.776730][ T3314] veth0_macvtap: entered promiscuous mode [ 36.787214][ T3314] veth1_macvtap: entered promiscuous mode [ 36.796321][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 36.796336][ T29] audit: type=1400 audit(1763762800.471:81): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.oku0wJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.809066][ T3315] veth0_macvtap: entered promiscuous mode [ 36.832925][ T29] audit: type=1400 audit(1763762800.471:82): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.834727][ T3330] veth1_vlan: entered promiscuous mode [ 36.855029][ T29] audit: type=1400 audit(1763762800.471:83): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.oku0wJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.885698][ T29] audit: type=1400 audit(1763762800.471:84): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.907795][ T29] audit: type=1400 audit(1763762800.481:85): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.oku0wJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.934743][ T29] audit: type=1400 audit(1763762800.481:86): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.oku0wJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.962190][ T29] audit: type=1400 audit(1763762800.481:87): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.983843][ T29] audit: type=1400 audit(1763762800.511:88): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.006616][ T29] audit: type=1400 audit(1763762800.511:89): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=3709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.040216][ T3315] veth1_macvtap: entered promiscuous mode [ 37.048879][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.064153][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.076103][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.086148][ T29] audit: type=1400 audit(1763762800.761:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.106301][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.119942][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.128714][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.146933][ T3330] veth0_macvtap: entered promiscuous mode [ 37.157039][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.165980][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.182742][ T3488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=3488 comm=syz.1.2 [ 37.196457][ T3330] veth1_macvtap: entered promiscuous mode [ 37.209182][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.232534][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.242670][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.252822][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.259388][ T3488] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 37.276693][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.284928][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.322097][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.346420][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.362491][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.393164][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.432887][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.452459][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.487494][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.512517][ T3501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.523742][ T3499] loop0: detected capacity change from 0 to 1024 [ 37.530550][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.540429][ T3499] EXT4-fs: Ignoring removed orlov option [ 37.546999][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.574453][ T3508] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.584744][ T3508] 0X: renamed from caif0 [ 37.643222][ T3513] loop1: detected capacity change from 0 to 128 [ 37.713001][ T3508] 0X: entered allmulticast mode [ 37.718484][ T3508] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 37.752036][ T3499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.789753][ T3516] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.798728][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.901769][ T3520] Zero length message leads to an empty skb [ 37.981133][ T3523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.999741][ T3513] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.013375][ T3513] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.096227][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.175751][ T3499] syz.0.1 (3499) used greatest stack depth: 10160 bytes left [ 38.185652][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.210743][ T3530] loop0: detected capacity change from 0 to 764 [ 38.227284][ T3530] rock: directory entry would overflow storage [ 38.233533][ T3530] rock: sig=0x4654, size=5, remaining=4 [ 38.364565][ T3530] xt_TCPMSS: Only works on TCP SYN packets [ 38.399071][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.438660][ T3539] loop1: detected capacity change from 0 to 512 [ 38.448226][ T3539] ======================================================= [ 38.448226][ T3539] WARNING: The mand mount option has been deprecated and [ 38.448226][ T3539] and is ignored by this kernel. Remove the mand [ 38.448226][ T3539] option from the mount to silence this warning. [ 38.448226][ T3539] ======================================================= [ 38.499209][ T3539] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.517350][ T3539] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.11: bad orphan inode 13 [ 38.528437][ T3539] ext4_test_bit(bit=12, block=18) = 1 [ 38.533878][ T3539] is_bad_inode(inode)=0 [ 38.538136][ T3539] NEXT_ORPHAN(inode)=2130706432 [ 38.543128][ T3539] max_ino=32 [ 38.546473][ T3539] i_nlink=1 [ 38.550706][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.553297][ T3537] infiniband sy: set active [ 38.568176][ T3537] infiniband sy: added bond_slave_0 [ 38.585368][ T3542] xt_l2tp: v2 doesn't support IP mode [ 38.607891][ T3537] RDS/IB: sy: added [ 38.611973][ T3537] smc: adding ib device sy with port count 1 [ 38.618296][ T3537] smc: ib device sy port 1 has no pnetid [ 38.620727][ T3316] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 38.639347][ T3316] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 38.657355][ T3549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 39.011624][ T3558] loop0: detected capacity change from 0 to 512 [ 39.030409][ T3558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.043144][ T3558] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.058608][ T3558] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.13: corrupted inode contents [ 39.071650][ T3558] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.13: mark_inode_dirty error [ 39.083135][ T3558] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.13: corrupted inode contents [ 39.095478][ T3558] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.13: mark_inode_dirty error [ 39.148016][ T3501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.262774][ T23] IPVS: starting estimator thread 0... [ 39.273192][ T3567] 9pnet_virtio: no channels available for device [ 39.314062][ T3570] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.328416][ T3571] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15'. [ 39.357740][ T3568] IPVS: using max 2496 ests per chain, 124800 per kthread [ 39.571754][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.604886][ T3576] loop0: detected capacity change from 0 to 1024 [ 39.617069][ T3576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.655886][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.232547][ T3583] program syz.3.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.308703][ T3586] loop4: detected capacity change from 0 to 1024 [ 40.314878][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.321660][ T3586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.362300][ T3586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.422471][ T3501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.471808][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.484255][ T3575] syz.0.18 (3575) used greatest stack depth: 10152 bytes left [ 40.484817][ T3579] syz.0.18 (3579) used greatest stack depth: 9800 bytes left [ 40.533051][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.600482][ T3501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.630612][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.700177][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.710967][ T3576] syz.0.18 (3576) used greatest stack depth: 7240 bytes left [ 40.721111][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.722932][ T3450] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.793815][ T3604] loop2: detected capacity change from 0 to 1024 [ 40.794470][ T3604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.812783][ T3450] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.812825][ T3450] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.818403][ T3604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.830331][ T3602] loop0: detected capacity change from 0 to 512 [ 40.851133][ T3602] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.851369][ T3602] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.24: bad orphan inode 13 [ 40.851550][ T3602] ext4_test_bit(bit=12, block=18) = 1 [ 40.851562][ T3602] is_bad_inode(inode)=0 [ 40.851568][ T3602] NEXT_ORPHAN(inode)=2130706432 [ 40.851575][ T3602] max_ino=32 [ 40.851582][ T3602] i_nlink=1 [ 40.851993][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.895812][ T37] bridge_slave_1: left allmulticast mode [ 40.895834][ T37] bridge_slave_1: left promiscuous mode [ 40.896042][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.900535][ T37] bridge_slave_0: left allmulticast mode [ 40.900556][ T37] bridge_slave_0: left promiscuous mode [ 40.900686][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.994373][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.063339][ T3617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'. [ 41.201030][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.202287][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.203091][ T37] bond0 (unregistering): Released all slaves [ 41.327945][ T3619] loop0: detected capacity change from 0 to 512 [ 41.339657][ T3591] chnl_net:caif_netlink_parms(): no params data found [ 41.350822][ T3619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.350921][ T3619] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.414622][ T37] hsr_slave_0: left promiscuous mode [ 41.415148][ T37] hsr_slave_1: left promiscuous mode [ 41.415408][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.415423][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.415895][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.415906][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.419487][ T37] veth1_macvtap: left promiscuous mode [ 41.419658][ T37] veth0_macvtap: left promiscuous mode [ 41.419729][ T37] veth1_vlan: left promiscuous mode [ 41.419861][ T37] veth0_vlan: left promiscuous mode [ 41.522361][ T37] team0 (unregistering): Port device team_slave_1 removed [ 41.535207][ T37] team0 (unregistering): Port device team_slave_0 removed [ 41.606916][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.606972][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.607125][ T3591] bridge_slave_0: entered allmulticast mode [ 41.608060][ T3591] bridge_slave_0: entered promiscuous mode [ 41.609290][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.609324][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.609396][ T3591] bridge_slave_1: entered allmulticast mode [ 41.609933][ T3591] bridge_slave_1: entered promiscuous mode [ 41.655791][ T3586] syz.4.20 (3586) used greatest stack depth: 6184 bytes left [ 41.753291][ T3591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.769231][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.810923][ T3591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.862547][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.889942][ T3646] loop2: detected capacity change from 0 to 1024 [ 41.898757][ T3646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.908620][ T3647] loop4: detected capacity change from 0 to 128 [ 41.917255][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 41.917272][ T29] audit: type=1400 audit(1763762805.591:825): avc: denied { mount } for pid=3643 comm="syz.4.28" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.924930][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.012614][ T3591] team0: Port device team_slave_0 added [ 42.028862][ T3591] team0: Port device team_slave_1 added [ 42.069514][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.076580][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.102907][ T3591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.128165][ T29] audit: type=1400 audit(1763762805.801:826): avc: denied { mounton } for pid=3643 comm="syz.4.28" path="/6/bus" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 42.150718][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.158015][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.184369][ T3591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.275881][ T3591] hsr_slave_0: entered promiscuous mode [ 42.288369][ T3591] hsr_slave_1: entered promiscuous mode [ 42.404731][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.501741][ T3591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.510225][ T29] audit: type=1326 audit(1763762806.181:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.533613][ T29] audit: type=1326 audit(1763762806.181:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.557138][ T29] audit: type=1326 audit(1763762806.181:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.580648][ T29] audit: type=1326 audit(1763762806.191:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.604089][ T29] audit: type=1326 audit(1763762806.191:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.627296][ T29] audit: type=1326 audit(1763762806.191:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.650764][ T29] audit: type=1326 audit(1763762806.191:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.674125][ T29] audit: type=1326 audit(1763762806.191:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3666 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ae58ef749 code=0x7ffc0000 [ 42.704365][ T3591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.720664][ T3591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.726569][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.752181][ T3591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.878500][ T3591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.906943][ T3591] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.919156][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 42.926605][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.934108][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.941606][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.949248][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.950537][ T3591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.956824][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.975438][ T3591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.002790][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.010346][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.017838][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 43.025336][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.033968][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.041148][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.050296][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.057448][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.078850][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 43.118847][ T3591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.135766][ T3704] fido_id[3704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.287360][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 43.337461][ T3732] loop0: detected capacity change from 0 to 1024 [ 43.345641][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.381960][ T3732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.382126][ T3591] veth0_vlan: entered promiscuous mode [ 43.429232][ T3591] veth1_vlan: entered promiscuous mode [ 43.435970][ T3732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.460048][ T3591] veth0_macvtap: entered promiscuous mode [ 43.467367][ T3591] veth1_macvtap: entered promiscuous mode [ 43.483605][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.494539][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.504497][ T298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.542636][ T298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.553928][ T298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.562982][ T298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.568711][ T3745] loop4: detected capacity change from 0 to 1024 [ 43.614153][ T3747] loop3: detected capacity change from 0 to 1024 [ 43.627280][ T3747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.647161][ T3745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.680978][ T3747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.721726][ T3745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.818469][ T298] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.063695][ T3743] loop9: detected capacity change from 0 to 7 [ 44.070656][ T3743] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.080710][ T3743] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.088803][ T3743] loop9: unable to read partition table [ 44.095100][ T3743] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 44.095100][ T3743] ) failed (rc=-5) [ 44.109338][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.118572][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.154767][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.180445][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.198567][ T3301] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.210085][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.335759][ T3773] loop3: detected capacity change from 0 to 1024 [ 44.344778][ T3773] EXT4-fs: Ignoring removed orlov option [ 44.368262][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.402079][ T3773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.426272][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.475286][ T3774] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.38'. [ 44.484345][ T3774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 44.500738][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.511696][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.537308][ T3779] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 44.544940][ T3779] netlink: 'syz.4.42': attribute type 4 has an invalid length. [ 44.552549][ T3779] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.42'. [ 44.593554][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.616399][ T3783] loop0: detected capacity change from 0 to 128 [ 44.681899][ T3783] pim6reg: entered allmulticast mode [ 44.695757][ T3783] pim6reg: left allmulticast mode [ 44.742626][ T3783] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 44.749388][ T3783] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.757237][ T3783] vhci_hcd vhci_hcd.0: Device attached [ 44.777558][ T3787] vhci_hcd: connection closed [ 44.778154][ T298] vhci_hcd: stop threads [ 44.787257][ T298] vhci_hcd: release socket [ 44.791769][ T298] vhci_hcd: disconnect device [ 44.817035][ T3781] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 44.823680][ T3781] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.831334][ T3781] vhci_hcd vhci_hcd.0: Device attached [ 45.067811][ T1035] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 45.140629][ T3794] sy: rxe_newlink: already configured on bond_slave_0 [ 45.248890][ T3804] loop3: detected capacity change from 0 to 128 [ 45.251414][ T3804] vfat: Unknown parameter '' [ 45.280261][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 45.411530][ T3790] vhci_hcd: connection reset by peer [ 45.414485][ T12] vhci_hcd: stop threads [ 45.414498][ T12] vhci_hcd: release socket [ 45.414513][ T12] vhci_hcd: disconnect device [ 45.458234][ T3822] bridge0: entered promiscuous mode [ 45.458336][ T3822] macvtap1: entered allmulticast mode [ 45.458350][ T3822] bridge0: entered allmulticast mode [ 45.593518][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 45.593543][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 45.593874][ T3836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 45.639254][ T3843] loop3: detected capacity change from 0 to 164 [ 45.641018][ T3843] ISOFS: unable to read i-node block [ 45.641042][ T3843] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 45.648460][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.648478][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.660639][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.660655][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.723175][ T3846] loop4: detected capacity change from 0 to 2048 [ 45.788738][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 45.802944][ T3850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 45.802968][ T3850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.803005][ T3850] vhci_hcd vhci_hcd.0: Device attached [ 45.818268][ T3301] loop4: p2 p3 < > p4 < p5 > [ 45.818280][ T3301] loop4: partition table partially beyond EOD, truncated [ 45.818364][ T3301] loop4: p2 start 53543428 is beyond EOD, truncated [ 45.818382][ T3301] loop4: p3 start 4284289 is beyond EOD, truncated [ 45.824471][ T3301] loop4: p5 start 53543428 is beyond EOD, truncated [ 45.826008][ T3846] loop4: p2 p3 < > p4 < p5 > [ 45.838343][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.844351][ T3846] loop4: partition table partially beyond EOD, truncated [ 45.845553][ T3846] loop4: p2 start 53543428 is beyond EOD, [ 45.851332][ T3759] Bluetooth: hci0: command 0x1003 tx timeout [ 45.857606][ T3846] truncated [ 45.857651][ T3846] loop4: p3 start 4284289 is beyond EOD, truncated [ 45.891927][ T3846] loop4: p5 start 53543428 is beyond EOD, truncated [ 45.960646][ T3854] loop4: detected capacity change from 0 to 128 [ 46.117029][ T3858] loop2: detected capacity change from 0 to 4096 [ 46.126082][ T3858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.250103][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.286616][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.294185][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.301940][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.309438][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.818293][ T3851] vhci_hcd: connection closed [ 46.920260][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 46.920280][ T29] audit: type=1326 audit(1763762811.595:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 46.966379][ T3867] loop5: detected capacity change from 0 to 512 [ 46.973601][ T3867] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.980603][ T298] vhci_hcd: stop threads [ 46.984890][ T298] vhci_hcd: release socket [ 46.989413][ T298] vhci_hcd: disconnect device [ 47.001992][ T29] audit: type=1326 audit(1763762811.635:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.025496][ T29] audit: type=1326 audit(1763762811.635:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.049276][ T29] audit: type=1326 audit(1763762811.635:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.063460][ T3867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.072532][ T29] audit: type=1326 audit(1763762811.635:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.081341][ T3867] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.104591][ T29] audit: type=1326 audit(1763762811.635:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.137026][ T29] audit: type=1326 audit(1763762811.635:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.160397][ T29] audit: type=1326 audit(1763762811.635:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.183697][ T29] audit: type=1326 audit(1763762811.635:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.185285][ T3877] loop4: detected capacity change from 0 to 128 [ 47.207166][ T29] audit: type=1326 audit(1763762811.635:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.5.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 47.250990][ T3878] lo speed is unknown, defaulting to 1000 [ 47.266565][ T3878] lo speed is unknown, defaulting to 1000 [ 47.284730][ T3878] lo speed is unknown, defaulting to 1000 [ 47.291031][ T3878] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.299226][ T3878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.324149][ T3867] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.60: Allocating blocks 41-42 which overlap fs metadata [ 47.353857][ T3878] lo speed is unknown, defaulting to 1000 [ 47.365953][ T3867] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.60: Failed to acquire dquot type 1 [ 47.378755][ T3878] lo speed is unknown, defaulting to 1000 [ 47.384957][ T3867] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14: [ 47.384988][ T3888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 47.384998][ T3867] freeing already freed block (bit 14); block bitmap corrupt. [ 47.394202][ T3888] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 47.394273][ T3888] vhci_hcd vhci_hcd.0: Device attached [ 47.412697][ T3867] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.60: corrupted inode contents [ 47.435418][ T3878] lo speed is unknown, defaulting to 1000 [ 47.445573][ T3878] lo speed is unknown, defaulting to 1000 [ 47.454449][ T3878] lo speed is unknown, defaulting to 1000 [ 47.460301][ T3888] vhci_hcd vhci_hcd.0: port 0 already used [ 47.488466][ T3867] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #12: comm syz.5.60: mark_inode_dirty error [ 47.511241][ T3886] loop0: detected capacity change from 0 to 512 [ 47.538022][ T3867] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.60: corrupted inode contents [ 47.555782][ T3890] vhci_hcd: connection closed [ 47.556001][ T3867] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.60: mark_inode_dirty error [ 47.559725][ T3450] vhci_hcd: stop threads [ 47.576106][ T3450] vhci_hcd: release socket [ 47.580605][ T3450] vhci_hcd: disconnect device [ 47.586904][ T3867] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.60: corrupted inode contents [ 47.590112][ T3894] syz.4.61: attempt to access beyond end of device [ 47.590112][ T3894] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 47.600081][ T3886] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.63: inode has both inline data and extents flags [ 47.612360][ T3894] syz.4.61: attempt to access beyond end of device [ 47.612360][ T3894] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 47.626455][ T3886] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.63: couldn't read orphan inode 15 (err -117) [ 47.638561][ T3894] syz.4.61: attempt to access beyond end of device [ 47.638561][ T3894] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 47.650822][ T3867] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 47.675497][ T3867] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.60: corrupted inode contents [ 47.680004][ T3894] syz.4.61: attempt to access beyond end of device [ 47.680004][ T3894] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 47.701037][ T3894] syz.4.61: attempt to access beyond end of device [ 47.701037][ T3894] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 47.704500][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.714535][ T3894] syz.4.61: attempt to access beyond end of device [ 47.714535][ T3894] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 47.732353][ T3904] loop2: detected capacity change from 0 to 7 [ 47.740791][ T3894] syz.4.61: attempt to access beyond end of device [ 47.740791][ T3894] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 47.746757][ T3867] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.60: mark_inode_dirty error [ 47.760124][ T3894] syz.4.61: attempt to access beyond end of device [ 47.760124][ T3894] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 47.776070][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.784831][ T3894] syz.4.61: attempt to access beyond end of device [ 47.784831][ T3894] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 47.793487][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.794050][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.808112][ T3894] syz.4.61: attempt to access beyond end of device [ 47.808112][ T3894] loop4: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 47.814583][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.847324][ T3904] loop2: unable to read partition table [ 47.853463][ T3904] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 47.867390][ T3867] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 47.867424][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.867452][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 47.867808][ T3867] EXT4-fs (loop5): 1 truncate cleaned up [ 47.899388][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.917696][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.927698][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.937153][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.957701][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.968302][ T3867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.976341][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.988672][ T3904] hsr0: entered promiscuous mode [ 47.991849][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.008509][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 48.042625][ T3904] hsr_slave_0: left promiscuous mode [ 48.084601][ T3904] hsr_slave_1: left promiscuous mode [ 48.092767][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.103617][ T3004] loop2: unable to read partition table [ 48.123781][ T3910] capability: warning: `syz.2.68' uses deprecated v2 capabilities in a way that may be insecure [ 48.135265][ T3910] GUP no longer grows the stack in syz.2.68 (3910): 200000004000-20000000a000 (200000002000) [ 48.145581][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.145652][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.145665][ T3910] Call Trace: [ 48.145671][ T3910] [ 48.145678][ T3910] __dump_stack+0x1d/0x30 [ 48.145702][ T3910] dump_stack_lvl+0xe8/0x140 [ 48.145722][ T3910] dump_stack+0x15/0x1b [ 48.145775][ T3910] __get_user_pages+0x1968/0x1ed0 [ 48.145810][ T3910] get_user_pages_remote+0x1d5/0x6c0 [ 48.145841][ T3910] __access_remote_vm+0x15c/0x590 [ 48.145871][ T3910] access_remote_vm+0x32/0x40 [ 48.145950][ T3910] proc_pid_cmdline_read+0x32b/0x6c0 [ 48.146031][ T3910] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 48.146062][ T3910] vfs_readv+0x3fb/0x690 [ 48.146128][ T3910] __x64_sys_preadv+0xfd/0x1c0 [ 48.146156][ T3910] x64_sys_call+0x282e/0x3000 [ 48.146241][ T3910] do_syscall_64+0xd2/0x200 [ 48.146262][ T3910] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.146292][ T3910] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.146336][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.146358][ T3910] RIP: 0033:0x7f242b2ff749 [ 48.146378][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.146396][ T3910] RSP: 002b:00007f2429d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 48.146421][ T3910] RAX: ffffffffffffffda RBX: 00007f242b555fa0 RCX: 00007f242b2ff749 [ 48.146491][ T3910] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000c [ 48.146506][ T3910] RBP: 00007f242b383f91 R08: 0000000000000000 R09: 0000000000000000 [ 48.146520][ T3910] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 48.146601][ T3910] R13: 00007f242b556038 R14: 00007f242b555fa0 R15: 00007ffc48fc3ac8 [ 48.146618][ T3910] [ 48.339486][ T3904] hsr0 (unregistering): left promiscuous mode [ 48.347818][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.465428][ T3918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.69'. [ 48.483915][ T3918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3918 comm=syz.5.69 [ 48.496549][ T3918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3918 comm=syz.5.69 [ 48.604471][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 48.755509][ T3936] netlink: 172 bytes leftover after parsing attributes in process `syz.2.73'. [ 48.779067][ T3937] netlink: 'syz.5.72': attribute type 4 has an invalid length. [ 48.786699][ T3937] netlink: 152 bytes leftover after parsing attributes in process `syz.5.72'. [ 48.801755][ T3938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3938 comm=syz.3.71 [ 48.838954][ T3933] lo speed is unknown, defaulting to 1000 [ 48.852695][ T3938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.71'. [ 48.868003][ T3940] 9p: Unknown Cache mode or invalid value  [ 48.883743][ T3937] .`: renamed from bond0 (while UP) [ 48.932738][ T3931] lo speed is unknown, defaulting to 1000 [ 48.949035][ T3936] siw: device registration error -23 [ 48.954582][ T3942] siw: device registration error -23 [ 48.965657][ T3939] smc: removing ib device sy [ 49.019961][ C1] hrtimer: interrupt took 29440 ns [ 49.526629][ T3964] lo speed is unknown, defaulting to 1000 [ 49.654516][ T3964] loop5: detected capacity change from 0 to 512 [ 49.666169][ T3964] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 49.674256][ T3964] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 49.684086][ T3964] EXT4-fs (loop5): 1 truncate cleaned up [ 49.690982][ T3964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.011756][ T3976] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 50.031025][ T3976] SELinux: failed to load policy [ 50.090426][ T1035] usb 9-1: enqueue for inactive port 0 [ 50.100351][ T1035] usb 9-1: enqueue for inactive port 0 [ 50.174688][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.194276][ T3987] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 50.223704][ T3987] ip6t_srh: unknown srh match flags 4000 [ 50.227459][ T3990] loop0: detected capacity change from 0 to 512 [ 50.249293][ T1035] vhci_hcd: vhci_device speed not set [ 50.261691][ T3980] loop3: detected capacity change from 0 to 1024 [ 50.275290][ T3980] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.275600][ T3990] ext3: Unknown parameter 'fowner<00000000000000016832' [ 50.308109][ T3980] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.363790][ T3993] loop5: detected capacity change from 0 to 164 [ 50.413598][ T3996] ip6gretap1: entered allmulticast mode [ 50.636010][ T4003] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.647876][ T4003] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 50.732043][ T4008] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 50.751904][ T4008] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 50.834119][ T4010] loop5: detected capacity change from 0 to 512 [ 50.855710][ T4012] loop4: detected capacity change from 0 to 128 [ 50.865772][ T4010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.866318][ T4012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.93'. [ 50.883192][ T4010] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.916570][ T4012] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29460 sclass=netlink_xfrm_socket pid=4012 comm=syz.4.93 [ 51.056820][ T4021] loop3: detected capacity change from 0 to 512 [ 51.072724][ T4021] EXT4-fs: Ignoring removed nobh option [ 51.106757][ T4021] EXT4-fs (loop3): failed to initialize system zone (-117) [ 51.128482][ T4021] EXT4-fs (loop3): mount failed [ 51.180450][ T4018] loop4: detected capacity change from 0 to 32768 [ 51.229543][ T4029] loop0: detected capacity change from 0 to 764 [ 51.236030][ T3607] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 51.245201][ T3607] loop4: p1 start 460800 is beyond EOD, truncated [ 51.251756][ T3607] loop4: p2 size 83886080 extends beyond EOD, truncated [ 51.261966][ T4029] rock: directory entry would overflow storage [ 51.268271][ T4029] rock: sig=0x4654, size=5, remaining=4 [ 51.278592][ T3607] loop4: p5 start 460800 is beyond EOD, truncated [ 51.285160][ T3607] loop4: p6 size 83886080 extends beyond EOD, truncated [ 51.297930][ T4018] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 51.303405][ T4018] loop4: p1 start 460800 is beyond EOD, truncated [ 51.310124][ T4018] loop4: p2 size 83886080 extends beyond EOD, truncated [ 51.340705][ T4018] loop4: p5 start 460800 is beyond EOD, truncated [ 51.347190][ T4018] loop4: p6 size 83886080 extends beyond EOD, truncated [ 51.469317][ T4039] loop4: detected capacity change from 0 to 1024 [ 51.472485][ T4039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.503603][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.689427][ T4049] loop0: detected capacity change from 0 to 1024 [ 51.699169][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 51.699843][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.710162][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 51.730896][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 51.741607][ T4049] EXT4-fs: Ignoring removed orlov option [ 51.781713][ T4049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.812583][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.844491][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.856060][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 51.857885][ T3607] udevd[3607]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 51.870218][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 51.870948][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.963227][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 51.963245][ T29] audit: type=1326 audit(1763762816.635:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.963458][ T29] audit: type=1326 audit(1763762816.635:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.963606][ T29] audit: type=1326 audit(1763762816.635:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.963967][ T29] audit: type=1326 audit(1763762816.635:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.964067][ T29] audit: type=1326 audit(1763762816.635:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.964269][ T29] audit: type=1326 audit(1763762816.635:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.964465][ T29] audit: type=1326 audit(1763762816.635:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.964636][ T29] audit: type=1326 audit(1763762816.635:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.964772][ T29] audit: type=1326 audit(1763762816.635:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 51.965000][ T29] audit: type=1326 audit(1763762816.635:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.5.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6591af749 code=0x7ffc0000 [ 52.041346][ T4060] loop2: detected capacity change from 0 to 512 [ 52.263760][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.263941][ T4060] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.434718][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.482684][ T4060] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.105: corrupted inode contents [ 52.483330][ T4060] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.105: mark_inode_dirty error [ 52.485429][ T4060] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.105: corrupted inode contents [ 52.608719][ T4067] loop4: detected capacity change from 0 to 512 [ 52.669968][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.693218][ T4071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'. [ 52.706212][ T4071] loop2: detected capacity change from 0 to 736 [ 52.916937][ T4089] netlink: 'syz.2.111': attribute type 6 has an invalid length. [ 52.917342][ T4089] netlink: 'syz.2.111': attribute type 6 has an invalid length. [ 52.955972][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 53.014048][ T4093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 53.021918][ T4093] capability: warning: `syz.0.113' uses 32-bit capabilities (legacy support in use) [ 53.202638][ T4096] lo speed is unknown, defaulting to 1000 [ 53.386148][ T4100] loop3: detected capacity change from 0 to 136 [ 53.532577][ T4105] loop3: detected capacity change from 0 to 1024 [ 53.532955][ T4105] EXT4-fs: inline encryption not supported [ 53.532973][ T4105] EXT4-fs: Ignoring removed orlov option [ 53.541845][ T4105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c119, mo2=0002] [ 53.541881][ T4105] System zones: 0-1, 3-12 [ 53.544942][ T4105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.580337][ T4103] Cannot find del_set index 0 as target [ 53.600699][ T4103] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 53.614596][ T4103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.628408][ T4103] bond1: (slave ip6gretap1): making interface the new active one [ 53.629538][ T4103] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 53.639393][ T4102] delete_channel: no stack [ 53.679872][ T4111] loop4: detected capacity change from 0 to 512 [ 53.690045][ T4111] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 53.690197][ T4111] EXT4-fs (loop4): mount failed [ 53.695933][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.808059][ T4117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.840168][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.855292][ T4119] netlink: 100 bytes leftover after parsing attributes in process `syz.2.120'. [ 53.886963][ T4119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4119 comm=syz.2.120 [ 53.946465][ T4119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4119 comm=syz.2.120 [ 54.059122][ T4124] loop0: detected capacity change from 0 to 512 [ 54.068094][ T4124] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.081348][ T4124] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.105593][ T4124] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.121: corrupted xattr entries [ 54.134525][ T4124] EXT4-fs (loop0): Remounting filesystem read-only [ 54.141175][ T4124] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.154925][ T4124] EXT4-fs (loop0): 1 truncate cleaned up [ 54.168280][ T4124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.199189][ T4137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.122'. [ 54.234576][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.244459][ T4137] loop4: detected capacity change from 0 to 736 [ 54.292551][ T4145] loop3: detected capacity change from 0 to 1024 [ 54.299781][ T4145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.321738][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.443509][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 54.531095][ T4157] loop4: detected capacity change from 0 to 512 [ 54.549988][ T4157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.570032][ T4157] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.626825][ T4157] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.125: corrupted inode contents [ 54.769152][ T4157] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.125: mark_inode_dirty error [ 54.781223][ T4157] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.125: corrupted inode contents [ 54.841102][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.850661][ T4168] loop2: detected capacity change from 0 to 512 [ 55.004446][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.328514][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.349832][ T4186] loop4: detected capacity change from 0 to 764 [ 55.368078][ T4186] rock: directory entry would overflow storage [ 55.374333][ T4186] rock: sig=0x4654, size=5, remaining=4 [ 55.670836][ T4206] siw: device registration error -23 [ 55.765270][ T4212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.136'. [ 55.816030][ T4204] loop5: detected capacity change from 0 to 32768 [ 55.835327][ T4210] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 55.877084][ T4204] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 55.887789][ T4204] loop5: p1 start 460800 is beyond EOD, truncated [ 55.894268][ T4204] loop5: p2 size 83886080 extends beyond EOD, truncated [ 55.907792][ T4204] loop5: p5 start 460800 is beyond EOD, truncated [ 55.914299][ T4204] loop5: p6 size 83886080 extends beyond EOD, truncated [ 55.930309][ T4214] loop4: detected capacity change from 0 to 512 [ 55.949166][ T4223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.968637][ T4214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.981370][ T4214] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.028183][ T4223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.056487][ T4229] netlink: 3 bytes leftover after parsing attributes in process `syz.2.137'. [ 56.079885][ T4229] 1X: renamed from 60X [ 56.097621][ T4229] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 56.118719][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 56.121017][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 56.160673][ T4223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.176771][ T4236] ip6t_srh: unknown srh match flags 4000 [ 56.189659][ T4223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.288244][ T4242] lo speed is unknown, defaulting to 1000 [ 56.412288][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438870][ T4257] loop3: detected capacity change from 0 to 1024 [ 56.445777][ T4257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.477065][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.485885][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.496449][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.511094][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.569864][ T4250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4250 comm=syz.5.150 [ 56.604274][ T4236] Set syz1 is full, maxelem 65536 reached [ 56.614910][ T4250] netlink: 36 bytes leftover after parsing attributes in process `syz.5.150'. [ 56.664372][ T4262] siw: device registration error -23 [ 56.729876][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.793671][ T4267] loop4: detected capacity change from 0 to 1024 [ 56.802290][ T4267] EXT4-fs: Ignoring removed orlov option [ 56.808190][ T4269] loop2: detected capacity change from 0 to 764 [ 56.824099][ T4269] rock: directory entry would overflow storage [ 56.830482][ T4269] rock: sig=0x4654, size=5, remaining=4 [ 56.887236][ T3330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.897930][ T4267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.053924][ T4279] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.078818][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 57.103550][ T4280] lo speed is unknown, defaulting to 1000 [ 57.162090][ T4280] loop0: detected capacity change from 0 to 512 [ 57.444230][ T4280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.456938][ T4280] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.476531][ T4274] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.155: corrupted inode contents [ 57.476981][ T4274] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.155: mark_inode_dirty error [ 57.477296][ T4274] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.155: corrupted inode contents [ 57.477410][ T4274] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.155: mark_inode_dirty error [ 57.490547][ T29] kauditd_printk_skb: 1568 callbacks suppressed [ 57.490563][ T29] audit: type=1326 audit(1763763335.170:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.490673][ T29] audit: type=1326 audit(1763763335.170:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494599][ T29] audit: type=1326 audit(1763763335.170:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494634][ T29] audit: type=1326 audit(1763763335.170:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494662][ T29] audit: type=1326 audit(1763763335.170:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494688][ T29] audit: type=1326 audit(1763763335.170:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494777][ T29] audit: type=1326 audit(1763763335.170:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494808][ T29] audit: type=1326 audit(1763763335.170:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.494829][ T29] audit: type=1326 audit(1763763335.170:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.495244][ T29] audit: type=1326 audit(1763763335.170:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbd1f07f749 code=0x7ffc0000 [ 57.785344][ T4296] lo speed is unknown, defaulting to 1000 [ 57.835228][ T4296] loop2: detected capacity change from 0 to 512 [ 57.933578][ T4296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.933847][ T4296] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.937218][ T4296] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.148: corrupted inode contents [ 57.937641][ T4296] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.148: mark_inode_dirty error [ 57.938733][ T4296] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.148: corrupted inode contents [ 57.938997][ T4296] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.148: mark_inode_dirty error [ 58.023819][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.084786][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.376501][ T4306] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 58.384874][ T4306] SELinux: failed to load policy [ 58.432277][ T4300] loop4: detected capacity change from 0 to 1024 [ 58.441132][ T4300] EXT4-fs: Ignoring removed orlov option [ 58.493766][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.524992][ T4312] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4312 comm=syz.5.154 [ 58.526683][ T4300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.591494][ T4316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4316 comm=syz.5.154 [ 58.619596][ T4317] lo speed is unknown, defaulting to 1000 [ 58.677207][ T4317] loop0: detected capacity change from 0 to 512 [ 58.789712][ T4317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.802292][ T4317] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.815720][ T4317] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.161: corrupted inode contents [ 58.828122][ T4317] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.161: mark_inode_dirty error [ 58.841712][ T4317] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.161: corrupted inode contents [ 58.854333][ T4317] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.161: mark_inode_dirty error [ 59.025915][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.065332][ T4326] loop3: detected capacity change from 0 to 512 [ 59.078956][ T4326] ext3: Unknown parameter 'fowner<00000000000000016832' [ 59.139873][ T4329] lo speed is unknown, defaulting to 1000 [ 59.151987][ T4331] ip6gretap1: entered allmulticast mode [ 59.368675][ T4338] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 59.377001][ T4338] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 59.390692][ T4338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.410485][ T4338] bond1: (slave ip6gretap2): making interface the new active one [ 59.419961][ T4338] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 59.448813][ T4342] siw: device registration error -23 [ 59.454412][ T4337] delete_channel: no stack [ 59.554588][ T4352] __nla_validate_parse: 1 callbacks suppressed [ 59.554605][ T4352] netlink: 172 bytes leftover after parsing attributes in process `syz.4.163'. [ 59.554715][ T4351] loop0: detected capacity change from 0 to 512 [ 59.563368][ T4348] loop5: detected capacity change from 0 to 1024 [ 59.578230][ T4352] siw: device registration error -23 [ 59.584062][ T4348] EXT4-fs: Ignoring removed orlov option [ 59.661253][ T4357] loop4: detected capacity change from 0 to 512 [ 59.680262][ T4357] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.695620][ T4360] ================================================================== [ 59.704014][ T4360] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 59.712298][ T4360] [ 59.714639][ T4360] write to 0xffff8881004aed10 of 4 bytes by task 4348 on cpu 1: [ 59.722278][ T4360] writeback_single_inode+0x150/0x3f0 [ 59.727667][ T4360] sync_inode_metadata+0x5b/0x90 [ 59.732635][ T4360] generic_buffers_fsync_noflush+0xd9/0x120 [ 59.738547][ T4360] ext4_sync_file+0x1ab/0x690 [ 59.743333][ T4360] vfs_fsync_range+0x10d/0x130 [ 59.748119][ T4360] ext4_buffered_write_iter+0x34f/0x3c0 [ 59.753677][ T4360] ext4_file_write_iter+0x387/0xf60 [ 59.758886][ T4360] iter_file_splice_write+0x666/0xa60 [ 59.764276][ T4360] direct_splice_actor+0x156/0x2a0 [ 59.769392][ T4360] splice_direct_to_actor+0x312/0x680 [ 59.774771][ T4360] do_splice_direct+0xda/0x150 [ 59.779544][ T4360] do_sendfile+0x380/0x650 [ 59.784069][ T4360] __x64_sys_sendfile64+0x105/0x150 [ 59.789298][ T4360] x64_sys_call+0x2bb4/0x3000 [ 59.793984][ T4360] do_syscall_64+0xd2/0x200 [ 59.798494][ T4360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.804479][ T4360] [ 59.806806][ T4360] read to 0xffff8881004aed10 of 4 bytes by task 4360 on cpu 0: [ 59.814356][ T4360] __mark_inode_dirty+0x55/0x750 [ 59.819310][ T4360] ext4_write_inline_data_end+0x3e5/0x5f0 [ 59.825038][ T4360] ext4_write_end+0x3d7/0x730 [ 59.829725][ T4360] generic_perform_write+0x312/0x490 [ 59.835028][ T4360] ext4_buffered_write_iter+0x1ee/0x3c0 [ 59.840580][ T4360] ext4_file_write_iter+0x387/0xf60 [ 59.845777][ T4360] iter_file_splice_write+0x666/0xa60 [ 59.851153][ T4360] direct_splice_actor+0x156/0x2a0 [ 59.856305][ T4360] splice_direct_to_actor+0x312/0x680 [ 59.861682][ T4360] do_splice_direct+0xda/0x150 [ 59.866472][ T4360] do_sendfile+0x380/0x650 [ 59.870902][ T4360] __x64_sys_sendfile64+0x105/0x150 [ 59.876109][ T4360] x64_sys_call+0x2bb4/0x3000 [ 59.880789][ T4360] do_syscall_64+0xd2/0x200 [ 59.885303][ T4360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.891288][ T4360] [ 59.893610][ T4360] value changed: 0x00000070 -> 0x00000002 [ 59.899410][ T4360] [ 59.901738][ T4360] Reported by Kernel Concurrency Sanitizer on: [ 59.907973][ T4360] CPU: 0 UID: 0 PID: 4360 Comm: syz.5.162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.917684][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.928439][ T4360] ================================================================== [ 59.975227][ T4361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.998936][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.162'.