last executing test programs: 4.056289608s ago: executing program 2 (id=33): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4.018994021s ago: executing program 1 (id=35): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000004c0)="cdac3cc08b7447d512f2f48e0989156deafe2fc557ecf1772d98d722f3119e8f4cdc140e9230102139205a4f52577cde90040d5621efcbe5343b5f9e6aa92882fbbdfbd7f3298cc00e679dc3eb1940eaaeea0cbe8bf36950e26a8a525e0b3bb3d9a287343b0fd9abe9cca4b5cfa893a4520ef518373ad10771ea6fd548bfe726cb3bfb542385eff375ab12313b490a7784bb18d9f7a230dc1f75789869b48c129e", &(0x7f0000000380)=""/111, 0x0, &(0x7f0000000800)="6cdf76d9151071e9fd846aec44d132d978146c03a5e93898283fd3e9d4a437baf9866e095cd0b1e328dc3acd6738b19a56a4a47c5a7d207a54c5fd4aefd340d0118c166a5b5a697450705c135b7ae29587b7333eea0f161315ece2256caa0ac64666b135be60e8905b981a4502f0ae7aa812d8e5133f2f05c2bd991ceae7d6be5ea2e7424889b2a269f5122e209e3876d6a215e165a91b8b67564a9b5f7165ba95f603da0fc85a89634c324d70bb23a60cbf8d0dcac87299be65f4e2985bef42c49919068d7149540b47", 0x5}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 3.844027044s ago: executing program 1 (id=36): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(0xffffffffffffffff, 0xfffffff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x24cc, 0x30, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{0x24b8, 0x1, [@m_xt={0x1050, 0xe, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x1004, 0x6, "66a005bc07bbf94d1d02920c180d1b92c75fc2ce0acf6dcc921a524bba6ef820942ad5b88937a12c242973d56190784a06e7d120f880b6c13a30fcbcb099d9236415e9f1104022841b6b3e9b16cc0a517397d0f49399ac18e22c336bee6cf7560406034cfc46e769e57572d5bd47a60c4b3945ccc253f230548d2f98ca6e42314392d9997a72f40d4be06671f562ee78ab335738db755bc33e1eba905c29fb483a772d5ddec00d553c2caacc1504f966a002db3af0db2d46521c64499a474089078491ec56e1496050456642efd54ed67532d3da3e173dd853b87d86b423db930ed6dcf5239a3c1a5f8ea6940e5c6289b50ebc6578e09a2afbea8c9d5a00999355915aabe4e21869d5e70a4fd0a60c4eaefee0ba4936ae5884cb0414d3e31e43fd12efe58e54b39cfc88d1306ea5dd3983ccaf49e550ebac409343ae8c472c1848508eecf422f4e825c2ca049ff06aed5e45bf48c482abb4acb3b11412026e60f3b6355218cfca6efdf61d8bcc95c85238cd7d853f70f0a455a41ddcddd972da4b40d5e49cf4c6e21f3ffef06729bdeba0b6e042082f7ca45e7a4ad70505bd820cecefec62f6ee5045d23e38a4c6fee4603fafc883944f5dc877bff65570a328c45eacb2b6a453bff90aeaff7d322b3a84c06512a63ed01e86d36c2c59422420b80bce0f61c2a7d26b35bd7d57d2b0969d6a407b0ef26687f53ed8101481bb2146f823f135342a14359f4fe9a93d8fa9e16afcde00e86a16604e33e9632c65dd99fec45bd0fbc5efdd5a0b3cc278a2b0c25211d1c6275ebbce640426e6508c5c0a9829a8d7b0786e7905cac291ce9830436ff43fb791fb5181b75a3b6f724ed08e6402c703bed0c8b63fbfc9212e9535c0b5853f22859b5c885042d7fac4b55d7d0d8507bce19c15cdc87a7e6d552479c21c61cd6552b601131bfcae89414c22008aa8f1822ab498109c1561a40f57301adde182850e0fd17c793d2da59b1c02ea638cab0f6afe35d33a4c7c3efc7dee610a2b6f06a9d4a74d29a2b46ec0636fcc5d59e0849b4c1cfeed44628f47bbd0540f44aa85bd86e5f026c51aa6531bea0dcbc81f3b1b47a3b4a00bee150ee85c24213214cd637a7d319ae8e931e9c7962e725652c04949bb5cc69123beb102db0f6dd802720dd318a75ae1c0609e0bb0879e48356b0241be4a74f9128249d9426ac6fda18871db745905a225c22a62edc29d1bd821cffad0388c062be17bc1fcce6e1e4cfdb1175593bb5493ad3f719247af9b1494d52298e45a80b07cd8fd39292d576b57a88edca9107707c6996e6cc9500956ef593bdbc3dd209c9ef42faa67bfd26c732dde604bc1b02864126f4be74f30f9524f7d0cc79a0409c26dee55cf68e9cc1cff0f53d9f0172a56b0d7c92f37efc763cc8cf4e74b190add2bab0426ad9f610f013faa9649c449684ccac7bc43fba6a0730dcbb72f5f6ae0a5377c2abc944bb38b79101a7397615eb837adbbd0d3e8b8212374871b9a651c5d244b579484fc909067d08ec9f3ea66e3d2bbe7de7d3ac419e03f4d65d838921034a91bc71a5627d28a37fd22850e943e6a1f3a8eb833d5b3861113a8ef4b6252d44357be7c1bc18ce65a1f6c75695847585bfa93caee47c3a0f4af9ff7160c4ff034e55881613bf291f0fde9806701083408d153d52f1bcf1607e174d308d55ec9b2dbbd90c1e7eaabbc931e19900eecc4bd0e6a87d52a44f695a00b8bd257f9472f006c8f527feeab055d0a71ffce77ca6c63556fa6adb815dc1c536e85807a2a99e69104551a1acd9f10e3faa34c2a4eab8ece9e218bc3995046abaa6859c07de4a59dc580b5b0448945f55c0406fca722dfb768a3b6b1c04c4b67f0d55ddca799b7e73fda928cc9719d2ad0082580ccf0a8b0740997ddac66bdd32b833121b326ca2b8802f74bffd066137f7f8caefb4175e3e756726f753ed808109a1d7d9a8f416ca286975031b7abfc92203529e902b6ae113c640a474321b090331b5b2368c8d3953dfc1adb484f915f57b4170077d32d8dec637db0db64f6fc03b0da4a9ececef45ea1f7446f0d84999632374c8b4ff796b291e2bae348994afa0bd0e9932c2db6858741998a51f49f3811c98b8fdf9b812328a1869060ddbbeed7cbb0f499bbc0c64e3c95beed935a341eefe7f3eaf0e7f3ae56f5917d307f99977bd4b66b613a124f6a24e412f7d40e7ac90b6433d59718d032bd0c2349ff1f71f451778ac98384a3c5059a3c6392478634a6d7d0a7afa3a61e81b0bcb635ad34d084f29d4712840ad78743af811d94d0fbe8706ac5d229750417b700c57d5f24c32a26fe092f9ae2eb7f90b26f696f53542a555f15545ba7bbc4b8d24561ae7d597540973aaaa1cdccdad60c159af616ee160a46450d5a56dc5a29ad28caf268e9c11b3fed84b5bfedb4aefee90490411afa842d8701ca1227085818fcd0fce8077ba34acc12573e783cda50bd03a241642be326f61bfd4828364929480bab8802fd70e861fcbc16b9918479e145bcf60bd381476feadc9665437732c19b3092e7a1c3b07ab2cfde591388af96c08e865c39e320f23765564500c4f09dc92b07c2f80bd1c32716067b381a169549cd963c60b4cdfa6f313db9a221eeaae812c1b0ce8d69d4fcc9bd74be9194b65a81d8827c13c03c699e48a327ceef5aea76544de08e0d304687d9ba8e5cac5cc9845ccce60add66ade54ca237caf7a244c74cfbede23c9fefe7e8702c61e3a24e872f4a4a1df10b43427e7a3398a93899cc17ca15e036ce4805a556adc03d2da756a0642a36fe2643f725342c8db60e84210ddba93cf1d00d991a43deb354aa1d0526d10931525b08766186bb5e8ae0f11ffd64ccf4b7bc331818247186da88a0bfc38979d09e764d603ac794f67a75e5f59741aaa2503bce8bd3dbd551fbcc57cd68de73f1ba462c43b1993d5c22f991cc5f6ff06610d678bea7f0cf51b98fd6dbf49352d8a752e650b88d0c98f8d28320994730fa708ec0be6dd27790b449df0601a9a3b87e51c8ab1fb3053cc1144ff1fdac38e774fb4eb8096c883ac5c368653f5fb11363a54816b996c7b2a6ac7b3b78ae4471d361eb51ab523d742e89e9cbfcf3d2be89eb4396056921e91818508258b33ce76503904d1a06bde21ac7cc69c8ff3a7fa608f8be09bc0dad85bb8ccc1acb8a28402dc126e2a4c5defc207ed77638310951462bb554dffbb1f9b6599a5e9b12a06cfdfdd6433c5cc87424d6080d136f123ac5168af4724e1eaea57b08a984a4b9be222b0d4dee7592e07f06261092c6d7295206e0b2dc33ed4ecbc840d5e482bebdcd9e6bbcee738e19269cd2308a53175c2cd3c0e7dd39f89ac43a5fddf2033a39a30efd094911857a3d8e7a2b6dc977695a6b5623b14aaa514f7a72eda26c54333020a605333bb5d382a3d54e379058daab60a4fe0a3178d88eef7027386b82d68bbc4f92f1b1de47ef791277d963116b4292290a4e732c1e169bab7bca803c9386b5000ac4fab6a0729a2905d4c7fd23cea2d8f142d4ad3d043d20b6a88e48b0ec8fd1789818ba0a4f3fe99900d5688fee130ec81a6fbc8141e7cbd2641a6ea8402d13268041df54473e88e4a9b803acb03f7c5076d506000df1edd223f4a5e182cabce1a2338c4b56fb1b6dd3bba3df021950427a7c2ca164a11402baceb8a837eb2023918f88986bd1ee11de15d519c64400f1774dfd6e0b459937fc7e0ad39044ece5586314813a84fde857c3a2b0870448c49e408cfb5f3226bcd60f19b337e63f32f9024576a91de2516193279b6074d23f438f5eae644e02453e9da02f526a0894cd5ceb07ae6ae403791112d5bddb74dc9e8aa9b0cb0f135aa8d3d3a02c0000fc82de2776fe1c9d551f83ff8d5c32d5b41000bccaf06497d53ebc3cf97287ab45797c9970a5697d7f68bcf1edf80349683f4abf66868ab897dd72a8c97b40bf60068e9d466a0ce3bea522a45aecd7337d476959f7a5ca973c21911d063cfd5a820e59efcecc76b9ed0ca29aaeda40d479ee4fb947d82215e6f7fcfcd1a128fcf50758784c203b184c34c320fed3ec3f001f42893ff1063089237f82d2169c873c4e3fc122441353ada60fb9cfea1b395e347711b9fd432d828d1081c4dc9552373a30200b028543b883ad396bb918981b65e750113ee9f2c6d31f50f439cb30c0b3d1a9854a367e8d9855f9cc021351e5cec6f6af420e47d607b44bb6e3bbe5beee2404e63f463b8023203d2d0b8324b1462c3077f0700a40c173b62fad023708f0c5d33e6ec5b2ce669796e75a1685b677f15428601691b5eaeb937da948953a191d92aee0990291faefddea5ca44a0dd333adb3e21687ae3fe1b62b10ece1f777fe0acb91cecf6c031fb4eca915ef9c57bb96f30bec2d617b5552873dacb86c91a95a0887c1bc16bb608cebe4aff11665c3d9b934eb0e7c67a26c612be712c041fe96d07d7aead942262c321293ecfd11553fcf1332e576a14bf13b9aa6fcdb92c0c268b519b0013e30f083de2dd7ccb466d285ad1688fd873b567057da3b2aaaee7fbce22dfbd1dca939173839bda80eb03fb4cbe46d7b0ca2288a11eef9aa49e34831333ff79f9aa965d2ba2c8083fe7a206419650211903dd375134ab51db48ca2da94d3c16bd3e90f17a47f427b974e73378c700bf16c06c6e85262ab531262f9039344190bc7fdc050591d2434c4c3ce5ebef3f3aa65cd8f0aeb5ca1ccecfba9abd07f6ba7313e6e125de5a1f2f734c9fa3029a40d283f182673545a6818f12c3c5d896c961d6d424b8a8614f8b7500fe0923f5899886429082ba310f7a5030a44c518a9b49f0bfd58385e655a2a9af53c9a14b60c6a602d69306c15fa5701230c46cc1ff2193bf9cb7b6e1feb2b4b089b8bca00a8fd3a0192acda23de242cb3f2c1c563bcc1a7392a5c97da5a6c332d71c213b71f515e7b4fb3bf760be8cfd384c81e91138bc57213a64a4d2d215b9d457561c284b01b6e42670c64bab41f8522ea5c1e86bfc9a98d8dac651b05049ee1c38799958b24dd49e2d540f64c41d3be6e0bfda34665d3c9fca448791a08113b11da1b21bf12b3a40c3edb1258c9aa0da4fa7416caa3fb9a8d0f0de7f91c72991cdabf2d1be86e1c1595ee91b7cb7237c0e2f80aa4be27733df90ad15a6d198c52ee3f5782b0ebec9320c12e1549fff07a95d15288664e85ac75b1e32b52b7ec5a4dc6e99655360d451a56dc583466870a6981ba2c1f4cd67f1f086cb6edf42ff8742e9b486cc2377734dbb19486548f5c47e0bb088a25e5429df189a2fee6e7ddcf41ca5f2e0865116f571b580304abebadecf9467e918de2a0bd8861289fe6b6ae95325f7c000dbaa326e0eee4c3525e256200b4a19f4d6f3fd8182187a43339725aa5c1163a0068c8d6100984c0810ebe58763ec43b1682a07d4ea68cf59ea2dc8609466ff0e5b8f54e915d623a457a097ab5ca25e46dd18cc2da8c792dc373a70c04549e180ee5422dc1749bf6076ddd4693172aff129c581086e02b02ffa7cbd364116aa779d5e84c1d345370acd06cfa06544201440ab85486f2e4a7bde36d3f3720187039e24d429dded4fd876bc6f4f827046794f3e70c4d11212e96b0ae77a9fa4546c02bd987215de22a52b8650a4b098ab74dbe8c2c9202a467e7cfb5e1681f329251895295968cac42abff8784e0d65c8740c376c982b64d3f9ec0a2b9565973e7c1f9f89b15898434e5b3d6a0af6e59487b7bd98f522cf67f4e1d5fce603ab5334b28931efd45d47965f89c2f1b4dfb40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x100, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x16, 0x2, 0x3, 0xae}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xca, 0x7, 0x20000000, 0x6, 0xc}, 0x4}}]}, {0x92, 0x6, "cec63d3a56e61054b04d07d5093d41cb7086d78c524e69fe9e45d48a7a37efe107fd936f925b66b787938b79e77db295f30bf683662af5e9bd528c4d91aeb58abbcaeb996cafc0c9608b098b02a157dffd75b89a46c058267d5f64f3c45cd8a7f32a974076b1a9d7b158dbf7a8be0b3ae1a8bdd53a6858ef1b8200b94d0dc986109c8d6c0653e034fe243fe93afd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x1364, 0x11, 0x0, 0x0, {{0xb}, {0x124c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0xfffffffd, 0x7, 0x81, {0x8, 0x1, 0x7, 0x8, 0x7, 0xec2a}, {0x81, 0x2, 0x40, 0x8000, 0x7, 0x1}, 0xfff, 0x81, 0x7fffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffbe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x44ee, 0x800, 0x1, 0x9, 0x1, 0x9, 0xc, 0x4, 0x4, 0x3, 0x7, 0x1, 0xa1, 0x7fff, 0x1, 0x0, 0xab1, 0x5, 0x96d, 0x6, 0x89, 0x6, 0xffff, 0xec, 0x2, 0x2, 0x0, 0x7fff, 0x81, 0x0, 0x401, 0xe, 0x4, 0x3, 0x1a8, 0x7, 0x100, 0x7, 0x7, 0x2, 0x8, 0x0, 0x3, 0x6, 0x2, 0xd7, 0x4, 0x8, 0x0, 0x99cd, 0x5, 0x2, 0x9, 0x9, 0xe788, 0x8, 0x4, 0x5c2f, 0x8000, 0x9, 0x51a2c6ff, 0x2, 0x7f, 0x2, 0x1, 0x40, 0x80000000, 0x3, 0x10, 0xd6634c02, 0x2, 0x6, 0x5, 0xd68e, 0x40000000, 0xa, 0x6, 0x5, 0x0, 0x5, 0xd44, 0x7fff, 0x9, 0x9, 0x7fffffff, 0x1c00000, 0x7, 0x25, 0xc634, 0x8, 0xc, 0x2, 0x8, 0x0, 0x2, 0x6, 0x3, 0x6, 0x8e, 0xffffff80, 0x7, 0x8, 0xfffffff8, 0x2, 0x3, 0x800, 0x6, 0x0, 0x7fffffff, 0xd4ca, 0xffffffff, 0x10001, 0x1, 0x0, 0x8, 0x8, 0x80000001, 0x0, 0xf, 0x9, 0x1, 0x0, 0x9f5, 0x1ff, 0xd5a, 0x7, 0xfff, 0xfff, 0xe, 0x9d, 0x16, 0x8, 0x8000, 0x8, 0x9a32, 0x80000000, 0x8, 0x40e, 0x9, 0xffffffff, 0x3ff, 0x7, 0x7, 0x2, 0x7, 0x5, 0x2, 0x5, 0x7, 0xc, 0x6, 0x4, 0x3, 0x9b, 0xd, 0x800, 0x8, 0x2, 0x2, 0xffff, 0x5, 0x3, 0x9, 0x4, 0x7, 0x6, 0xffff, 0x1, 0x7, 0x8, 0xf7, 0x2, 0x5, 0x6, 0xbffa, 0x6e, 0x3, 0x7, 0x7c, 0x204, 0xf234, 0x400, 0x9, 0xfffffb31, 0x7, 0x7, 0x2, 0x6, 0x10001, 0x4, 0xffffffff, 0x3, 0x80000000, 0x101, 0xe000000, 0xc00, 0x2, 0x100, 0x6, 0x1, 0x3, 0x2, 0x5f70, 0x7, 0x7, 0x7, 0x0, 0x3, 0xed, 0x2, 0x3, 0x7, 0x9, 0x4, 0x905, 0x40, 0x8000, 0x432d, 0x9, 0x9a, 0x1, 0x470, 0x7fffffff, 0xfffffff8, 0x9, 0x6a, 0x3ff, 0x5, 0x8, 0x4, 0x2, 0x6, 0xffffffff, 0x1, 0xffd5ff8, 0x8, 0xe, 0x36, 0x8, 0x800000, 0x7, 0xffffff18, 0x56d, 0x22, 0x612, 0x9, 0x8c76, 0xa, 0x7a20696, 0x5, 0x3, 0x9, 0x2e, 0xc83e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff16fc, 0x0, 0x1, 0x9, 0xe91e, {0x5, 0x1, 0x2, 0x100, 0x1c3b, 0x8}, {0x6, 0x3, 0xc688, 0x5, 0x3d, 0x3ff}, 0xff, 0x1, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x6, 0x80, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0xfffffffd, 0x4eb2, 0x8001, 0x5, 0xe, 0xd73, 0x7ff, 0x40, 0x6, 0x36, 0x8, 0xbc9, 0x6, 0x1, 0x3, 0x6, 0xfffffff8, 0xbd, 0x1, 0x9, 0x3, 0x8001, 0x6b0d, 0xae7, 0x2, 0x2, 0xfff, 0xfff, 0x40, 0xfffffffb, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x2, 0xd6, 0x5, 0x7, 0x10, 0xff, 0xed1e, 0x0, 0x19, 0x7, 0x7f, 0x759f, 0x1, 0x5, 0xffff126b, 0xd, 0x4, 0x7fff, 0x4, 0x8, 0x1, 0x8, 0x3, 0x3, 0x800, 0x40, 0x7, 0xee, 0x1, 0x1, 0x18, 0xa321, 0x4, 0x8, 0x80b, 0x7fff, 0x8, 0x6, 0x4, 0x2e3, 0x5, 0x833, 0x7f, 0x3, 0x4, 0x200, 0xb, 0x8, 0x7, 0x4, 0x66167234, 0x2, 0x0, 0xea5, 0x5, 0x8, 0x4, 0xfffffff9, 0x68e27b9e, 0x7, 0x1, 0x7, 0xffff, 0x1, 0x4, 0x40000000, 0x7fffffff, 0x5, 0x1503, 0xa, 0x2, 0x34, 0x2, 0x8, 0x5, 0x7, 0x5, 0x5, 0x100, 0x5, 0x7fffffff, 0x9f, 0x382e, 0xfff, 0x5, 0x5, 0x8, 0xd6, 0x2, 0x10000, 0x9, 0xffffe6cf, 0x1, 0x80, 0x9, 0x7, 0x27ca, 0x5, 0x107ea0, 0x8, 0x8, 0x0, 0x5, 0x4, 0x80, 0x4, 0x7, 0x5, 0x8, 0x6, 0xffffffff, 0x10, 0x10000, 0x81, 0x40, 0xffff, 0x100, 0x6, 0xfa7b, 0x9, 0x37, 0x9, 0x4, 0xfad9, 0x0, 0x7, 0x7, 0xacc6, 0x1e6e8e6c, 0x4, 0x1, 0x81, 0x2, 0xff, 0x6, 0x0, 0x4, 0x1, 0xfde9, 0x3, 0x3ff, 0x4, 0x7f, 0x1, 0x1, 0xe, 0x0, 0x8, 0x6, 0x9, 0x0, 0x6, 0xfffffff7, 0x2fac00, 0x6, 0x7, 0x0, 0x40, 0x65c, 0x200, 0x1, 0x6, 0x40, 0x5, 0x3, 0x8, 0x9, 0x6, 0xe, 0x1018, 0x7ff, 0x8, 0x4, 0xb, 0x10000, 0x0, 0xc6, 0x2b, 0xd, 0xd, 0x968, 0x200001, 0xfffffffd, 0x2, 0x5, 0xfe0, 0x0, 0x2, 0x3, 0x4, 0x3, 0x2, 0x381, 0x2683, 0xfffffffe, 0x2, 0x4, 0x8bd, 0x1, 0x400, 0x5c2e, 0xfffffff9, 0xf, 0x4, 0x401, 0x3, 0x6f, 0xfffffff8, 0x3, 0xb, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0xe7, 0x38f, 0x3, {0xb9, 0x2, 0x3, 0x6, 0x3}, {0x8, 0x0, 0x9508, 0x4, 0x2, 0x6}, 0x70, 0x0, 0xfffffe36}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x6, 0x9, 0x0, {0x6, 0x0, 0x3ff, 0x403, 0x8000, 0x9}, {0x1, 0x1, 0x8, 0x0, 0xe, 0x3}, 0x9, 0x27, 0x2}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xfffffeff, 0xf, 0x3, 0x4, 0x3, 0x8, 0x14c, 0x2, 0x0, 0x9, 0x3, 0x1, 0x4, 0x6, 0x4, 0x7, 0x1, 0x8, 0xf, 0x3, 0x4, 0x7f, 0x4, 0x8, 0x1, 0x7, 0x0, 0x3, 0x5, 0x7f, 0x7, 0x6, 0xfffffffe, 0x10000, 0x1103, 0x8, 0x0, 0xb39, 0x401, 0x80, 0x9973, 0x9, 0x80, 0x1, 0x6, 0x6, 0x5, 0x7, 0x8, 0x9, 0x6b57, 0xfffffff3, 0x4, 0xc8, 0x400, 0x7f, 0x3, 0x52f5, 0x7, 0x3, 0x3, 0x3, 0x1ff, 0x935, 0xe, 0xf3, 0x401, 0x6, 0x3, 0x0, 0x6, 0x3, 0x5, 0x4, 0x40, 0x80000001, 0x4, 0xff, 0x2, 0x884, 0x2, 0x4, 0xff, 0x6, 0x84000000, 0xa1, 0xb, 0x8, 0x1ff, 0xfff, 0x8, 0xfffffff9, 0x0, 0x5, 0xc, 0x4, 0x81, 0x0, 0x2, 0x1, 0x3ff, 0x0, 0x7, 0x6, 0x9, 0xb, 0x9, 0x8, 0x8, 0x7fff, 0xc484, 0x401, 0x800, 0x5, 0x1, 0x0, 0x3ff, 0x62, 0x5, 0x3cf3, 0x200, 0x4, 0x4, 0x3, 0xc, 0x7, 0xf8d, 0x0, 0x4, 0x6, 0x8, 0x3, 0x3, 0x1, 0xdd7, 0x9, 0x3ff, 0xfff, 0x30ae, 0x7, 0xeeb, 0xd68, 0x3, 0xa, 0x8, 0x720a7ede, 0x7, 0x4dc4, 0xff, 0xc0000, 0x0, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x8b3, 0x9, 0x3, 0x9, 0x1, 0x6, 0xb51, 0x5, 0xb2, 0x3, 0x4, 0x7ff, 0x800, 0x1, 0x4000000, 0x3ff, 0x8ae1, 0x7, 0x9, 0x9, 0x7, 0x7, 0xcc000000, 0x3, 0xfffffff7, 0x6, 0xa873, 0x7, 0x0, 0x100, 0x80000001, 0x5, 0x9, 0xc, 0x4, 0xffffffff, 0x9, 0x81, 0x4, 0x9, 0xc8, 0x1, 0x7, 0x3ff, 0x2, 0x1, 0x7, 0x80000001, 0x5, 0xaad, 0x1, 0x1, 0xd, 0x6, 0xd5b, 0x63c8, 0x2, 0x200, 0xd2a, 0x7, 0x7, 0x1, 0x0, 0x5ae, 0x8, 0x51edbddb, 0x4, 0x9, 0x1ff, 0x7, 0xe23488f, 0x6, 0x11, 0x10001, 0xd, 0x3, 0x7, 0x1, 0x4, 0x80, 0x1723c039, 0x7, 0x200, 0xfffffff7, 0x7, 0x5, 0x5, 0x7fff, 0xfffffffd, 0x0, 0x0, 0x2, 0x4, 0x9, 0x6, 0x2, 0x7, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7, 0x7f, 0x54, {0x5, 0x2, 0x5, 0x6, 0x5, 0x803}, {0x4, 0x0, 0x3, 0x7, 0x4, 0x5}, 0x2, 0x8000, 0x26a0}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x7, 0x7, 0x9, 0x6, {0x8, 0x1, 0xe8fa, 0xa4, 0x4, 0x2}, {0x40, 0x0, 0x7, 0xf, 0x845, 0xffff}, 0xff, 0x7, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x4, 0x9, 0x0, {0x7, 0x2, 0x7, 0x1, 0x200, 0x8}, {0xcd, 0x2, 0xd, 0xffff, 0x6e8, 0x1}, 0x0, 0x4, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x8000, 0x108, 0x2, 0x8, 0x7, 0x0, 0x10, 0x6, 0x81, 0x10000000, 0xfffffe00, 0x2, 0xc, 0xdea, 0x8, 0x3, 0x7, 0x8, 0x6, 0x1, 0x4, 0x2, 0x4, 0x0, 0xb85, 0x1, 0x2, 0x7a09, 0x0, 0x6, 0xffffff01, 0xaf, 0x2, 0x34, 0xffffff7f, 0x4000, 0x4, 0x40, 0x70, 0x60, 0x1, 0x1, 0x7fff, 0xffffff00, 0xf, 0x8, 0x3, 0x1, 0x1, 0xa, 0x1, 0x6, 0x0, 0x755, 0x1, 0x7, 0xffffffff, 0x8, 0xf, 0xff, 0x1, 0x7, 0x9, 0x9, 0xfffff47b, 0xca2622f4, 0x9, 0xb, 0x7, 0xfffffff7, 0x0, 0x9, 0x9, 0x7, 0x1, 0x9, 0x340, 0x4, 0xfffffbff, 0x4, 0xfffffc00, 0x3e5, 0x56, 0x800, 0x1, 0x2a, 0x1, 0xe, 0x764, 0xa0000000, 0xe, 0xd695, 0x2, 0x7, 0x8001, 0x6, 0x80000000, 0x2dbe, 0x1, 0x8000, 0x3b2, 0x7, 0x4070, 0x7, 0x200, 0x71, 0x3, 0x0, 0x70, 0x8000, 0x1ff, 0x8, 0x0, 0x5, 0x8001, 0x3, 0xbde, 0x5, 0x3, 0x400, 0xaac7, 0xfffeffff, 0x5, 0x7, 0x2, 0x0, 0x7, 0x5, 0x7ff, 0xb, 0x4, 0xa6, 0x5, 0x9, 0x0, 0x9, 0x3, 0xffffffff, 0x8, 0x4, 0xffff0230, 0x8, 0x1, 0x4, 0x9, 0x9, 0x8, 0x0, 0x8324, 0x7, 0x5, 0x7, 0x9, 0x7f, 0x0, 0x400000, 0x2, 0x8, 0x1, 0x866, 0x200, 0x7, 0x4, 0xb8eb, 0x3, 0x5, 0x7f, 0x2, 0xffff, 0x80000000, 0x6, 0xfffffffc, 0x1, 0x8, 0x0, 0x1, 0x9, 0x8000, 0xbab, 0x7, 0x9, 0x2800, 0xe, 0xe, 0xf477, 0x6, 0xc92, 0x80, 0x3001, 0xb, 0xfc, 0x5, 0xffffffff, 0x4f2d, 0x9, 0x0, 0x3, 0x9, 0x2, 0x8484, 0x6, 0xfffffff7, 0x0, 0x2, 0x68fe, 0x841c, 0x2, 0xe4a0, 0x43a, 0x9997, 0xab, 0x6, 0xb, 0x4, 0x0, 0x7, 0x9, 0x6, 0x40, 0x200, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x2a4d, 0x4, 0x0, 0x3, 0x4, 0x8, 0x4, 0xadde, 0x8, 0x0, 0x4, 0x1ff, 0x0, 0x3, 0x8, 0x95, 0x3, 0x0, 0x5000, 0xb71, 0x800, 0x8, 0xfff, 0x5, 0xfffffffd, 0x9, 0x9, 0x80000001, 0x8, 0x1729]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x7d5, 0x7fffffff, 0x3, {0x0, 0x0, 0x2, 0x2, 0x9, 0x1ff}, {0x5, 0x0, 0x4, 0x4, 0x9, 0xcbd}, 0xfffffa59, 0x80000001, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0xef, 0x6, "79c2879fdd26be05ee68d0416f430eff5c8bacb9a908b189e50c754450268e9832e6f252180049398eb85776b839d8c4c8a3ef29b7067ac4f97aa80419ffb7d897d6c604d1eeade14b70854995147daacffbb561b7114e207c97fc4c5e3eafeb8eb40239039881deaca770b80c252868fafc362ff2139dcac8d9806c1ed2deaa8bb469ccb0ae582a45515fb0964104efbeedf282b1840692e63938eea0ed925c5c11062ec4c27ae9686ebcecd94621d6701e47de501da859277025091177b8dd337f45c9a086d74170218c23a61bcc8b1e390c83abe1474680d7ba6610a8e01c241c9b6820870b99c12176"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x24cc}, 0x1, 0x0, 0x0, 0x4898}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.821801366s ago: executing program 2 (id=37): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000803f0008000000000000000000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000060000000400000001000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000f9ffffff0e0000001f8b000000000200", @ANYRES32=r2, @ANYBLOB="0400000000000000000000000000000000000000784b3575eb2090aa1af4d33984ce91d2a6e93bea52f89dbe7fe00637c13f140af4f47ff27c717f9ac2ee850ea35501809b6ec0c8fc1f17497134f38a2f60a5680a0a57b072de86ad0fbbdda796c897c1ae2e3b979f50cf53497622055a1628a273539e43dcfdb36a6082791039b8a3648a824abaefe140cfe3563bf252f47ace16b6bebb819d1360359ce6783d1b0670eba9afc177cab880072f13483eef3471020a58961d1c51", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/21], 0x50) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xe3, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x5517, 0x10000, 0xffffffff, 0x1, 0x2, 0x20005, 0x3c, 0x0, 0x8b73, 0x0, 0x20800007}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d61"]) 3.747953102s ago: executing program 1 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf1}, 0x94) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000780), 0x15000002) clock_gettime(0x0, &(0x7f0000000280)) r0 = socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.834388584s ago: executing program 2 (id=49): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x8]}, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x24060400) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 2.760270261s ago: executing program 2 (id=50): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwrite64(r3, 0x0, 0x0, 0x180) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 2.707097525s ago: executing program 1 (id=51): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) accept(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000000)=0x80) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x103100) dup3(r3, r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 2.170393158s ago: executing program 0 (id=55): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.169290398s ago: executing program 0 (id=57): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pipe2(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.1393656s ago: executing program 0 (id=59): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000803f0008000000000000000000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000000060000000400000001000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x100000000000000}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000f9ffffff0e0000001f8b000000000200", @ANYRES32=r2, @ANYBLOB="0400000000000000000000000000000000000000784b3575eb2090aa1af4d33984ce91d2a6e93bea52f89dbe7fe00637c13f140af4f47ff27c717f9ac2ee850ea35501809b6ec0c8fc1f17497134f38a2f60a5680a0a57b072de86ad0fbbdda796c897c1ae2e3b979f50cf53497622055a1628a273539e43dcfdb36a6082791039b8a3648a824abaefe140cfe3563bf252f47ace16b6bebb819d1360359ce6783d1b0670eba9afc177cab880072f13483eef3471020a58961d1c51", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/21], 0x50) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xe3, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x5517, 0x10000, 0xffffffff, 0x1, 0x2, 0x20005, 0x3c, 0x0, 0x8b73, 0x0, 0x20800007}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d61"]) 1.395839349s ago: executing program 4 (id=60): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000004c0)="cdac3cc08b7447d512f2f48e0989156deafe2fc557ecf1772d98d722f3119e8f4cdc140e9230102139205a4f52577cde90040d5621efcbe5343b5f9e6aa92882fbbdfbd7f3298cc00e679dc3eb1940eaaeea0cbe8bf36950e26a8a525e0b3bb3d9a287343b0fd9abe9cca4b5cfa893a4520ef518373ad10771ea6fd548bfe726cb3bfb542385eff375ab12313b490a7784bb18d9f7a230dc1f75789869b48c129e", &(0x7f0000000380)=""/111, 0x0, &(0x7f0000000800)="6cdf76d9151071e9fd846aec44d132d978146c03a5e93898283fd3e9d4a437baf9866e095cd0b1e328dc3acd6738b19a56a4a47c5a7d207a54c5fd4aefd340d0118c166a5b5a697450705c135b7ae29587b7333eea0f161315ece2256caa0ac64666b135be60e8905b981a4502f0ae7aa812d8e5133f2f05c2bd991ceae7d6be5ea2e7424889b2a269f5122e209e3876d6a215e165a91b8b67564a9b5f7165ba95f603da0fc85a89634c324d70bb23a60cbf8d0dcac87299be65f4e2985bef42c49919068d7149540b47", 0x5}, 0x38) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) 1.394807869s ago: executing program 2 (id=62): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) sysinfo(&(0x7f0000000540)=""/145) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f8308c000000000005000400000000000080000000f60000000006bd50132b5fa2690039d973dac42ef1055d333b507d21ca6f916505993cf5cb542492ed21813c"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x0, 0x4, 0x10000001, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 1.271067189s ago: executing program 0 (id=65): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.020352739s ago: executing program 3 (id=67): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_selinux(r3, &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x1) r4 = dup(r1) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x11, "d36242681a"}, 0x7, 0x1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 993.734941ms ago: executing program 3 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0) shutdown(r0, 0x1) 958.880164ms ago: executing program 4 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x9}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), 0x0}, 0x20) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 863.919952ms ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f00000008c0)="57aa42327124fb46bbaee29fdc91b5de4a3a7187f819bd15940ce3edba669b0ba98e64568103d4edf70c7d54c316d50d702244183c41193f22b21e4197a649210bbbf5bea01590b653f868db1384f4ec47a69c097e36fb38bad7c885acdef3bd5a02f543a197081a1b57a729615e8cb0d676d72b5c36192cd14d1ddede41ae7f33743690c0978d7fbefd6ea0d58d118d286c1f159246e49a2de90a"}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x37a8, &(0x7f0000000840)={0x0, 0xb8de, 0x186a, 0x0, 0x340}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) clock_getres(0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = dup(r5) write$9p(r6, &(0x7f0000000580), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 790.798267ms ago: executing program 0 (id=71): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) write$selinux_access(r1, &(0x7f0000000080)={'system_u:object_r:restorecond_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xa}, 0x65) fcntl$getownex(r0, 0x10, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x7}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfd, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x4, 0x9f4, 0x14, @empty, @local, 0x11, 0x40, 0x1ff, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sysinfo(&(0x7f0000000ec0)=""/187) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 746.36296ms ago: executing program 4 (id=72): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pipe2(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 606.943332ms ago: executing program 0 (id=73): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 606.665962ms ago: executing program 3 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8a81, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 606.208572ms ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, r4, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 480.702242ms ago: executing program 4 (id=76): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000803f0008000000000000000000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="fdffffff01000000040000000800"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000f9ffffff0e0000001f8b000000000200", @ANYRES32=r2, @ANYBLOB="0400000000000000000000000000000000000000784b3575eb2090aa1af4d33984ce91d2a6e93bea52f89dbe7fe00637c13f140af4f47ff27c717f9ac2ee850ea35501809b6ec0c8fc1f17497134f38a2f60a5680a0a57b072de86ad0fbbdda796c897c1ae2e3b979f50cf53497622055a1628a273539e43dcfdb36a6082791039b8a3648a824abaefe140cfe3563bf252f47ace16b6bebb819d1360359ce6783d1b0670eba9afc177cab880072f13483eef3471020a58961d1c51", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/21], 0x50) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0xe3, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2}, 0x5517, 0x10000, 0xffffffff, 0x1, 0x2, 0x20005, 0x3c, 0x0, 0x8b73, 0x0, 0x20800007}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72744de93d3078303030303030303030303d30303030302c7375626a5f726f6c653d7472616e733d72646d61"]) 408.779297ms ago: executing program 2 (id=77): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x407, 0x100000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) 878.58µs ago: executing program 3 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e499419be4f9142da0bc21470e441225642855b5f2b4b67efbffefdf98328de9434031748589b763d46d14810acc5f7000000e3ffffff000000000000000000000020"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 369.13µs ago: executing program 3 (id=79): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) close_range(r0, r1, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x8000001b) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r7, 0x1) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 3 (id=80): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 22.026426][ T29] audit: type=1400 audit(1756371072.977:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.027281][ T3289] cgroup: Unknown subsys name 'net' [ 22.049140][ T29] audit: type=1400 audit(1756371072.977:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.076487][ T29] audit: type=1400 audit(1756371073.007:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.209641][ T3289] cgroup: Unknown subsys name 'cpuset' [ 22.215755][ T3289] cgroup: Unknown subsys name 'rlimit' [ 22.325434][ T29] audit: type=1400 audit(1756371073.277:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.348720][ T29] audit: type=1400 audit(1756371073.277:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.371512][ T29] audit: type=1400 audit(1756371073.277:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.378950][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.391857][ T29] audit: type=1400 audit(1756371073.277:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.420615][ T29] audit: type=1400 audit(1756371073.297:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.445375][ T29] audit: type=1400 audit(1756371073.297:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.454540][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.468569][ T29] audit: type=1400 audit(1756371073.357:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.294149][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.357313][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.395674][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.402826][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.409941][ T3302] bridge_slave_0: entered allmulticast mode [ 24.416205][ T3302] bridge_slave_0: entered promiscuous mode [ 24.424728][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.431858][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.439121][ T3302] bridge_slave_1: entered allmulticast mode [ 24.445459][ T3302] bridge_slave_1: entered promiscuous mode [ 24.476612][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.493367][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.525592][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.532728][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.540038][ T3303] bridge_slave_0: entered allmulticast mode [ 24.546374][ T3303] bridge_slave_0: entered promiscuous mode [ 24.553981][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.561045][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.568136][ T3303] bridge_slave_1: entered allmulticast mode [ 24.574558][ T3303] bridge_slave_1: entered promiscuous mode [ 24.580684][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.592604][ T3302] team0: Port device team_slave_0 added [ 24.610499][ T3302] team0: Port device team_slave_1 added [ 24.643922][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.660041][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.666968][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.692964][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.706023][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.713051][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.738948][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.755374][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.776351][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 24.807460][ T3303] team0: Port device team_slave_0 added [ 24.815019][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.822230][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.829482][ T3311] bridge_slave_0: entered allmulticast mode [ 24.835755][ T3311] bridge_slave_0: entered promiscuous mode [ 24.851743][ T3303] team0: Port device team_slave_1 added [ 24.861597][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.868678][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.875873][ T3311] bridge_slave_1: entered allmulticast mode [ 24.882124][ T3311] bridge_slave_1: entered promiscuous mode [ 24.892969][ T3302] hsr_slave_0: entered promiscuous mode [ 24.899057][ T3302] hsr_slave_1: entered promiscuous mode [ 24.917580][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.926495][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.933499][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.959425][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.970363][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.977342][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.003375][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.032376][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.049929][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.086226][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.093289][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.100388][ T3308] bridge_slave_0: entered allmulticast mode [ 25.106815][ T3308] bridge_slave_0: entered promiscuous mode [ 25.126405][ T3303] hsr_slave_0: entered promiscuous mode [ 25.132494][ T3303] hsr_slave_1: entered promiscuous mode [ 25.138226][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 25.143952][ T3303] Cannot create hsr debugfs directory [ 25.151403][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.158606][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.165800][ T3308] bridge_slave_1: entered allmulticast mode [ 25.172071][ T3308] bridge_slave_1: entered promiscuous mode [ 25.178714][ T3311] team0: Port device team_slave_0 added [ 25.189606][ T3311] team0: Port device team_slave_1 added [ 25.225213][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.232303][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.239641][ T3310] bridge_slave_0: entered allmulticast mode [ 25.245935][ T3310] bridge_slave_0: entered promiscuous mode [ 25.254673][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.261790][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.268945][ T3310] bridge_slave_1: entered allmulticast mode [ 25.275287][ T3310] bridge_slave_1: entered promiscuous mode [ 25.286268][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.293268][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.319228][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.331257][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.354861][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.364276][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.371251][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.397180][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.416413][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.432974][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.474476][ T3308] team0: Port device team_slave_0 added [ 25.487232][ T3310] team0: Port device team_slave_0 added [ 25.495539][ T3310] team0: Port device team_slave_1 added [ 25.502614][ T3308] team0: Port device team_slave_1 added [ 25.512558][ T3311] hsr_slave_0: entered promiscuous mode [ 25.518470][ T3311] hsr_slave_1: entered promiscuous mode [ 25.524252][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 25.530032][ T3311] Cannot create hsr debugfs directory [ 25.571586][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.578573][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.604487][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.615508][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.622511][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.648393][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.659573][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.666524][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.692429][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.711705][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.718687][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.744569][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.785218][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.795340][ T3308] hsr_slave_0: entered promiscuous mode [ 25.801277][ T3308] hsr_slave_1: entered promiscuous mode [ 25.807014][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 25.812761][ T3308] Cannot create hsr debugfs directory [ 25.827745][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.837066][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.845694][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.855702][ T3310] hsr_slave_0: entered promiscuous mode [ 25.861822][ T3310] hsr_slave_1: entered promiscuous mode [ 25.867487][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 25.873257][ T3310] Cannot create hsr debugfs directory [ 25.916251][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.937321][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.948399][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.977114][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.034359][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.056830][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.065725][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.074102][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.098023][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.106581][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.115137][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.123605][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.163795][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.172129][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.181775][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.191228][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.198332][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.209960][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.218293][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.232449][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.245177][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.268740][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.282689][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.291032][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.298046][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.311268][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.318311][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.334661][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.359418][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.367546][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.386096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.393183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.401969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.409166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.422226][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.430622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.437668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.453724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.460797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.469250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.476300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.488524][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.495586][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.512789][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.563914][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.595051][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.630865][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.637949][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.646625][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.653772][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.679446][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.688602][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.708159][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.737434][ T3302] veth0_vlan: entered promiscuous mode [ 26.761030][ T3302] veth1_vlan: entered promiscuous mode [ 26.794894][ T3302] veth0_macvtap: entered promiscuous mode [ 26.811082][ T3302] veth1_macvtap: entered promiscuous mode [ 26.837746][ T3310] veth0_vlan: entered promiscuous mode [ 26.846470][ T3310] veth1_vlan: entered promiscuous mode [ 26.868513][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.886233][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.894720][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.904140][ T3303] veth0_vlan: entered promiscuous mode [ 26.912178][ T3303] veth1_vlan: entered promiscuous mode [ 26.930516][ T2310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.942677][ T2310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.951807][ T3310] veth0_macvtap: entered promiscuous mode [ 26.961292][ T2310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.970948][ T3303] veth0_macvtap: entered promiscuous mode [ 26.979587][ T3310] veth1_macvtap: entered promiscuous mode [ 26.989741][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.002430][ T3303] veth1_macvtap: entered promiscuous mode [ 27.008808][ T2310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.028450][ T3311] veth0_vlan: entered promiscuous mode [ 27.037478][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.056378][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 27.056390][ T29] audit: type=1400 audit(1756371078.007:81): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.OdQfgl/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.063890][ T3311] veth1_vlan: entered promiscuous mode [ 27.087504][ T29] audit: type=1400 audit(1756371078.007:82): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.097597][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.114087][ T29] audit: type=1400 audit(1756371078.007:83): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.OdQfgl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.114157][ T29] audit: type=1400 audit(1756371078.007:84): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.126097][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.147932][ T29] audit: type=1400 audit(1756371078.007:85): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.OdQfgl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.176040][ T3311] veth0_macvtap: entered promiscuous mode [ 27.176886][ T29] audit: type=1400 audit(1756371078.007:86): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.OdQfgl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.207479][ T3311] veth1_macvtap: entered promiscuous mode [ 27.209158][ T29] audit: type=1400 audit(1756371078.007:87): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.263136][ T29] audit: type=1400 audit(1756371078.197:88): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.267753][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.285847][ T29] audit: type=1400 audit(1756371078.197:89): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.295731][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.333023][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.351636][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.360066][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370377][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.380334][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.391424][ T29] audit: type=1400 audit(1756371078.347:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.408603][ T3308] veth0_vlan: entered promiscuous mode [ 27.438983][ C0] hrtimer: interrupt took 26728 ns [ 27.452322][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.476493][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.486119][ T3308] veth1_vlan: entered promiscuous mode [ 27.506234][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.530804][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.541569][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.554198][ T3308] veth0_macvtap: entered promiscuous mode [ 27.569852][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.578617][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.595164][ T3308] veth1_macvtap: entered promiscuous mode [ 27.606642][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.616133][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.628414][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.672238][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.698869][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.713087][ T3482] loop4: detected capacity change from 0 to 1024 [ 27.750511][ T3486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.767285][ T3482] EXT4-fs: Ignoring removed bh option [ 27.930723][ T3488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 27.951087][ T3482] EXT4-fs: inline encryption not supported [ 27.957710][ T3482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 27.996888][ T3482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 28.032854][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.5: lblock 2 mapped to illegal pblock 2 (length 1) [ 28.047969][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.5: lblock 0 mapped to illegal pblock 48 (length 1) [ 28.048180][ T3482] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5: Failed to acquire dquot type 0 [ 28.048351][ T3482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 28.048403][ T3482] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5: mark_inode_dirty error [ 28.048490][ T3482] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 28.048516][ T3482] EXT4-fs (loop4): 1 orphan inode deleted [ 28.048899][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.075250][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.075284][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.091504][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm kworker/u8:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 28.092478][ T31] EXT4-fs error (device loop4): ext4_write_dquot:6917: comm kworker/u8:1: Failed to commit dquot type 0 [ 28.111209][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.212578][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 28.212712][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 28.235326][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 28.274089][ T3494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'. [ 28.443464][ T3500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 28.462676][ T3500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 28.480464][ T3500] Zero length message leads to an empty skb [ 28.572255][ T3507] netlink: 'syz.1.11': attribute type 27 has an invalid length. [ 28.580070][ T3507] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 28.587628][ T3507] bridge0: port 1(bridge_slave_0) entered learning state [ 28.711780][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 28.784960][ T3513] syz.4.14 (3513) used greatest stack depth: 10176 bytes left [ 28.936789][ T3531] dummy0: entered promiscuous mode [ 28.942276][ T3531] vlan2: entered promiscuous mode [ 29.611612][ T3558] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 29.656509][ T3560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 29.665303][ T3560] netlink: 'syz.3.27': attribute type 30 has an invalid length. [ 29.680508][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.695366][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.704249][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.713879][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.732216][ T3560] syz.3.27 (3560) used greatest stack depth: 10080 bytes left [ 29.870859][ T3569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.879815][ T3569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.891619][ T3569] dummy0: entered promiscuous mode [ 29.897419][ T3569] team0: entered promiscuous mode [ 29.902481][ T3569] team_slave_0: entered promiscuous mode [ 29.908209][ T3569] team_slave_1: entered promiscuous mode [ 29.950033][ T3573] loop1: detected capacity change from 0 to 128 [ 29.959673][ T3573] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.975680][ T3573] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.080453][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 30.111183][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.337877][ T3601] loop2: detected capacity change from 0 to 128 [ 30.344577][ T3601] ======================================================= [ 30.344577][ T3601] WARNING: The mand mount option has been deprecated and [ 30.344577][ T3601] and is ignored by this kernel. Remove the mand [ 30.344577][ T3601] option from the mount to silence this warning. [ 30.344577][ T3601] ======================================================= [ 30.382075][ T3601] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.394494][ T3601] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.413715][ T3601] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.294343][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.828433][ T3662] loop0: detected capacity change from 0 to 1024 [ 31.835392][ T3662] ext3: Bad value for 'errors' [ 31.856588][ T3662] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.895849][ T3669] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.998122][ T3682] loop0: detected capacity change from 0 to 128 [ 32.010248][ T3682] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.024441][ T3682] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.037735][ T3682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.739351][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 32.739363][ T29] audit: type=1326 audit(1756371083.697:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.769609][ T29] audit: type=1326 audit(1756371083.727:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.792840][ T29] audit: type=1326 audit(1756371083.727:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.815967][ T29] audit: type=1326 audit(1756371083.727:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.856546][ T29] audit: type=1326 audit(1756371083.737:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.879827][ T29] audit: type=1326 audit(1756371083.737:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.902959][ T29] audit: type=1326 audit(1756371083.737:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.926222][ T29] audit: type=1326 audit(1756371083.737:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.940943][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.949710][ T29] audit: type=1326 audit(1756371083.797:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 32.981554][ T29] audit: type=1326 audit(1756371083.797:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ad04ebe9 code=0x7ffc0000 [ 33.030254][ T3704] __nla_validate_parse: 2 callbacks suppressed [ 33.030265][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 33.065338][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 33.085400][ T3708] tmpfs: Bad value for 'mpol' [ 33.429636][ T3722] team0 (unregistering): Port device team_slave_0 removed [ 33.445164][ T3722] team0 (unregistering): Port device team_slave_1 removed [ 33.537933][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 33.548455][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.561529][ T3730] bridge_slave_1 (unregistering): left allmulticast mode [ 33.568612][ T3730] bridge_slave_1 (unregistering): left promiscuous mode [ 33.575757][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.673691][ T3734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 33.782882][ T3739] capability: warning: `syz.2.77' uses deprecated v2 capabilities in a way that may be insecure [ 34.121079][ T3745] loop3: detected capacity change from 0 to 1024 [ 34.128035][ T3745] EXT4-fs: Ignoring removed orlov option [ 34.138051][ T3745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.256359][ T3749] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.269643][ T3748] ================================================================== [ 34.277734][ T3748] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 34.286936][ T3748] [ 34.289245][ T3748] write to 0xffff8881194085f8 of 4 bytes by task 3745 on cpu 0: [ 34.296863][ T3748] writeback_single_inode+0x14a/0x3e0 [ 34.302217][ T3748] sync_inode_metadata+0x5b/0x90 [ 34.307136][ T3748] generic_buffers_fsync_noflush+0xd9/0x120 [ 34.313006][ T3748] ext4_sync_file+0x1ab/0x690 [ 34.317687][ T3748] vfs_fsync_range+0x10d/0x130 [ 34.322433][ T3748] ext4_buffered_write_iter+0x34f/0x3c0 [ 34.327967][ T3748] ext4_file_write_iter+0x383/0xf00 [ 34.333148][ T3748] iter_file_splice_write+0x663/0xa60 [ 34.338515][ T3748] direct_splice_actor+0x153/0x2a0 [ 34.343602][ T3748] splice_direct_to_actor+0x30f/0x680 [ 34.348950][ T3748] do_splice_direct+0xda/0x150 [ 34.353705][ T3748] do_sendfile+0x380/0x650 [ 34.358105][ T3748] __x64_sys_sendfile64+0x105/0x150 [ 34.363285][ T3748] x64_sys_call+0x2bb0/0x2ff0 [ 34.367937][ T3748] do_syscall_64+0xd2/0x200 [ 34.372423][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.378391][ T3748] [ 34.380698][ T3748] read to 0xffff8881194085f8 of 4 bytes by task 3748 on cpu 1: [ 34.388248][ T3748] generic_buffers_fsync_noflush+0x80/0x120 [ 34.394129][ T3748] ext4_sync_file+0x1ab/0x690 [ 34.398794][ T3748] vfs_fsync_range+0x10d/0x130 [ 34.403536][ T3748] ext4_buffered_write_iter+0x34f/0x3c0 [ 34.409065][ T3748] ext4_file_write_iter+0x383/0xf00 [ 34.414260][ T3748] iter_file_splice_write+0x663/0xa60 [ 34.419629][ T3748] direct_splice_actor+0x153/0x2a0 [ 34.424717][ T3748] splice_direct_to_actor+0x30f/0x680 [ 34.430071][ T3748] do_splice_direct+0xda/0x150 [ 34.434828][ T3748] do_sendfile+0x380/0x650 [ 34.439239][ T3748] __x64_sys_sendfile64+0x105/0x150 [ 34.444430][ T3748] x64_sys_call+0x2bb0/0x2ff0 [ 34.449093][ T3748] do_syscall_64+0xd2/0x200 [ 34.453594][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.459479][ T3748] [ 34.461783][ T3748] value changed: 0x00000038 -> 0x00000002 [ 34.467476][ T3748] [ 34.469779][ T3748] Reported by Kernel Concurrency Sanitizer on: [ 34.475921][ T3748] CPU: 1 UID: 0 PID: 3748 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.485449][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.495490][ T3748] ================================================================== [ 34.676514][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.879174][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state