last executing test programs: 1m22.593836879s ago: executing program 4 (id=872): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{0x0}], 0x1, 0x833, 0xffff) creat(&(0x7f0000000300)='./file0\x00', 0x28) 1m22.526760494s ago: executing program 4 (id=873): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x210) 1m22.526188935s ago: executing program 4 (id=874): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xb80002, &(0x7f00000007c0)={[{@debug}, {@usrquota}, {@data_err_ignore}, {@acl}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@abort}, {@i_version}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b431f5dd9b4ae337bbf37b108c1ec26396567359e079aae967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, &(0x7f0000000340)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8=r3, @ANYBLOB="00000000000000000100000000000000000000007e4c9c8867f0d47a0636b35d783d6a9990b1a6461301a35fd7adb6e1e0294d856554e9ffa09ee5964f3229509751c8d1ab1607b32cdf4e294e453c28059ad889d64ca6518fd6102626212d479440648d9f185d35643c2f208bc72ef89950692e225f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000007000100000000010000020000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000004000b702000000000000850000008400000097000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getrlimit(0xc, 0x0) r5 = shmget$private(0x0, 0x400000, 0x20, &(0x7f0000c00000/0x400000)=nil) shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) r6 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) waitid(0x1, r6, 0x0, 0x4, 0x0) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000140)=""/112) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 1m22.376568868s ago: executing program 4 (id=877): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) close(r2) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c80)={{0x0, 0xa, 0x8, 0x2, 0x8000000000000000, 0x5c, 0x5, 0x9, 0x46, 0x8, 0x1, 0x3, 0x7, 0x8, 0x8000000000000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{r4, 0x4, 0x10001, 0x4, 0x7ff, 0x400, 0x6, 0xf, 0xe73, 0x1, 0x8, 0xa, 0x81, 0x9, 0xbe}, 0x20, [0x0, 0x0, 0x0, 0x0]}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002d0001002abd70000000000008000000", @ANYRES32=r6, @ANYBLOB="0b00008000101e00800000000000008088000000"], 0x2c}], 0x1}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r8, r8) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x822400, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@pcr={'pcr', 0x3d, 0x38}}, {@measure}, {@fowner_lt={'fowner<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')*\x1c).*}\x97&:#'}}]}) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) (async) creat(&(0x7f0000000000)='./file0\x00', 0x40) (async) close(r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c80)={{0x0, 0xa, 0x8, 0x2, 0x8000000000000000, 0x5c, 0x5, 0x9, 0x46, 0x8, 0x1, 0x3, 0x7, 0x8, 0x8000000000000000}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{r4, 0x4, 0x10001, 0x4, 0x7ff, 0x400, 0x6, 0xf, 0xe73, 0x1, 0x8, 0xa, 0x81, 0x9, 0xbe}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002d0001002abd70000000000008000000", @ANYRES32=r6, @ANYBLOB="0b00008000101e00800000000000008088000000"], 0x2c}], 0x1}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setreuid(r8, r8) (async) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x822400, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}], [{@pcr={'pcr', 0x3d, 0x38}}, {@measure}, {@fowner_lt={'fowner<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')*\x1c).*}\x97&:#'}}]}) (async) 1m22.268953218s ago: executing program 4 (id=881): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0xf6, r4}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r11 = syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2600000004"], 0x20) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000b0407e7000"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000090000000000000e0300000002000000090000000000000202230000003000fb8627741d5aed18080a1f6ff02cec27b108d356b407319b425e6669c01efffc991b8860bc165410703362fe40c8670465f2344de46164a413abfdebc022f73600e4a08514e903701e2e1b1c264a93c77e1a4c45d57d35720f67285d616abe92cf1b00bf1000f44dd0284a3e60c9192b2ddf944353a2e58775"], &(0x7f0000000300)=""/16, 0x37, 0x10, 0x0, 0xffffffff, 0x10000}, 0x28) r12 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) syz_clone(0x2009300, &(0x7f00000003c0)="dd8ca4e8ccf380f194bc977511fe15dc1b1ad3e71d8347dfc4d6ad1baab45bea7cfeda327ff39ae8309cce9f7ad4c4b4234c03c4e73ca14a3bf3898f3e335aa743a6", 0x42, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9a08db8d0768d7b3d176e99b2d40a73dca0168ac0ce962503cdaa63ff7cb34bff2d03f2b424cdb3ad3feaf25ce699fcfdf9e8dae0e63e6e4d5d7e827b998f69b40284cb1bab5e09dd01b4fcc7d01689249fb102a09e528deafb22d332f1445ca78562122e94338f182d9059b0ea5de361c69ab6a") fremovexattr(r12, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX=r11], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x18) 1m22.212886642s ago: executing program 4 (id=883): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x4, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x1a, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2000, 0x1) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000740)={0x0, 0x4, 0x2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b40)={0x1, 0x2, {0xde00000000000000, @struct={0xa8, 0x3}, r0, 0xffffffffffffffff, 0x100000000, 0x7, 0x2, 0x435, 0x88, @struct={0x3, 0x914}, 0x100, 0x401, [0x1, 0x3, 0xffffffff, 0xcd, 0x9, 0xe]}, {0xfffffffffffffffa, @struct={0xfffffc00, 0x9}, 0x0, 0x6, 0x7fffffff, 0x6, 0x1, 0x0, 0xf0, @usage=0x8, 0xfffffffc, 0x7ff, [0x9, 0x1, 0xfffffffffffffffe, 0x10001, 0xfff, 0xf7e]}, {0xffffffffffffffd9, @usage=0x9, 0x0, 0xa, 0x5, 0x100000000, 0x8, 0x1, 0x80, @usage=0xb, 0x401, 0x6, [0x8, 0x7, 0x6e87, 0x0, 0x4, 0x8]}, {0x9b9, 0x7ffb, 0x6}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mprotect(&(0x7f0000ff4000/0x2000)=nil, 0xfaff, 0xb) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x4e0480, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340), &(0x7f0000000440)=0x14) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x8) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1m18.152054631s ago: executing program 32 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x210) 1m8.460351948s ago: executing program 0 (id=1041): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x40, 0x3, 0xe, 0x7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff) creat(0x0, 0x28) 1m8.312016122s ago: executing program 0 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 1m8.267665735s ago: executing program 0 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 1m8.22087202s ago: executing program 0 (id=1051): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a5, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xb}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) fcntl$setlease(r4, 0x400, 0x2) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) syz_clone(0x80100000, &(0x7f00000001c0)="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", 0xfa, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000340)="10c5e6ee41419dda3daf6b29d911f1d9fde8dcf8a5af64653cfa1bc2726422bcb44b753057d96d5e1e6856c9f8350e687fd36455f17887dcbdac825869299fe7773194a3911d7fa634d5a74d426102aca6ade6db49fabf77f6bc00c6d9e6715624c474caed22ea38c1d07797a0ae038d71c2208beefd2013aeb43869443f646abfcc0990755e99033ca02f2b8aee34870299e0c73321399f7a8794812b9a65788e90c04807ebe9f3f30f06111df5363c3e6ba0f68ddb263938") (async) r8 = syz_clone(0x80100000, &(0x7f00000001c0)="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", 0xfa, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000340)="10c5e6ee41419dda3daf6b29d911f1d9fde8dcf8a5af64653cfa1bc2726422bcb44b753057d96d5e1e6856c9f8350e687fd36455f17887dcbdac825869299fe7773194a3911d7fa634d5a74d426102aca6ade6db49fabf77f6bc00c6d9e6715624c474caed22ea38c1d07797a0ae038d71c2208beefd2013aeb43869443f646abfcc0990755e99033ca02f2b8aee34870299e0c73321399f7a8794812b9a65788e90c04807ebe9f3f30f06111df5363c3e6ba0f68ddb263938") write$cgroup_pid(r0, &(0x7f00000000c0)=r8, 0x12) (async) write$cgroup_pid(r0, &(0x7f00000000c0)=r8, 0x12) writev(r7, &(0x7f0000001000)=[{&(0x7f0000000880)="76b0d8e7b4fbe83b9a3a82e0bbf91c1680d1f0b00633f12efc58b563dbdcfe39385fa5f25b4f44f77855053cd2c70c4b2f93a03ac5065ae95772c490638e6f2609cd625dcb26a8342315a054d59e843d7acd6cf3c414d1cee5b36208364ca1fd503e7f9f9e7c8b9ab7985616d5283e56db010e1021e45a2452e8ddd7966b3c4232e6015e47ed174b11e6c81d085fc43b5c85fb84ae756ad048a44c6c84414d1e045a67447a237ff927f9ef158987745861cf8b330f7c234aff1499be56651be1c7a1221477ae394445e5014caad4442312bca4e1a985351d4d02c64c53f617a08a415575046ffd74bf9f6af6653a442b4728c46a084d2e7cb4395afe46c77ed4ec78d92d2f23ca", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) sendfile(r7, r0, 0x0, 0x7fffeff9) (async) sendfile(r7, r0, 0x0, 0x7fffeff9) 1m8.125005068s ago: executing program 0 (id=1053): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='sys_enter\x00', r4, 0x0, 0x7fc}, 0x18) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd, 0x0, 0x0, 0x0, {0x842a}}) (async) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x13c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c35}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb88}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff54cf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3b6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89a}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x816}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0xde6c802f551bc066) 1m7.866168101s ago: executing program 0 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300)={0x0, 0x9}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) 1m7.810524046s ago: executing program 33 (id=1058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300)={0x0, 0x9}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) 1m7.0820064s ago: executing program 34 (id=883): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x4, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x1a, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2000, 0x1) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000740)={0x0, 0x4, 0x2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b40)={0x1, 0x2, {0xde00000000000000, @struct={0xa8, 0x3}, r0, 0xffffffffffffffff, 0x100000000, 0x7, 0x2, 0x435, 0x88, @struct={0x3, 0x914}, 0x100, 0x401, [0x1, 0x3, 0xffffffff, 0xcd, 0x9, 0xe]}, {0xfffffffffffffffa, @struct={0xfffffc00, 0x9}, 0x0, 0x6, 0x7fffffff, 0x6, 0x1, 0x0, 0xf0, @usage=0x8, 0xfffffffc, 0x7ff, [0x9, 0x1, 0xfffffffffffffffe, 0x10001, 0xfff, 0xf7e]}, {0xffffffffffffffd9, @usage=0x9, 0x0, 0xa, 0x5, 0x100000000, 0x8, 0x1, 0x80, @usage=0xb, 0x401, 0x6, [0x8, 0x7, 0x6e87, 0x0, 0x4, 0x8]}, {0x9b9, 0x7ffb, 0x6}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mprotect(&(0x7f0000ff4000/0x2000)=nil, 0xfaff, 0xb) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x4e0480, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340), &(0x7f0000000440)=0x14) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x8) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 57.9243179s ago: executing program 2 (id=1176): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f0000000080), 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$inet(0x2, 0x3, 0x7f) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x202, @broadcast}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x290) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') stat(&(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 57.784122622s ago: executing program 2 (id=1177): socket$kcm(0x10, 0x2, 0x0) 57.783777142s ago: executing program 2 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 57.776721973s ago: executing program 2 (id=1179): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000ebffffff000000000a7f10e1ce7b606421a9e3e82c480000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x110, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000740)=""/28, 0x1c}, {&(0x7f0000000bc0)=""/222, 0xde}], 0x3, &(0x7f0000000d00)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000006180)=[{&(0x7f0000001d80)=""/130, 0x82}, {&(0x7f0000001e40)=""/254, 0xfe}, {&(0x7f0000001f40)=""/226, 0xe2}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/147, 0x93}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000000780)=""/47, 0x2f}], 0xa, &(0x7f0000006240)=""/100, 0x64}, 0x7}], 0x2, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000065c0)={0x8, 0xb, &(0x7f0000006500)=ANY=[@ANYRESOCT=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000006440)=ANY=[@ANYRES64=r7, @ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000006400)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000ffdbdf2515100000090014007666617400000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048050}, 0x4) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = syz_clone(0x8100, &(0x7f0000000280)="127029a7e3d20b3e80ead64d4432c56d96c7e500f9d5be5c8b731079c4315068ffd84f2db4df4b92", 0x28, &(0x7f0000000300), &(0x7f00000005c0), &(0x7f0000000600)="cde094cb01eae0c1e8f70dec1cce425a18f0c3eb73ccb202b361ede7f4714b97849156a5dddd2407f495361ae2") sched_rr_get_interval(r8, &(0x7f0000000640)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100fffd0900010073797a300000000008000b40000000003800048034000180090001007866726d0000000024000280050003000100040008000440000000060800014000000015080002"], 0xd4}}, 0x4000040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x204400, 0x0) 57.678103531s ago: executing program 2 (id=1181): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="20002dbd7000fddbdf251000000008000700ffffff7f0800070008000000500001800800030001000000140002007369743000000000000000000000000008000300000000001400020074756e6c3000000000000000000000001400020076657468315f746f5f6873720000000008000800fb0d00000800070000010000"], 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000d93000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc03, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r5, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000440)) membarrier(0x10, 0x0) membarrier(0x40, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$isdn(0x22, 0x3, 0x25) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bind(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 57.656188554s ago: executing program 2 (id=1184): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000080000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 57.610192778s ago: executing program 35 (id=1184): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000080000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 36.623706432s ago: executing program 7 (id=1511): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117900000000008510000002000000850000003400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100008000000000000000001812007168cc09e5b153c6a04ec24b294a585873000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = getpgrp(0xffffffffffffffff) tkill(r2, 0x17) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000002c0)=""/49, 0x31}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r13}, 0x18) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 35.870554979s ago: executing program 7 (id=1519): r0 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f0000000280)={[{@user_xattr}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@jqfmt_vfsv0}, {@delalloc}, {@nolazytime}]}, 0x0, 0x448, &(0x7f0000000740)="$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") fadvise64(r1, 0xf, 0x7, 0x0) r2 = syz_clone(0xb240080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r6 = timerfd_create(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ptrace(0x8, r2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r6, @ANYRES64=r4, @ANYRESOCT=0x0, @ANYRES32=r10, @ANYRESOCT=r7, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='rss_stat\x00', r11}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) waitid(0x1, r2, 0x0, 0x4, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020709a07000000000000207b1af8ff00000000bfa100000000000007010000f8ffffffb700000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64=r12, @ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) sendmsg$NFT_BATCH(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 35.311608289s ago: executing program 7 (id=1527): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r3], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073ffffff7f0000000900010073797a30000000000900020073797a32"], 0x250}, 0x1, 0x0, 0x0, 0x8090}, 0x4000800) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073ffffff7f0000000900010073797a30000000000900020073797a32"], 0x250}, 0x1, 0x0, 0x0, 0x8090}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYRESOCT=r5, @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 35.039868722s ago: executing program 7 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x98, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_pidfd_open(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x13}, 0x2, {0x7, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 35.021488324s ago: executing program 36 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x48470, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x2040, 0xfffc, 0x0, 0x6, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x98, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) syz_pidfd_open(r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x13}, 0x2, {0x7, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 20.92526988s ago: executing program 9 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000050000000060a010200000000000000000500000008000b400000000028000480240001800b0001007470726f7879000014000280080001420000000a08000340000000010900010073797a30"], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20000400) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x2, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000169, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808001c0800000002fb0000000000008500000300000000f7ffffff00000000", @ANYRES64=r9, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES8=r6, @ANYRESOCT=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000d00)=r10, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 20.608736069s ago: executing program 9 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b40)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000b00)='syzkaller\x00', 0x20, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = epoll_create1(0x80000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8f}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9a61}]}, &(0x7f0000000340)='GPL\x00', 0x10000, 0xda, &(0x7f0000000880)=""/218, 0x40f00, 0x4c, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x9, 0x81, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r0], 0x0, 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r7}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x9, &(0x7f0000000680)=[{0x2000, 0x9, 0x2, 0x5e1c0973}, {0x1, 0x5e, 0x7, 0x2000}, {0xfff9, 0x5, 0x7f, 0x7}, {0x101, 0x1, 0x11, 0xac5a}, {0xc, 0x3, 0x2, 0x3}, {0x7, 0xe, 0x5, 0xb1e1}, {0x80, 0x4f, 0x8, 0x1ff}, {0xd1, 0x9e, 0x5, 0x3}, {0x4, 0x2, 0x0, 0x101}]}) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x30d}]}]}, 0x20}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r9 = syz_clone(0xe9220f00, 0x0, 0x93279f195ece929a, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSIGACCEPT(r10, 0x80047456, 0x100000001ffffffd) getpgid(r9) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000380)={0x173, 0x4, 0x0, 0x2}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 20.489059559s ago: executing program 9 (id=1698): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)={@void, @void, @eth={@broadcast, @link_local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "f78597f14aeafc9529712a9bb84de804b45276f42cebfab53949192593c1b14f", "808d776bd15684533c8dc06be1efd6eb", {"e3a7680c689f194e40a36e6c2886b20e", "a3ab73c5648e791686ba9f6517d926eb"}}}}}}}}, 0x8e) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendmsg$kcm(r2, &(0x7f0000000500)={&(0x7f0000000040)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="f1224cf1ee82c44581c2f23b376029dd34317a5367f4495f9105ea4a8d745bf03102808e88dc4e7d237d60c5e7df18898bf3836ce5aa4ee9c5b732d7c066208d9abbd0e4c394e60004", 0x49}, {&(0x7f00000001c0)="9777e457ba762bded8ff6febd26dd065d4028487822fb783d2b8fb24a42c1005bf4f6e7d2d2557a81c0c82d70a5e6bb9559c11e8407953f3016d96fae57d887f339b51e7afd6684bf102412380aca6350505f7b4a31bb0ae439af2de3f86529bd3c443d81f699de6d68b", 0x6a}], 0x2, &(0x7f0000000340)=[{0xc8, 0x112, 0x5, "e0052c716a84927749c2d6c050ef935934a38fdc42d60f440bf6b9230e9968f2a8de9cbb10351c5c3a613aa1a48768381a49d9d2254cea0bf7c0cd8688c6edea5c7bbe7878aa79e2c6c51cf517e455d99850aae253162c70cd042700d3321a937a8c35a28c48f0ab24b00ade04e48906665ca95ac0a5384e25292eb08af57ad38fb69f1d10817aff8f9fe5413cb44ddd4a784cfe9a827db0705db7cda2e65c2660e68b7ea66c528754f1a4d8a1f9d5a1e68beea0"}, {0x10, 0x107, 0x5}, {0xb8, 0x109, 0x200, "2b0fe201e5b5937a90ed6dc894385940a53bfdaea56fb57666d0e43d736811f7120341a4abaf5f367ec4b8e5de7b47f7ae5761bf74c6d9547f3c7f3203b98913281b8748c2dd89f05d54221c8f603ed117634305e4e315c63417cc2b8e8bf703bb83484915f50a05f4883f08cc94538e95cbdc156ce135c304dae4435df674335ad3c8fa59e17e012c4f88b037e0fd89967bdd9128beec5e685fac5dda1944f764aa22644afb78"}], 0x190}, 0x8000) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) writev(r3, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5", 0x2}], 0x1) 20.402317626s ago: executing program 9 (id=1703): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000010000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000001340)='mm_lru_insertion\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) unshare(0x6a040000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r6, r5, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) 19.836390677s ago: executing program 9 (id=1714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7012fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) 19.535059293s ago: executing program 9 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x72, 0x4) (async) sendto$inet6(r1, &(0x7f0000000080)="512138aeb6879cd02f3e065c47f82c75d8aa883ca17b1ba94bc091fa34f923fdd88d23c7245537883edf9dc3189dd2b9e6e32814f28435b020ae1ca84a368322904e5bada58250620eb2092f058f7886cde3382aff732e00087b0c371a8c94", 0x5f, 0x801, &(0x7f0000000100)={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4880}, 0x4050) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='~1\'', 0x3, 0x4010, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x0, 0x8, 0x70bd2b, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc004) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x1}, 0x5, 0x3, 0xf, 0xb, 0x15, 'syz1\x00', "232637d7e4b6fffbe57eee2a473eba82d6ac002c62e1e744fac2427b1ce115d1", "6a4a4f6752a85619b701b087048fd6e590597f39dfd6af8fcff2afa98bb65562", [{0xc, 0xc, {0x3, 0x7}}, {0xff, 0x7ff}, {0x2, 0x6728, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x0, 0x40}}, {0x7, 0x800, {0x1}}, {0x101, 0x8, {0x0, 0x4}}, {0x62, 0x1, {0x3, 0x6}}, {0xf04a, 0x5, {0x1, 0xffff}}, {0x7, 0x9, {0x2, 0x4}}, {0x4, 0x2, {0x3, 0x18787819}}, {0x80, 0x4, {0x3, 0x4}}, {0x9, 0x8, {0x1, 0x80000000}}, {0x2, 0x6, {0x3}}, {0xe, 0x3, {0x1, 0x4}}, {0x2, 0x6, {0x2, 0x5}}, {0x0, 0x3, {0x0, 0x8}}, {0x2, 0xfff3, {0x0, 0x1}}, {0xfeff, 0xf1, {0x1, 0x8}}, {0xfffe, 0x1, {0x2, 0x7}}, {0xe1, 0x74c, {0x0, 0x5}}, {0x9e00, 0x7, {0x2, 0x7fffffff}}, {0x7, 0x3ff, {0x2, 0x6}}, {0x5, 0x6, {0x0, 0x1}}, {0x1f, 0xeb7, {0x3, 0x6}}, {0x1, 0x4, {0x1, 0x2}}, {0x9, 0xfffa, {0x1, 0xe}}, {0x7fff, 0x8, {0x1, 0x4}}, {0x4, 0x800, {0x0, 0xe}}, {0xe8d1, 0xb8f5, {0x1, 0x7fffffff}}, {0xffff, 0x7, {0x3, 0xaf}}, {0x5, 0x101, {0x1}}, {0x74a, 0x1, {0x1, 0x8}}, {0x8, 0x4, {0x1, 0x5}}, {0x0, 0x9500, {0x1, 0x7}}, {0x3, 0x2, {0x3, 0x6}}, {0x4, 0xdbb7, {0x2, 0x7}}, {0xf, 0x9, {0x0, 0x7}}, {0x6, 0x477, {0x2, 0x2800}}, {0x9, 0xfffb, {0x3}}, {0x6, 0x0, {0x2, 0xcce7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x400}, 0x40040080) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000940)) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@orangefs={0x14, 0x1, {"4eabd3998b4674115243b42bba7fb6f6", 0x7fff}}, &(0x7f0000000a00), 0x0) r7 = signalfd4(r1, &(0x7f0000000a40)={[0x1]}, 0x8, 0x0) recvmsg$can_bcm(r7, &(0x7f00000020c0)={&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/220, 0xdc}, {&(0x7f0000000d40)=""/137, 0x89}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/155, 0x9b}, {&(0x7f0000001ec0)=""/70, 0x46}, {&(0x7f0000001f40)=""/195, 0xc3}], 0x8}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) gettid() (async) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000002240), &(0x7f0000002280)=0xe) (async) io_setup(0x5e, &(0x7f00000022c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000002300)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file1\x00'}) (async) r11 = eventfd2(0x298, 0x1) (async) r12 = openat$cgroup_type(r7, &(0x7f00000026c0), 0x2, 0x0) io_submit(r9, 0x6, &(0x7f0000002900)=[&(0x7f0000002440)={0x0, 0x0, 0x0, 0x8, 0xc21, r10, &(0x7f0000002340)="9aede51ac60d57bb911b24c5a8433cc802164df1bf7b563c423fd9a19401075ca29bfc206e72603af5c2c0f6781f0950db94c126bca8b142eec923d522053757f0504174fbb86be173294c44094c52275a29a711bef3aa17b5bbb80560b8fec096a5cacc6aa769a48b776c7e665923b8dec8fad9e9aeb3528e4b0b4188046bae7ef7a29a70366835661c719aac4750de2b1944986e034124dd9d4342c77cef1fcba1c30d5636ca4394187cf171e07ebd4a25d1205f72fdfb177fd991a8cffbdd9771531e2179cc9acd0ccbe2b84ab01540ce77c02ce1914d79da29ded1", 0xdd, 0x6, 0x0, 0x1, r11}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000002480)="fd3faf805475075b91574e45e31857ee5d94ac8b4753374e6e8934c78cbe4eec6f1946fac53b37d149bcd3340b5a4ab8c4ea5a5ff7b69f74691373567a71957b66839116a7e2fa4efd95e33500966a87a8ba0f9ccbb1964603fad373a95d98c5f1961d4d22148dcaecde", 0x6a, 0x2, 0x0, 0x2}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x2, 0xaa4, r3, &(0x7f0000002540)="2f15", 0x2, 0xffffffffffffffff, 0x0, 0x0, r7}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f00000025c0)="d69fee75aa5c56a7ad0bebd4aa0f6cf760e1c59421b30488c3313e277bad4d294d48a44d2134fa05d3a2ff2c18ab3090aa3964b137b71bbaa3be80e9fcdc4b3de6ecb90ebc6188d32650a8bab2ea3d18fc39f203f9ece9fc067e626787fc36ef1a71ad52ee55774a45a36e2eb8ad22f5b142b1acdbdfeda406c76c8369f1778ddc7174a60d246634d9385a7ed5fbc98df1f00d44608c5b89bd3f2232cca8a3913a5ee54b4d882903fff652dba5522a47", 0xb0, 0x2, 0x0, 0x2, r7}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x1, r12, &(0x7f0000002700)="42f8d4d88846e070f18315c90977a3c247cb0d43d79b5beb0d1b841ee51745cd8d10e371084645bcb4473e0dded8b92207c9e70edc6abe74c9186c1345112f8b30d0173617a9091c100e6884898358178db89fd5ffc38e851b39c4842b61db82019fc01eb58695a287c91279c07bba18cb8e53f83c9166cefe7fcc8e68172544e1e84c26bcf8e9d11a77d8415599ecaf8eac9c13a093921277a09f49cd5b9cc20a3c1ee8378ed5517b24831a14d7cb899a393e939839283afbe07f41fda33be5bdaf8b3da512f4c1", 0xc8, 0x8, 0x0, 0x3, r7}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000002840)="4e7b325c6f7fdd59a6d89b4b6498aa70695e6045f7ed1510cd4fff832cab5b8dbc8cb510fa0d5bed963fd4d55200ada5108abcc7bea2e51741b2b21e6aa1e007cfae1f5542ab597a976f6d844dbfa3acbeba7de0f09921416979", 0x5a, 0x88, 0x0, 0x1, r7}]) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) 19.511217985s ago: executing program 37 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x72, 0x4) (async) sendto$inet6(r1, &(0x7f0000000080)="512138aeb6879cd02f3e065c47f82c75d8aa883ca17b1ba94bc091fa34f923fdd88d23c7245537883edf9dc3189dd2b9e6e32814f28435b020ae1ca84a368322904e5bada58250620eb2092f058f7886cde3382aff732e00087b0c371a8c94", 0x5f, 0x801, &(0x7f0000000100)={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4880}, 0x4050) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='~1\'', 0x3, 0x4010, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x0, 0x8, 0x70bd2b, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc004) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x1}, 0x5, 0x3, 0xf, 0xb, 0x15, 'syz1\x00', "232637d7e4b6fffbe57eee2a473eba82d6ac002c62e1e744fac2427b1ce115d1", "6a4a4f6752a85619b701b087048fd6e590597f39dfd6af8fcff2afa98bb65562", [{0xc, 0xc, {0x3, 0x7}}, {0xff, 0x7ff}, {0x2, 0x6728, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x0, 0x40}}, {0x7, 0x800, {0x1}}, {0x101, 0x8, {0x0, 0x4}}, {0x62, 0x1, {0x3, 0x6}}, {0xf04a, 0x5, {0x1, 0xffff}}, {0x7, 0x9, {0x2, 0x4}}, {0x4, 0x2, {0x3, 0x18787819}}, {0x80, 0x4, {0x3, 0x4}}, {0x9, 0x8, {0x1, 0x80000000}}, {0x2, 0x6, {0x3}}, {0xe, 0x3, {0x1, 0x4}}, {0x2, 0x6, {0x2, 0x5}}, {0x0, 0x3, {0x0, 0x8}}, {0x2, 0xfff3, {0x0, 0x1}}, {0xfeff, 0xf1, {0x1, 0x8}}, {0xfffe, 0x1, {0x2, 0x7}}, {0xe1, 0x74c, {0x0, 0x5}}, {0x9e00, 0x7, {0x2, 0x7fffffff}}, {0x7, 0x3ff, {0x2, 0x6}}, {0x5, 0x6, {0x0, 0x1}}, {0x1f, 0xeb7, {0x3, 0x6}}, {0x1, 0x4, {0x1, 0x2}}, {0x9, 0xfffa, {0x1, 0xe}}, {0x7fff, 0x8, {0x1, 0x4}}, {0x4, 0x800, {0x0, 0xe}}, {0xe8d1, 0xb8f5, {0x1, 0x7fffffff}}, {0xffff, 0x7, {0x3, 0xaf}}, {0x5, 0x101, {0x1}}, {0x74a, 0x1, {0x1, 0x8}}, {0x8, 0x4, {0x1, 0x5}}, {0x0, 0x9500, {0x1, 0x7}}, {0x3, 0x2, {0x3, 0x6}}, {0x4, 0xdbb7, {0x2, 0x7}}, {0xf, 0x9, {0x0, 0x7}}, {0x6, 0x477, {0x2, 0x2800}}, {0x9, 0xfffb, {0x3}}, {0x6, 0x0, {0x2, 0xcce7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x400}, 0x40040080) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000940)) (async) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@orangefs={0x14, 0x1, {"4eabd3998b4674115243b42bba7fb6f6", 0x7fff}}, &(0x7f0000000a00), 0x0) r7 = signalfd4(r1, &(0x7f0000000a40)={[0x1]}, 0x8, 0x0) recvmsg$can_bcm(r7, &(0x7f00000020c0)={&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/220, 0xdc}, {&(0x7f0000000d40)=""/137, 0x89}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/155, 0x9b}, {&(0x7f0000001ec0)=""/70, 0x46}, {&(0x7f0000001f40)=""/195, 0xc3}], 0x8}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) gettid() (async) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000002240), &(0x7f0000002280)=0xe) (async) io_setup(0x5e, &(0x7f00000022c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000002300)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file1\x00'}) (async) r11 = eventfd2(0x298, 0x1) (async) r12 = openat$cgroup_type(r7, &(0x7f00000026c0), 0x2, 0x0) io_submit(r9, 0x6, &(0x7f0000002900)=[&(0x7f0000002440)={0x0, 0x0, 0x0, 0x8, 0xc21, r10, &(0x7f0000002340)="9aede51ac60d57bb911b24c5a8433cc802164df1bf7b563c423fd9a19401075ca29bfc206e72603af5c2c0f6781f0950db94c126bca8b142eec923d522053757f0504174fbb86be173294c44094c52275a29a711bef3aa17b5bbb80560b8fec096a5cacc6aa769a48b776c7e665923b8dec8fad9e9aeb3528e4b0b4188046bae7ef7a29a70366835661c719aac4750de2b1944986e034124dd9d4342c77cef1fcba1c30d5636ca4394187cf171e07ebd4a25d1205f72fdfb177fd991a8cffbdd9771531e2179cc9acd0ccbe2b84ab01540ce77c02ce1914d79da29ded1", 0xdd, 0x6, 0x0, 0x1, r11}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000002480)="fd3faf805475075b91574e45e31857ee5d94ac8b4753374e6e8934c78cbe4eec6f1946fac53b37d149bcd3340b5a4ab8c4ea5a5ff7b69f74691373567a71957b66839116a7e2fa4efd95e33500966a87a8ba0f9ccbb1964603fad373a95d98c5f1961d4d22148dcaecde", 0x6a, 0x2, 0x0, 0x2}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x2, 0xaa4, r3, &(0x7f0000002540)="2f15", 0x2, 0xffffffffffffffff, 0x0, 0x0, r7}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x2, 0x3, r4, &(0x7f00000025c0)="d69fee75aa5c56a7ad0bebd4aa0f6cf760e1c59421b30488c3313e277bad4d294d48a44d2134fa05d3a2ff2c18ab3090aa3964b137b71bbaa3be80e9fcdc4b3de6ecb90ebc6188d32650a8bab2ea3d18fc39f203f9ece9fc067e626787fc36ef1a71ad52ee55774a45a36e2eb8ad22f5b142b1acdbdfeda406c76c8369f1778ddc7174a60d246634d9385a7ed5fbc98df1f00d44608c5b89bd3f2232cca8a3913a5ee54b4d882903fff652dba5522a47", 0xb0, 0x2, 0x0, 0x2, r7}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x8, 0x1, r12, &(0x7f0000002700)="42f8d4d88846e070f18315c90977a3c247cb0d43d79b5beb0d1b841ee51745cd8d10e371084645bcb4473e0dded8b92207c9e70edc6abe74c9186c1345112f8b30d0173617a9091c100e6884898358178db89fd5ffc38e851b39c4842b61db82019fc01eb58695a287c91279c07bba18cb8e53f83c9166cefe7fcc8e68172544e1e84c26bcf8e9d11a77d8415599ecaf8eac9c13a093921277a09f49cd5b9cc20a3c1ee8378ed5517b24831a14d7cb899a393e939839283afbe07f41fda33be5bdaf8b3da512f4c1", 0xc8, 0x8, 0x0, 0x3, r7}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000002840)="4e7b325c6f7fdd59a6d89b4b6498aa70695e6045f7ed1510cd4fff832cab5b8dbc8cb510fa0d5bed963fd4d55200ada5108abcc7bea2e51741b2b21e6aa1e007cfae1f5542ab597a976f6d844dbfa3acbeba7de0f09921416979", 0x5a, 0x88, 0x0, 0x1, r7}]) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) 4.925715655s ago: executing program 3 (id=1988): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@i_version}, {@usrquota}, {@bh}], [{@dont_appraise}, {@flag='nomand'}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) creat(&(0x7f0000000000)='./file1\x00', 0x14c) (async) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) fallocate(r2, 0x24, 0x9, 0x2000403) (async) fallocate(r2, 0x24, 0x9, 0x2000403) openat(r0, &(0x7f0000000d80)='./bus\x00', 0x220001, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x65, 0x0, &(0x7f0000000540)) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7c, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) bpf$PROG_LOAD(0x22, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x90) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r4, 0x0, r4, 0x0, 0x0, 0x0) (async) copy_file_range(r4, 0x0, r4, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x5}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x2, 0x1, 0x4}, 0x1}, 0x18) (async) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x2, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000380)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) (async) request_key(0x0, 0x0, 0x0, 0x0) getuid() 4.654785779s ago: executing program 5 (id=2001): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x14, r4, 0xacf5e67dd0b583a1, 0x0, 0xc00e, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) syz_read_part_table(0x5d1, &(0x7f0000000880)="$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") 4.650971639s ago: executing program 5 (id=2004): open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x21) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "21cd2153c6bb4c45", "2d2ca432009f606f9d38dfc8d86a5c4e501fb0a0ed6ebf470c29e253d55fc148", "bdbe7e40", "c261352a158551db"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x1, 0x0, 0x3, 0x0, 0x9, 0x3fff}, 0x20) 4.635059631s ago: executing program 5 (id=2006): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2202000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xdc, r6, 0x508, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf449}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff14b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "af83f4d2ef31c0573a621c51d66c19376b6e0172ea1d828e6eaf0bcdeb8ecb2e7f9354d0"}}]}]}, 0xdc}}, 0x4000) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0), 0x0}, 0x20) sendfile(r0, r0, 0x0, 0xe) sendfile(r4, r3, 0x0, 0x7ffff000) 3.978301989s ago: executing program 3 (id=2011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) io_setup(0x3, &(0x7f0000000340)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7, 0x0, 0x6}, 0x18) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r9, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x88c, 0x30, 0x12f, 0x20, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x275, 0x0, 0x0, 0x3}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0x1, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffc, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x26, 0x9d, 0xf, 0x7, 0x6b3, 0x1, 0x1, 0x3, 0x1000000, 0x1, 0xdf0, 0x18000, 0xf, 0x2, 0x4, 0x7, 0x1, 0xfffffff8, 0x5, 0xfffffffb, 0x6, 0x4, 0x3, 0x2b2, 0x9, 0x6, 0x400, 0x5, 0x6, 0x3, 0x0, 0x8, 0x0, 0x100, 0x9, 0x9, 0x3, 0x6, 0x1, 0x9, 0x4, 0x6, 0x10001, 0xba3, 0xc88, 0xfffffff4, 0x5, 0xb, 0x5a, 0x8000, 0x7, 0x7, 0x7, 0x5, 0x7, 0x4fffdf8d, 0x0, 0x20, 0x8001, 0x2, 0x7, 0x4, 0x5, 0x0, 0x10000, 0x8, 0x2, 0x80000000, 0x10, 0x1000, 0x4, 0x70, 0x23, 0x1, 0x9, 0x4, 0x400, 0x6, 0x0, 0x34, 0x1bac, 0xff, 0x10, 0x2be48b4a, 0x91df, 0x5, 0x1b, 0x3, 0x6, 0x10000, 0x7, 0x800, 0x1, 0x3, 0x0, 0x800, 0x0, 0x8000, 0x3, 0xfffffffa, 0x1000, 0xffff, 0x44, 0x2, 0x2, 0x5, 0x9, 0x4, 0x5, 0x10001, 0xc, 0x1, 0xffffffff, 0x1af, 0x4, 0x9, 0xf82, 0x3, 0x2, 0x7, 0x10000, 0x4, 0x4, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0x3, 0x0, 0x2, 0x6, 0xcc7b, 0x100, 0x7, 0x0, 0x7fff, 0x2, 0x4, 0x11080000, 0x5, 0x8a, 0x1, 0x64, 0x43, 0x4, 0x5, 0x8000, 0x2, 0x3, 0x9, 0x7fffffff, 0x0, 0x35bc, 0x9, 0x0, 0x10001, 0x0, 0xd, 0x8, 0x0, 0x9, 0x4, 0x6, 0xc7, 0xb8b7, 0x5, 0xfff, 0x5, 0x2, 0x8001, 0xfff, 0x8, 0x1, 0x4, 0x9, 0x8, 0x4, 0x49ab, 0xffff, 0x5, 0x7fff, 0xfffffffc, 0x1, 0x9, 0x4, 0x6, 0x8d7, 0x5, 0x1, 0x4, 0xff9e, 0x0, 0x8, 0x8, 0xff, 0x6, 0x6, 0x8, 0x3, 0x10001, 0x7fffffff, 0x40, 0x2, 0x5, 0x4, 0x200, 0x10, 0xfffffffb, 0xc, 0x4, 0x1d66, 0x1, 0x101, 0xcb8, 0x4, 0x0, 0x2, 0x80, 0xc8, 0x100, 0x98600000, 0x5, 0x4, 0x71cb, 0x4, 0x4, 0xffff, 0x0, 0xc984, 0xd, 0x1, 0x1, 0x3, 0x3ff, 0xffffffff, 0x6, 0x401, 0x100, 0x9, 0x7, 0xfd2b, 0x8, 0x4, 0xb, 0x7, 0x2, 0x7, 0xd6, 0x8bb, 0x0, 0xffff0001, 0x3, 0x4c0a, 0x59]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) setreuid(r11, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 3.696141924s ago: executing program 3 (id=2014): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000a2347d47be9e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax_inode}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lseek(r6, 0x7ff, 0x1) getdents64(r6, 0x0, 0x10) 3.634494479s ago: executing program 8 (id=2015): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff0051f60a84c9f4d4938037e786a6ff000000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x5, 0x6, 0x507, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x4004840) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40010, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) getresgid(&(0x7f00000006c0), &(0x7f0000000f80), &(0x7f0000000fc0)) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x2f, 0xe0, 0x99, 0x5dc2, 0x11, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, 0x1, 0x7, 0xbf, 0x80}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x18) r8 = syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0x6854, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r8, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x10}, &(0x7f0000000200)=0x90) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18800, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRES64], 0x8, 0x301, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.584589514s ago: executing program 5 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, 0x0, 0x358, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x8040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0xa9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) dup(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) cachestat(r5, &(0x7f0000000040)={0x7f, 0x7}, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x0) 3.51378469s ago: executing program 1 (id=2017): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = gettid() (async, rerun: 32) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffff}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r5}, 0x18) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") (async, rerun: 32) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000080)=0xfffffffffffffffa) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x260, 0x11, 0x148, 0x0, 0x0, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x8001, 0xf, [0x0, 0x13, 0x36, 0x34, 0x3, 0x12, 0x2e, 0x18, 0x10, 0x39, 0x3b, 0x3b, 0x39, 0x0, 0x20, 0x17], 0x2, 0x7, 0x520}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0xff, 0x0, '\x00', 'veth0\x00', {}, {0xff}, 0x8, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x467, &(0x7f0000000c00)="$eJzs28tvG8UfAPDvbpK26eOX/Ep59AEECiLikTRpgR64gEDiABISl3I0SVqVug1qgkSrCgpC5Yj6FyCOSPwFcIELAk5IXOGOKlWoEqJwMlp7t7a3dsjDrdP685E2mdmd9c7Xs2PP7ngDGFgT2Z8kYmdE/BoRY41se4GJxr/r1y7M/X3twlwStdqbfyT1cn9duzBXFC3225FnJtOI9JMk9nc47tK586cq1erC2Tw/vXz63emlc+efOXm6cmLhxMKZ2aNHjxyeef652Wd7Euf/s7ru+2DxwN5X37r8+tyxy2//+NVQEX8pjlI46zWx0sbHa7UNvvzmsqslnQz3sSKsSdYHsuYaqff/sRiKZuONxSsf97VywC1Vy3XZfLEG3MWS6HcNgP4ovuiz699iuX2jj/67+mLjAiiL+3q+NLYMR5qXGSld3/bSREQcu/jP59kSne9DAAD01LfZ+OfpTuO/NO5rKfe/fG5oPJ9L2R0R90TEnoi4N6Je9v6IeGCNxy9Pktw8/kmvrCuwVcrGfy/kc1vt479i9BfjQ3luVz3+keT4yerCofw9mYyRrVl+ZoVjfPfyL59129Y6/suW7PjFWDCvx5Vvptv3ma8sVzYSc6urH0XsG+4Uf3JjJiCJiL0RsW+dxzj55JcHum377/hX0IN5ptoXEU802v9ilOIvJCvPT05vi+rCoenirLjZTz9feqPb8TcUfw9k7b+94/l/I/7xpHW+dmntx7j026ddr2mmVnH+D29t32e+0lyxJf//fmV5+exMxJbktUalW9fPNvct8kX5LP7Jg537/+5ovhP7IyI7iR+MiIci4uG87R6JiEcj4mAprtbr6x9eeuydbvFvhvafL7X/eHuRUvs3E1uivKZzYujU91+3v2IzuZrPv+GtR+qpyXzNaj7/SrX4MyI6VnBDbx4AAADcIdKI2BlJOnUjPZpOTTV+w78ntqfVxaXlp44vvndmvvGMwHiMpMWdrrGW+6Ez+WV9kZ8t5Q/n943TGK3np+YWq/P9Dh4G3I5m/z8W9XRa7/+Z34f6XDng1vO8Fgyulv6/0YdegTuM738YXPo/DK4O/X+0H/UAbr9O3/8f9qEewO1X6v+m/WCAuP6HwaX/w+Bq7f9+AAADY2k0Vn54v1tiW6xnL4m7JhHppqhGbxLJOnvBahM7+x3g2hP9/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojX8DAAD//yDE758=") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.486295972s ago: executing program 1 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x87b, 0x5, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x100, 0x2, 0x4, 0x9}}]}, 0x34}}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0x2) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 3.270311601s ago: executing program 1 (id=2020): r0 = socket(0xf, 0x3, 0x8) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x53}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) (async) r3 = socket$inet(0x2, 0x5, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) 3.05872566s ago: executing program 1 (id=2021): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000340)="0514ac2631b89dbdac78d88bf9b9d07bf8bf135b0f4e1e206d43481879be7ea654c9002617c43d13a1aae8b37738718da02a743dd7c29282db43224cd3a894e829521a37867e49b7d1c770099803ef57d00ac6055525ba0cd65c18fc8c0cb74830f9d105875a6beece4050150db5695d17e2db05ad0789dda15f50dc92720370b9f337ae51115b2e2c2b2cb586625cabc09aad42b6abc0f16a77602eb3da5fa9ba5c934a067f8d26b10ccf3bcf5ae7b4dc19cb606facd0383bfde7aebc7c858b0b12d35d3505ee2a378766de18e0d6e8ce43187795f719d545aa7802e115f2a44f29ad3aa93162d982a0302645c1a9883401a209c274") r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="0c00990008000003"], 0x28}}, 0x0) 2.318537625s ago: executing program 3 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000007802000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6f, 0x7ff, 0x3, 0x246}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r6, 0xfffffdc5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000500)={'ip_vti0\x00', r2, 0x80, 0x20, 0x7ff, 0xffff7fff, {{0x2b, 0x4, 0x1, 0x11, 0xac, 0x67, 0x0, 0x4b, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x6f, 0x3, 0x0, [{@multicast1, 0x1cf}, {@remote, 0x81}, {@loopback, 0x6}, {@remote, 0xa3}]}, @timestamp_addr={0x44, 0x54, 0x6, 0x1, 0xa, [{@broadcast, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7}, {@empty}, {@local, 0xfffffff9}, {@broadcast, 0x8}, {@multicast2, 0x4}, {@multicast2, 0x10}, {@private=0xa010102, 0x1}, {@empty, 0xa12}]}, @timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0xf, [{@multicast1, 0x7}, {@private=0xa010101, 0xf90}, {@multicast2, 0x591}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x214, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4400c}, 0x10) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000140)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x0) dup(0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r5, 0x24, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r14 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x1000, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {0x3, 0x1}}}, 0x7f}}, 0x10) 2.314532886s ago: executing program 6 (id=2025): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5dd8dc54974bcf9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) sendmsg$rds(r11, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) splice(r7, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r10, 0x0, 0xc, 0x7) write(r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r14, 0x99, 0x1c68c7a8}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.15545728s ago: executing program 6 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000640)=""/4096) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000000101040000000000000000020000002400015b6b7398a236ddce00e000000108000200000000000c0002800500010000000000240002800c0002800510010000000000140001800800030005"], 0x64}}, 0x0) 2.139769891s ago: executing program 5 (id=2027): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x89462bca97663741, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='dlm_lock_start\x00', r5}, 0x18) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r8}, 0x18) r9 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) r10 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0x4, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x200, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {0x5, 0x6}, {0xf, 0x1}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.054561739s ago: executing program 6 (id=2028): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) (async) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) syz_io_uring_setup(0x494, 0x0, &(0x7f0000000080), 0x0) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153c", 0x41, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dafd6bf2c69abbf1062351756b634f2899a7"], 0xfd, 0x564, &(0x7f0000001f80)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') 2.011933352s ago: executing program 3 (id=2029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x80000601, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) r7 = perf_event_open$cgroup(&(0x7f0000000840)={0x6, 0x80, 0xb0, 0x2, 0xc, 0x8, 0x0, 0x6, 0x60800, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x7, 0xf}, 0x400, 0x4d, 0x0, 0x5, 0xffffffffffffff7a, 0x3, 0x3, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x0, 0x5, 0x2, 0x2, 0x0, 0x1, 0x4200, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3000, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x461, 0x4, 0x6, 0x4, 0x0, 0x81, 0x97f1, 0x0, 0x6f38, 0x0, 0x93}, 0xffffffffffffffff, 0xb, r7, 0x9) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000009e1c925654ca", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250c00000008000b00030000000c000600010000000100000008000b000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000008000b00c20d00000c000600000000000000000008000b009b050000"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2.008245283s ago: executing program 6 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001cc0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x29) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) syz_open_dev$loop(0x0, 0x40, 0x1c0862) (async) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4d9e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000008010200000000000000000a000001140004800800024000000fff08000140000000050900010073797a31000000000500030001000000060002"], 0x6c}, 0x1, 0x0, 0x0, 0x40841}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000130001ac29f9fae59400fafffffffedb", @ANYRES32=r2, @ANYBLOB="004c00002079000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) 1.951287168s ago: executing program 8 (id=2031): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) unshare(0x64000680) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r7 = msgget$private(0x0, 0x8) msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x3, 0x0, 0x1, 0x8, 0x7b, 0x3}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x38}}, 0x20004000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) 738.815325ms ago: executing program 3 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000001240)=[{0x6, 0x1, 0x0, 0xf}]}) 737.163165ms ago: executing program 5 (id=2033): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_to_bridge\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000001f00)) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESOCT=r5, @ANYRES8, @ANYRES8, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='ext4_mb_release_inode_pa\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000001c0)) sendmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x10014) (async, rerun: 32) r12 = syz_clone(0x80, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r12}}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRES32], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 570.9434ms ago: executing program 8 (id=2034): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x8050011) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRESOCT=r3, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r6, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfcde) sendto$inet6(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r7, 0x0, 0xfff}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) poll(&(0x7f0000000000)=[{r10, 0x82d8}], 0x1, 0x11ff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100031082bbd700800000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000000100000400000024"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000000000850000002300000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 518.626564ms ago: executing program 1 (id=2035): ioperm(0x3, 0x5, 0x7) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340), &(0x7f0000000900)=@udp6, 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x18) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r3 = getgid() r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r3}, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIxtsKc99aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4ku0QWUqtzweOde659+p7joSO7rn3+CqAvnUmIs5GxKNqtXo+IoYb5ZlGis16qm338MGdmVpKolq9/kkSkdTLapuNbXnOY43dDkfEH38X8Zfk2bjl9Y3F6WKxsNpYzleWVvLl9Y0LC0vT84X5wvLk5MTlqStTl6bGO9LOoYi4+psP/v2PV3579Y2f3Xr3xkdjf00a5RFP2tFp9aZn09eiaTAiVvcjWI8Mpi0EAODboHmc/+OIOB/DMZAezQEAAAAHSfWXQ/FVElEFAAAADqxMOgc2yeQa8wCGIpPJ5epzeL8fRzPFUrny07nS2vJsfa7sSGQzcwvFwnhjrvBIZJPa8kSaf7J8cdvyZESciIh/DR9Jl3MzpeJsr09+AAAAQJ84tm38//lwffy/xZc9qxwAAADQOSM7rTzUvXoAAAAA+2fH8T8AAABwIBj/AwAAwIH2+2vXaqna/P3r2Zvra4ulmxdmC+XF3NLaTG6mtLqSmy+V5tN79i3t9nzFUmnl57G8djtfKZQr+fL6xo2l0tpy5cbCUz+BDQAAAHTRiR/deyeJiM1fHElT+I9/6BuDz7Px+/tXD6D7BnpdAaBnnuv7HzhQsr2uANBzyS7r207eebPzdQEAAPbH6A9aX/8f2PXcwGamS1UE9onzf9C/XP+H/uX6P/SvbAyEgTz0t91uAfri1/+r1eeqEAAA0HFDaUoyuYj0PMBQZDK5XMTxdEyQTeYWioXxiPhuRLw9nP1ObXki3TPZdc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAA60iMyHSXo3/4jR4XND288PHEq+GE4fI+LW/67/5/Z0pbI6USv/9HF55b+N8ou9OIMBAAAAbNccpzfH8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQSQ8f3Jlppm7G/fjXETHSKv5gHE4fD0c2Io5+lsTglv2SiBjoQPzNuxFxslX8pFatGGnUolX8Iz2Of6wD8aGf3av1P79q9fnLxJn0sfXn73LaQ7249v1f5nH/N9Aifq3s+B5jnLr/Wr5t/LsRpwZb9z/N+Emb/ufsHuP/+U8bG+3WVf8fMdry+yd5Kla+srSSL69vXFhYmp4vzBeWJycnLk9dmbo0NZ6fWygWGn9bxvjnD19/tFP7j7aJP7JL+8/tsf1f37/94Hv1bPbx7smT+GNnW7//J9vEzzTe/5808rX1o838Zj2/1elX3zq9U/tn27R/t/d/bI/tP/+Hv7+3x00BgC4or28sTheLhdW+zrzQq1E7LHopWvHSZWoHpMXa6/qS1OeZzN/24ZlrR+a9blcnMj3tlgAAgH3w7BgYAAAAAAAAAAAAAAAAAAAA6LZu3E4suy3mZvq3E3fPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADonG8CAAD//+y20KM=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r6) setgroups(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="fe7e27306b3157d6f4239b8200"/22, @ANYRES32, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="040001000000feff08000000", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r6, @ANYRES8=r4, @ANYRES32=r6, @ANYBLOB="10000400000000002000060000000000"], 0x74, 0x4745d7f32fab0666) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000300)={0x401, 0x8, 0x9, 0x5, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000380)=0x4, &(0x7f00000003c0)=0x2) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 462.686709ms ago: executing program 8 (id=2036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) capset(0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030104000000f02dc9582cef1fd44b8b4056800000001c00000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x2c}}, 0x814) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0xc0041, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x60400) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) fcntl$notify(r6, 0x402, 0x0) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) 360.420109ms ago: executing program 8 (id=2037): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10e, &(0x7f0000000280), 0x3, 0x457, &(0x7f0000000ec0)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) (async) waitid(0x2, r0, &(0x7f0000000180), 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=r1], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xa594, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000680)=ANY=[@ANYRES64=r7, @ANYRES16, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000022fa6191f8ff000000b5dce53b3055f2f6d79000bfa200000000000007020000f8fffff8ed03000008000000b7040084000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) (async) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r9, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x6}, 0x18) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 295.487414ms ago: executing program 6 (id=2038): socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x184, 0x24, 0x1, 0x70bd26, 0x25ffdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xfffc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x4, 0x3, 0x3, 0x0, 0x1, 0x420, 0x5}}, {0xe, 0x2, [0x9, 0x90e0, 0x2, 0x7fff, 0x7f]}}, {{0x1c, 0x1, {0x1, 0x1, 0x7, 0x7, 0x0, 0x100, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x45, 0xe6, 0x4b44, 0x7fffffff, 0x1, 0x7f, 0x7, 0x7}}, {0x12, 0x2, [0x0, 0x4, 0x4, 0xfc, 0x9, 0xe, 0xeb9]}}, {{0x1c, 0x1, {0x1, 0x3, 0x4, 0x4, 0x1, 0x21cf, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x7, 0x0, 0x4, 0x0, 0x4, 0x5, 0x8}}, {0x14, 0x2, [0x7ff, 0xaf, 0x3, 0x6, 0x7, 0x4c, 0x2506, 0x5]}}, {{0x1c, 0x1, {0x9, 0x3, 0xe22, 0x2, 0x1, 0xfff, 0x7f, 0x2}}, {0x8, 0x2, [0xfffe, 0xfffe]}}, {{0x1c, 0x1, {0x8, 0x48, 0x6, 0x5, 0x2, 0x8, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x4, 0xfff, 0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x6, 0x9, 0x2, 0xfffffe25, 0x6, 0x9}}, {0x16, 0x2, [0x44ad, 0xd38, 0x8001, 0xab, 0x9, 0x2, 0x2, 0x7fff, 0x8]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 233.25822ms ago: executing program 8 (id=2039): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = epoll_create1(0x80000) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\a\x00\x00\x00\x00n\x00'/32, @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0xfff1}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x401, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x101, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x1, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r14, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="80010000", @ANYRES16=r15, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="38c60400fe0000000000d7032ebe7ba9f2726c64513105d8cb5033fd65b736e274b6bd020087966e5da26c3959efeccf61000000"], 0x4c}}, 0x0) 129.850309ms ago: executing program 6 (id=2040): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 0s ago: executing program 1 (id=2041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f900d5e7f659f9d5d000001900000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af879a02e420552ff00000000bfa20000000000000705000000ffff1eb803000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001500)={0x0, 0x0, "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", "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"}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='workqueue_activate_work\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r5 = dup(r4) ioctl$GIO_UNISCRNMAP(r5, 0x40043d14, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000380)="8bea50824af5", 0x6) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x1000000, 0x0, 0xc7) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="01ffffff"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x2000014) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = accept(r2, 0x0, &(0x7f00000002c0)=0xfffffffffffffe1c) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000340), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f00000005c0)={'xfrm0\x00', 0x5, 0xd3}) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000080)=0x6100204) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8042, 0x0) kernel console output (not intermixed with test programs): 255][ T7817] 9p: Unknown access argument 18446744073709551615: -34 [ 127.552397][ T7817] blktrace: Concurrent blktraces are not allowed on loop10 [ 127.609465][ T7811] loop1: detected capacity change from 0 to 8192 [ 127.649058][ T7835] bond_slave_0: Caught tx_queue_len zero misconfig [ 127.650041][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 127.738980][ T7847] loop8: detected capacity change from 0 to 1024 [ 127.749468][ T7845] loop7: detected capacity change from 0 to 8192 [ 127.846465][ T7187] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 127.854348][ T7187] FAT-fs (loop7): Filesystem has been set read-only [ 127.860115][ T3316] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 127.868792][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 127.925037][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1240'. [ 127.934542][ T7858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1240'. [ 127.999574][ T7856] loop7: detected capacity change from 0 to 8192 [ 128.031170][ T7860] 9p: Unknown access argument 18446744073709551615: -34 [ 128.046476][ T7860] blktrace: Concurrent blktraces are not allowed on loop10 [ 128.082786][ T7871] loop1: detected capacity change from 0 to 512 [ 128.095289][ T7871] EXT4-fs: Ignoring removed i_version option [ 128.113205][ T7871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.126316][ T7187] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 128.134185][ T7187] FAT-fs (loop7): Filesystem has been set read-only [ 128.211197][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.275344][ T7880] loop7: detected capacity change from 0 to 1024 [ 128.281838][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 128.281853][ T29] audit: type=1326 audit(1767801649.203:28175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 128.311774][ T29] audit: type=1326 audit(1767801649.203:28176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 128.335394][ T29] audit: type=1326 audit(1767801649.203:28177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 128.358931][ T29] audit: type=1326 audit(1767801649.203:28178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 128.382560][ T29] audit: type=1326 audit(1767801649.203:28179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f73ca1ff783 code=0x7ffc0000 [ 128.406055][ T29] audit: type=1326 audit(1767801649.203:28180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 128.429651][ T29] audit: type=1326 audit(1767801649.203:28181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73ca1fe1ff code=0x7ffc0000 [ 128.453075][ T29] audit: type=1326 audit(1767801649.213:28182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f73ca1ff7d7 code=0x7ffc0000 [ 128.476511][ T29] audit: type=1326 audit(1767801649.213:28183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73ca1fdf90 code=0x7ffc0000 [ 128.500018][ T29] audit: type=1326 audit(1767801649.213:28184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.7.1247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73ca1ff34b code=0x7ffc0000 [ 128.573951][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.609022][ T7893] loop1: detected capacity change from 0 to 128 [ 128.634344][ T7893] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.655625][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.665233][ T7893] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.692473][ T7900] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 128.712118][ T7889] loop8: detected capacity change from 0 to 128 [ 128.733928][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 128.733987][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1251'. [ 128.774822][ T7897] loop7: detected capacity change from 0 to 8192 [ 128.804038][ T7899] bridge_slave_1: left allmulticast mode [ 128.809869][ T7899] bridge_slave_1: left promiscuous mode [ 128.815550][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.875912][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 128.887790][ T7899] bridge_slave_0: left allmulticast mode [ 128.893476][ T7899] bridge_slave_0: left promiscuous mode [ 128.899274][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.920308][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 129.017738][ T7908] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.154998][ T7932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7932 comm=syz.1.1261 [ 129.263703][ T7908] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.316843][ T7935] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.608637][ T7908] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.765670][ T7908] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.941729][ T3968] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.954787][ T3968] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.968804][ T3968] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.005557][ T3968] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.584590][ T7991] netlink: 'syz.5.1281': attribute type 1 has an invalid length. [ 130.978312][ T8006] netlink: 'syz.8.1286': attribute type 49 has an invalid length. [ 131.040008][ T8006] netlink: 'syz.8.1286': attribute type 8 has an invalid length. [ 131.161699][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1287'. [ 131.187804][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 131.242027][ T8011] bio_check_eod: 7398 callbacks suppressed [ 131.242055][ T8011] syz.6.1287: attempt to access beyond end of device [ 131.242055][ T8011] loop6: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 131.347243][ T8014] syz.6.1287: attempt to access beyond end of device [ 131.347243][ T8014] loop6: rw=8390657, sector=256, nr_sectors = 4 limit=256 [ 131.361062][ T8014] Buffer I/O error on dev loop6, logical block 64, lost async page write [ 131.453098][ T8015] syz.6.1287: attempt to access beyond end of device [ 131.453098][ T8015] loop6: rw=8390657, sector=256, nr_sectors = 4 limit=256 [ 131.466922][ T8015] Buffer I/O error on dev loop6, logical block 64, lost async page write [ 132.385667][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'. [ 132.398712][ T8033] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1294'. [ 132.408043][ T8033] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1294'. [ 132.496402][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1303'. [ 132.505501][ T8056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.521563][ T8056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.599105][ T8062] set_capacity_and_notify: 5 callbacks suppressed [ 132.599118][ T8062] loop8: detected capacity change from 0 to 8192 [ 132.876340][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1311'. [ 132.999225][ T8091] loop7: detected capacity change from 0 to 512 [ 133.026213][ T8091] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.062501][ T8094] loop8: detected capacity change from 0 to 1024 [ 133.115233][ T8091] EXT4-fs (loop7): 1 truncate cleaned up [ 133.123472][ T8091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.182067][ T8099] loop1: detected capacity change from 0 to 1024 [ 133.193899][ T8086] geneve2: entered promiscuous mode [ 133.199244][ T8086] geneve2: entered allmulticast mode [ 133.224307][ T8099] EXT4-fs: Invalid want_extra_isize 2 [ 133.333157][ T29] kauditd_printk_skb: 837 callbacks suppressed [ 133.333170][ T29] audit: type=1326 audit(1767801654.263:29022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 133.412291][ T2732] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.499491][ T2732] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.559119][ T29] audit: type=1326 audit(1767801654.303:29023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 133.582720][ T29] audit: type=1326 audit(1767801654.303:29024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed3296f783 code=0x7ffc0000 [ 133.606053][ T29] audit: type=1326 audit(1767801654.303:29025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fed3296f807 code=0x7ffc0000 [ 133.629438][ T29] audit: type=1326 audit(1767801654.303:29026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fed32926bdd code=0x7ffc0000 [ 133.652890][ T29] audit: type=1326 audit(1767801654.303:29027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fed329a3e89 code=0x7ffc0000 [ 133.676383][ T29] audit: type=1326 audit(1767801654.303:29029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fed32926357 code=0x7ffc0000 [ 133.699854][ T29] audit: type=1326 audit(1767801654.303:29030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fed329263b6 code=0x7ffc0000 [ 133.723315][ T29] audit: type=1326 audit(1767801654.303:29031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed3290b829 code=0x7ffc0000 [ 133.746743][ T29] audit: type=1326 audit(1767801654.303:29032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz.8.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 133.836609][ T1629] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.866085][ T8115] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 133.876092][ T1629] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.936729][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1319'. [ 133.946047][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.968525][ T7187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.980997][ T8119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.022065][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'. [ 134.032493][ T8122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8122 comm=syz.5.1320 [ 134.050563][ T8131] loop7: detected capacity change from 0 to 1024 [ 134.072821][ T8135] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.085579][ T8131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.113491][ T8139] loop1: detected capacity change from 0 to 1024 [ 134.127504][ T8128] loop6: detected capacity change from 0 to 8192 [ 134.176770][ T7187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.308851][ T8147] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1327'. [ 134.651600][ T8157] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 134.715232][ T8157] SELinux: failed to load policy [ 134.740975][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1335'. [ 135.081049][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1338'. [ 135.145691][ T8186] net_ratelimit: 10 callbacks suppressed [ 135.145712][ T8186] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 135.278928][ T8192] vlan2: entered allmulticast mode [ 135.293445][ T8193] loop6: detected capacity change from 0 to 1024 [ 135.563789][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.575324][ T8193] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1339: bad orphan inode 134217728 [ 135.588740][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.617061][ T8193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.817468][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.836116][ T8222] loop7: detected capacity change from 0 to 512 [ 135.873140][ T8222] vfat: Bad value for 'shortname' [ 136.068165][ T8237] loop9: detected capacity change from 0 to 7 [ 136.225396][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1348'. [ 136.244848][ T8240] Invalid logical block size (1) [ 136.522766][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 137.206584][ T8366] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1379'. [ 137.291895][ T8372] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.339757][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1381'. [ 137.386350][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.398918][ T8366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.456873][ T8376] rock: directory entry would overflow storage [ 137.463202][ T8376] rock: sig=0x4f50, size=4, remaining=3 [ 137.468881][ T8376] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 137.811543][ T8407] set_capacity_and_notify: 4 callbacks suppressed [ 137.811561][ T8407] loop8: detected capacity change from 0 to 512 [ 137.918504][ T8409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.008477][ T8409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.058579][ T8409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.119093][ T8409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.204658][ T8318] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.217316][ T8318] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.232331][ T8318] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.241477][ T8318] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.273621][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1398'. [ 138.366372][ T8449] xt_hashlimit: max too large, truncated to 1048576 [ 138.448574][ T8464] tipc: New replicast peer: 255.255.255.255 [ 138.454636][ T8464] tipc: Enabled bearer , priority 10 [ 138.604380][ T8458] loop8: detected capacity change from 0 to 8192 [ 138.733285][ T8483] loop1: detected capacity change from 0 to 512 [ 138.762195][ T29] kauditd_printk_skb: 2266 callbacks suppressed [ 138.762264][ T29] audit: type=1400 audit(1767801659.683:31298): avc: denied { accept } for pid=8484 comm="syz.7.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.795187][ T8483] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.921820][ T29] audit: type=1326 audit(1767801659.853:31299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.7.1416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f73ca1f65e7 code=0x0 [ 138.978344][ T29] audit: type=1400 audit(1767801659.903:31300): avc: denied { setopt } for pid=8481 comm="syz.8.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 139.025072][ T8482] loop8: detected capacity change from 0 to 512 [ 139.031785][ T8482] EXT4-fs: inline encryption not supported [ 139.051134][ T8482] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 139.071701][ T8482] EXT4-fs (loop8): 1 truncate cleaned up [ 139.093355][ T8482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.225596][ T8499] pimreg: entered allmulticast mode [ 139.231599][ T8499] pimreg: left allmulticast mode [ 139.286947][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.300505][ T8499] loop6: detected capacity change from 0 to 764 [ 139.314314][ T8499] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 139.341859][ T29] audit: type=1400 audit(1767801660.263:31301): avc: denied { bind } for pid=8502 comm="syz.8.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.363791][ T8499] __nla_validate_parse: 6 callbacks suppressed [ 139.363807][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1418'. [ 139.422068][ T8509] loop8: detected capacity change from 0 to 512 [ 139.433732][ T8509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.446924][ T8509] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.459785][ T29] audit: type=1400 audit(1767801660.393:31302): avc: denied { setattr } for pid=8508 comm="syz.8.1422" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.484233][ T8509] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1422: corrupted inode contents [ 139.512091][ T8509] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.1422: mark_inode_dirty error [ 139.526463][ T8509] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1422: corrupted inode contents [ 139.539334][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1423'. [ 139.559325][ T8509] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #18: comm syz.8.1422: mark_inode_dirty error [ 139.571389][ T3512] tipc: Node number set to 2886997007 [ 139.599184][ T8519] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.1422: iget: bad i_size value: 2533274857506816 [ 139.634992][ T8518] loop6: detected capacity change from 0 to 8192 [ 139.644125][ T8509] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #18: comm syz.8.1422: mark inode dirty (error -117) [ 139.666457][ T8509] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 139.676772][ T8509] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.1422: iget: bad i_size value: 2533274857506816 [ 139.689819][ T8509] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.1422: iget: bad i_size value: 2533274857506816 [ 139.821019][ T29] audit: type=1326 audit(1767801660.733:31303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 139.844547][ T29] audit: type=1326 audit(1767801660.733:31304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 139.868132][ T29] audit: type=1326 audit(1767801660.743:31305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 139.891680][ T29] audit: type=1326 audit(1767801660.743:31306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 139.915228][ T29] audit: type=1326 audit(1767801660.743:31307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.7.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ca1ff749 code=0x7ffc0000 [ 139.956302][ T8525] netlink: 'syz.7.1428': attribute type 13 has an invalid length. [ 139.976627][ T8528] blktrace: Concurrent blktraces are not allowed on loop2 [ 139.988656][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.128506][ T8525] gretap0: refused to change device tx_queue_len [ 140.173165][ T8530] loop6: detected capacity change from 0 to 512 [ 140.186085][ T8525] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.283424][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.339291][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.403225][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.438367][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.664168][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1435'. [ 140.708866][ T8567] loop7: detected capacity change from 0 to 1024 [ 140.715609][ T8567] EXT4-fs: quotafile must be on filesystem root [ 140.731908][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1437'. [ 140.987722][ T8578] loop6: detected capacity change from 0 to 512 [ 141.000732][ T8578] EXT4-fs: Ignoring removed oldalloc option [ 141.016824][ T8578] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 141.045141][ T8578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.064632][ T8578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.095954][ T8578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 141.114584][ T8578] System zones: 0-2, 18-18, 34-34 [ 141.128136][ T8578] EXT4-fs (loop6): too many log groups per flexible block group [ 141.143365][ T8578] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 141.150593][ T8578] EXT4-fs (loop6): mount failed [ 141.161019][ T8582] netlink: 'syz.7.1441': attribute type 7 has an invalid length. [ 141.448335][ T8586] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 141.461792][ T8586] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 141.762475][ T8590] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1444'. [ 141.798957][ T8590] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1444'. [ 141.880257][ T8590] lo speed is unknown, defaulting to 1000 [ 141.903539][ T8590] lo speed is unknown, defaulting to 1000 [ 141.954170][ T8599] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1446'. [ 141.963762][ T8590] lo speed is unknown, defaulting to 1000 [ 141.994319][ T8598] bridge0: entered promiscuous mode [ 141.999923][ T8598] macvtap1: entered promiscuous mode [ 142.005582][ T8598] macvtap1: entered allmulticast mode [ 142.011109][ T8598] bridge0: entered allmulticast mode [ 142.018264][ T8598] bridge0: port 3(macvtap1) entered blocking state [ 142.024853][ T8598] bridge0: port 3(macvtap1) entered disabled state [ 142.060434][ T8598] bridge0: left allmulticast mode [ 142.065645][ T8598] bridge0: left promiscuous mode [ 142.142966][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1449'. [ 142.263193][ T8626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.271464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.280201][ T8626] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 142.405501][ T8626] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 142.415015][ T8626] EXT4-fs (loop7): orphan cleanup on readonly fs [ 142.431318][ T8626] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.1455: corrupted inode contents [ 142.437192][ T8634] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.444361][ T8626] EXT4-fs (loop7): Remounting filesystem read-only [ 142.462867][ T8634] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.476173][ T8626] EXT4-fs (loop7): 1 truncate cleaned up [ 142.481877][ T8638] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.491808][ T8322] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.502441][ T8322] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 142.516971][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1458'. [ 142.526116][ T8638] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 142.537638][ T8590] infiniband syz1: set active [ 142.542597][ T8590] infiniband syz1: added lo [ 142.547647][ T4273] lo speed is unknown, defaulting to 1000 [ 142.556650][ T8322] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 142.580745][ T8626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.596811][ T8590] RDS/IB: syz1: added [ 142.600865][ T8590] smc: adding ib device syz1 with port count 1 [ 142.607320][ T8590] smc: ib device syz1 port 1 has no pnetid [ 142.613430][ T4273] lo speed is unknown, defaulting to 1000 [ 142.615130][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.619998][ T8590] lo speed is unknown, defaulting to 1000 [ 142.647163][ T7646] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.657376][ T7187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.682761][ T8590] lo speed is unknown, defaulting to 1000 [ 142.717663][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1461'. [ 142.735319][ T8652] hsr_slave_0: left promiscuous mode [ 142.772137][ T8652] hsr_slave_1: left promiscuous mode [ 142.790638][ T8660] iso9660: Unknown parameter '' [ 142.796164][ T8655] EXT4-fs (loop1): failed to initialize system zone (-117) [ 142.803477][ T8655] EXT4-fs (loop1): mount failed [ 142.820556][ T8590] lo speed is unknown, defaulting to 1000 [ 142.844957][ T3743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.864627][ T8590] lo speed is unknown, defaulting to 1000 [ 142.926311][ T8590] lo speed is unknown, defaulting to 1000 [ 143.010659][ T8664] lo speed is unknown, defaulting to 1000 [ 143.022663][ T8671] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.061893][ T8638] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 143.072421][ T8638] SELinux: failed to load policy [ 143.104697][ T8671] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.142664][ T8673] set_capacity_and_notify: 8 callbacks suppressed [ 143.142682][ T8673] loop1: detected capacity change from 0 to 8192 [ 143.177938][ T8671] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.212294][ T8689] loop6: detected capacity change from 0 to 512 [ 143.220746][ T8689] EXT4-fs: Ignoring removed orlov option [ 143.228170][ T8671] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.251450][ T8689] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 143.286050][ T3969] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.313975][ T8317] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.332375][ T8317] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.342351][ T8317] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.423392][ T8718] autofs4:pid:8718:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(17.11), cmd(0xc0189375) [ 143.436721][ T8718] autofs4:pid:8718:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 143.519841][ T8664] loop8: detected capacity change from 0 to 2048 [ 143.527529][ T8664] ext4: Unknown parameter 'smackfstransmute' [ 143.595957][ T8752] loop6: detected capacity change from 0 to 8192 [ 143.654883][ T3537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.672572][ T8668] lo speed is unknown, defaulting to 1000 [ 143.707162][ T8707] loop8: detected capacity change from 0 to 512 [ 143.747377][ T8774] loop1: detected capacity change from 0 to 512 [ 143.764341][ T8774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.775608][ T8707] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.787559][ T8773] loop7: detected capacity change from 0 to 512 [ 143.796365][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 143.796430][ T29] audit: type=1326 audit(1767804242.733:31744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8776 comm="syz.6.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f051ab065e7 code=0x7ffc0000 [ 143.845236][ T8774] EXT4-fs (loop1): failed to initialize system zone (-117) [ 143.860209][ T8773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.874333][ T8774] EXT4-fs (loop1): mount failed [ 143.885103][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.898591][ T8773] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.909745][ T8773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.996912][ T8790] netem: incorrect gi model size [ 144.001939][ T8790] netem: change failed [ 144.040848][ T29] audit: type=1326 audit(1767804242.973:31745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.064527][ T8664] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 144.074504][ T8664] FAT-fs (loop8): Filesystem has been set read-only [ 144.079379][ T8792] loop7: detected capacity change from 0 to 1024 [ 144.086653][ T29] audit: type=1326 audit(1767804243.023:31746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.111016][ T29] audit: type=1326 audit(1767804243.023:31747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.132364][ T8792] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 144.134706][ T29] audit: type=1326 audit(1767804243.023:31748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.167616][ T29] audit: type=1326 audit(1767804243.023:31749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.167946][ T8664] xt_connbytes: Forcing CT accounting to be enabled [ 144.191149][ T29] audit: type=1326 audit(1767804243.023:31750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.205001][ T8792] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.221258][ T29] audit: type=1326 audit(1767804243.023:31751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.221284][ T29] audit: type=1326 audit(1767804243.023:31752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.221384][ T29] audit: type=1326 audit(1767804243.023:31753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.8.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 144.302885][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.311017][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.329274][ T8664] xt_NFQUEUE: number of total queues is 0 [ 144.346243][ T8792] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 144.403098][ T8792] EXT4-fs (loop7): orphan cleanup on readonly fs [ 144.445625][ T8792] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.1491: Inode bitmap for bg 0 marked uninitialized [ 144.495932][ T8792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.568465][ T8792] EXT4-fs error (device loop7): ext4_lookup:1785: inode #16: comm syz.7.1491: iget: bad i_size value: 281474976719656 [ 144.622060][ T7187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.666538][ T8811] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 144.695529][ T8807] __nla_validate_parse: 4 callbacks suppressed [ 144.695542][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 144.744183][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1498'. [ 144.807987][ T8820] netlink: 312 bytes leftover after parsing attributes in process `syz.7.1498'. [ 144.828431][ T8839] netlink: 'syz.6.1502': attribute type 1 has an invalid length. [ 144.844451][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.859976][ T8039] lo speed is unknown, defaulting to 1000 [ 144.924959][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 144.925697][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.943900][ T8839] bond1: entered promiscuous mode [ 144.968351][ T8839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.050680][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'. [ 145.072344][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'. [ 145.124271][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8872 comm=syz.1.1506 [ 145.153263][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'. [ 145.299132][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'. [ 145.322254][ T8802] cgroup: fork rejected by pids controller in /syz5 [ 145.342423][ T8876] bond1: entered promiscuous mode [ 145.347562][ T8876] bond1: entered allmulticast mode [ 145.396500][ T8876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.439817][ T8879] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1509'. [ 145.475008][ T8880] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1509'. [ 145.754470][ T8912] netlink: 'syz.5.1512': attribute type 3 has an invalid length. [ 145.783774][ T8919] loop7: detected capacity change from 0 to 512 [ 145.800254][ T8919] EXT4-fs (loop7): orphan cleanup on readonly fs [ 145.811487][ T8919] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 145.868687][ T8919] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 145.896763][ T8919] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.1514: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 145.954380][ T3375] net_ratelimit: 1 callbacks suppressed [ 145.954440][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.001976][ T8919] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1514: couldn't read orphan inode 13 (err -117) [ 146.033310][ T8919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.080149][ T8919] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 146.144408][ T8919] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 146.223788][ T8933] lo speed is unknown, defaulting to 1000 [ 146.362031][ T7187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.488146][ T8940] loop7: detected capacity change from 0 to 512 [ 146.511031][ T8940] EXT4-fs: Ignoring removed i_version option [ 146.517202][ T8940] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.644947][ T8940] EXT4-fs error (device loop7): ext4_orphan_get:1391: comm syz.7.1519: inode #13: comm syz.7.1519: iget: illegal inode # [ 146.657930][ T8732] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.724652][ T8940] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1519: couldn't read orphan inode 13 (err -117) [ 146.743343][ T8953] ext4: Unknown parameter 'uid<00000000000000000000' [ 146.758876][ T8940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.899884][ T8964] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 146.962774][ T7187] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 146.973271][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.986267][ T7187] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz-executor: invalid indirect mapped block 131072 (level 2) [ 147.005604][ T7187] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 147.017601][ T7187] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 15 [ 147.138004][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118390000: rx timeout, send abort [ 147.222334][ T8963] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.262022][ T8748] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.318038][ T8748] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.367730][ T8748] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.396837][ T8967] lo speed is unknown, defaulting to 1000 [ 147.414520][ T8748] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.513041][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 147.527477][ T8748] bridge_slave_1: left allmulticast mode [ 147.533220][ T8748] bridge_slave_1: left promiscuous mode [ 147.539012][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.547156][ T8748] bridge_slave_0: left allmulticast mode [ 147.552851][ T8748] bridge_slave_0: left promiscuous mode [ 147.558666][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.614131][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a65b000: rx timeout, send abort [ 147.622423][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118390000: abort rx timeout. Force session deactivation [ 147.658040][ T8748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.676629][ T8748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.703835][ T8748] bond0 (unregistering): Released all slaves [ 147.714171][ T8748] bond1 (unregistering): Released all slaves [ 147.933410][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.940648][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.960166][ T8967] bridge_slave_0: entered allmulticast mode [ 147.966859][ T8967] bridge_slave_0: entered promiscuous mode [ 147.976226][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.983652][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.995511][ T8748] veth1_macvtap: left promiscuous mode [ 148.001095][ T8748] veth0_macvtap: left promiscuous mode [ 148.007032][ T8748] veth1_vlan: left promiscuous mode [ 148.012913][ T8748] veth0_vlan: left promiscuous mode [ 148.070626][ T9008] delete_channel: no stack [ 148.085035][ T8748] team0 (unregistering): Port device team_slave_1 removed [ 148.095300][ T8748] team0 (unregistering): Port device team_slave_0 removed [ 148.102545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a65b000: abort rx timeout. Force session deactivation [ 148.140563][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.147747][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.155811][ T8967] bridge_slave_1: entered allmulticast mode [ 148.162317][ T8967] bridge_slave_1: entered promiscuous mode [ 148.216533][ T9006] lo speed is unknown, defaulting to 1000 [ 148.222443][ T9016] IPVS: Error connecting to the multicast addr [ 148.230785][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.250712][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.270438][ T9016] nfs: Unexpected value for 'acl' [ 148.292731][ T8967] team0: Port device team_slave_0 added [ 148.308755][ T8967] team0: Port device team_slave_1 added [ 148.357526][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.364525][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.390604][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.405013][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.412004][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.438088][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.497149][ T8967] hsr_slave_0: entered promiscuous mode [ 148.503341][ T8967] hsr_slave_1: entered promiscuous mode [ 148.509335][ T8967] debugfs: 'hsr0' already exists in 'hsr' [ 148.515095][ T8967] Cannot create hsr debugfs directory [ 148.605858][ T9022] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 148.619629][ T8967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 148.621458][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.627005][ T8545] Bluetooth: hci0: command 0x1003 tx timeout [ 148.654829][ T8967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 148.729477][ T8967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 148.744402][ T8967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 148.769133][ T9027] tipc: Can't bind to reserved service type 0 [ 148.885231][ T9043] set_capacity_and_notify: 2 callbacks suppressed [ 148.885248][ T9043] loop1: detected capacity change from 0 to 512 [ 148.901782][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.919833][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.930165][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.937306][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.947253][ T9043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.968093][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.975170][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.991697][ T8967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.002234][ T8967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.007597][ T9043] EXT4-fs (loop1): 1 truncate cleaned up [ 149.188944][ T9050] loop6: detected capacity change from 0 to 512 [ 149.203164][ T9050] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.213770][ T9043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.256660][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.277882][ T9050] EXT4-fs (loop6): 1 truncate cleaned up [ 149.283937][ T9050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.556120][ T9056] __nla_validate_parse: 13 callbacks suppressed [ 149.556138][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 149.614016][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.627666][ T9056] loop1: detected capacity change from 0 to 8192 [ 149.640867][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.723517][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 149.723532][ T29] audit: type=1326 audit(1767805016.855:31863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.753348][ T29] audit: type=1326 audit(1767805016.855:31864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.777052][ T29] audit: type=1326 audit(1767805016.855:31865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.800721][ T29] audit: type=1326 audit(1767805016.855:31866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.824374][ T29] audit: type=1326 audit(1767805016.855:31867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.848266][ T29] audit: type=1326 audit(1767805016.855:31868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.871928][ T29] audit: type=1326 audit(1767805016.855:31869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.895418][ T29] audit: type=1326 audit(1767805016.855:31870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.899014][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1549'. [ 149.918917][ T29] audit: type=1326 audit(1767805016.855:31871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.927960][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1549'. [ 149.951434][ T29] audit: type=1326 audit(1767805016.855:31872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 149.999439][ T9076] Cannot find map_set index 0 as target [ 150.009625][ T9075] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 150.330326][ T8967] veth0_vlan: entered promiscuous mode [ 150.339629][ T8967] veth1_vlan: entered promiscuous mode [ 150.368945][ T8967] veth0_macvtap: entered promiscuous mode [ 150.385316][ T8967] veth1_macvtap: entered promiscuous mode [ 150.409316][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.430931][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.461082][ T8748] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.493693][ T8748] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.523688][ T8748] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.559877][ T8748] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.575085][ T9106] loop1: detected capacity change from 0 to 164 [ 150.594595][ T9106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1556'. [ 150.671416][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1559'. [ 150.706596][ T9113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.736403][ T9113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.807166][ T9117] loop9: detected capacity change from 0 to 8192 [ 151.023807][ T9123] lo speed is unknown, defaulting to 1000 [ 151.108113][ T9137] loop6: detected capacity change from 0 to 512 [ 151.117950][ T9137] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.136479][ T9137] EXT4-fs (loop6): orphan cleanup on readonly fs [ 151.183382][ T9137] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1566: Allocating blocks 41-42 which overlap fs metadata [ 151.202611][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1568'. [ 151.224016][ T9137] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1566: Failed to acquire dquot type 1 [ 151.269034][ T9137] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 151.335982][ T9137] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1566: corrupted inode contents [ 151.426183][ T9137] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.1566: mark_inode_dirty error [ 151.460629][ T9137] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1566: corrupted inode contents [ 151.477873][ T9137] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1566: mark_inode_dirty error [ 151.522004][ T9147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1569'. [ 151.539441][ T9137] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1566: corrupted inode contents [ 151.551493][ T9137] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 151.560305][ T9137] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1566: corrupted inode contents [ 151.572887][ T9148] netlink: 'syz.1.1569': attribute type 13 has an invalid length. [ 151.581067][ T9137] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.1566: mark_inode_dirty error [ 151.593003][ T9137] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 151.604472][ T9137] EXT4-fs (loop6): 1 truncate cleaned up [ 151.610750][ T9137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.781923][ T9134] Set syz1 is full, maxelem 65536 reached [ 151.904386][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.978688][ T9160] loop8: detected capacity change from 0 to 1024 [ 151.997619][ T9160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.065351][ T9160] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.245693][ T9172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.255832][ T9172] bond2 (unregistering): Released all slaves [ 152.346304][ T8747] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:64: bg 0: block 112: padding at end of block bitmap is not set [ 152.361392][ T8747] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 2048 with error 117 [ 152.374255][ T8747] EXT4-fs (loop8): This should not happen!! Data will be lost [ 152.374255][ T8747] [ 152.391474][ T8747] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 2088 with max blocks 2048 with error 28 [ 152.404393][ T8747] EXT4-fs (loop8): This should not happen!! Data will be lost [ 152.404393][ T8747] [ 152.414134][ T8747] EXT4-fs (loop8): Total free blocks count 0 [ 152.420112][ T8747] EXT4-fs (loop8): Free/Dirty block details [ 152.426045][ T8747] EXT4-fs (loop8): free_blocks=0 [ 152.431038][ T8747] EXT4-fs (loop8): dirty_blocks=2368 [ 152.436350][ T8747] EXT4-fs (loop8): Block reservation details [ 152.472758][ T9187] loop8: detected capacity change from 0 to 1024 [ 152.479960][ T9187] EXT4-fs (loop8): inodes count not valid: 1 vs 32 [ 152.503434][ T9187] lo speed is unknown, defaulting to 1000 [ 152.540972][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1579'. [ 152.710505][ T9187] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1579'. [ 152.773627][ T9199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.803312][ T9199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9199 comm=syz.8.1582 [ 152.834861][ T9199] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9199 comm=syz.8.1582 [ 152.935012][ T9206] loop8: detected capacity change from 0 to 512 [ 152.952336][ T9206] ext4: Bad value for 'journal_dev' [ 153.089332][ T9210] loop8: detected capacity change from 0 to 764 [ 153.107036][ T9210] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 153.135629][ T9210] Symlink component flag not implemented [ 153.213211][ T9210] Symlink component flag not implemented (7) [ 153.258532][ T9220] 9p: Bad value for 'rfdno' [ 153.308772][ T9220] lo speed is unknown, defaulting to 1000 [ 153.475194][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1591'. [ 153.737314][ T9248] loop9: detected capacity change from 0 to 512 [ 153.766501][ T9248] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.9.1597: corrupted xattr block 95: invalid header [ 153.807684][ T9248] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1597: bg 0: block 7: invalid block bitmap [ 153.845141][ T9248] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 153.879112][ T9248] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2971: inode #11: comm syz.9.1597: corrupted xattr block 95: invalid header [ 153.913855][ T9248] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 153.923291][ T9248] EXT4-fs (loop9): 1 orphan inode deleted [ 153.929663][ T9248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.109816][ T8967] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.128712][ T9265] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.141233][ T9265] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.162881][ T9265] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 154.197898][ T9269] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.210386][ T9269] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 154.240360][ T9269] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 154.273022][ T9268] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 154.287691][ T9272] SELinux: failed to load policy [ 154.352739][ T1048] IPVS: starting estimator thread 0... [ 154.359883][ T9282] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 154.393612][ T9293] __nla_validate_parse: 2 callbacks suppressed [ 154.393671][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1608'. [ 154.446720][ T9274] loop6: detected capacity change from 0 to 4096 [ 154.453169][ T9288] IPVS: using max 2016 ests per chain, 100800 per kthread [ 154.461887][ T9298] loop9: detected capacity change from 0 to 1024 [ 154.481791][ T9274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.526348][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1612'. [ 154.560305][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 154.560322][ T29] audit: type=1400 audit(1767805021.937:32416): avc: denied { append } for pid=9308 comm="syz.9.1614" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.715946][ T9274] netlink: 'syz.6.1604': attribute type 29 has an invalid length. [ 154.730848][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.739779][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.753221][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.755889][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.786201][ T29] audit: type=1326 audit(1767805022.178:32417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.820360][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.829373][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 154.848928][ T29] audit: type=1326 audit(1767805022.210:32418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.872505][ T29] audit: type=1326 audit(1767805022.210:32419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.896143][ T29] audit: type=1326 audit(1767805022.210:32420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.919698][ T29] audit: type=1326 audit(1767805022.210:32421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.943315][ T29] audit: type=1326 audit(1767805022.210:32422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 154.967188][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 155.032872][ T29] audit: type=1326 audit(1767805022.440:32423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 155.056450][ T29] audit: type=1326 audit(1767805022.440:32424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.5.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 155.083394][ T9341] loop6: detected capacity change from 0 to 512 [ 155.090304][ T9341] ext2: Unknown parameter 'smackfshat' [ 155.118010][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 155.126971][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 155.517680][ T9355] loop9: detected capacity change from 0 to 128 [ 155.527480][ T9355] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.541524][ T9355] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.586984][ T9358] loop8: detected capacity change from 0 to 1024 [ 155.593922][ T9358] ext4: Unknown parameter 'fsuuid' [ 155.601631][ T9358] SELinux: Context @ is not valid (left unmapped). [ 155.612158][ T29] audit: type=1400 audit(1767805023.039:32425): avc: denied { relabelto } for pid=9357 comm="syz.8.1623" name="cgroup.stat" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 155.638712][ T9355] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.938968][ T9372] loop8: detected capacity change from 0 to 8192 [ 156.268862][ T9384] loop8: detected capacity change from 0 to 8192 [ 156.569660][ T9414] loop9: detected capacity change from 0 to 512 [ 156.576585][ T9414] EXT4-fs: Ignoring removed bh option [ 156.582505][ T9414] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 156.592743][ T9414] EXT4-fs (loop9): 1 truncate cleaned up [ 156.599323][ T9414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.737719][ T9418] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 156.795132][ T9414] bridge_slave_1: left allmulticast mode [ 156.800843][ T9414] bridge_slave_1: left promiscuous mode [ 156.806754][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.955380][ T9414] bridge_slave_0: left allmulticast mode [ 156.961109][ T9414] bridge_slave_0: left promiscuous mode [ 156.966919][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.296665][ T8967] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.368367][ T9431] netlink: 'syz.9.1643': attribute type 30 has an invalid length. [ 157.400333][ T9438] netlink: 'syz.9.1643': attribute type 16 has an invalid length. [ 157.408343][ T9438] netlink: 'syz.9.1643': attribute type 17 has an invalid length. [ 157.437006][ T9438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.541765][ T9437] lo speed is unknown, defaulting to 1000 [ 157.583636][ T9453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9453 comm=syz.9.1649 [ 158.525971][ T9489] loop9: detected capacity change from 0 to 8192 [ 158.568106][ T9492] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.622253][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.655456][ T9492] team1: left promiscuous mode [ 158.660552][ T9492] team1: left allmulticast mode [ 158.670887][ T9] lo speed is unknown, defaulting to 1000 [ 158.671988][ T8740] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.676669][ T9] syz1: Port: 1 Link DOWN [ 158.696024][ T3743] lo speed is unknown, defaulting to 1000 [ 158.708147][ T9482] lo speed is unknown, defaulting to 1000 [ 158.747157][ T8740] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.763979][ T8740] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.807127][ T8740] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.895186][ T9516] loop1: detected capacity change from 0 to 128 [ 159.022863][ T9521] loop8: detected capacity change from 0 to 1024 [ 159.056285][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.056285][ T8740] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 159.070285][ T9521] EXT4-fs: Ignoring removed bh option [ 159.075732][ T9521] EXT4-fs: inline encryption not supported [ 159.086835][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.086835][ T8740] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 159.100638][ T9521] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.100665][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.100665][ T8740] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 159.112887][ T9521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 159.124878][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.124878][ T8740] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 159.147057][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.147057][ T8740] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 159.149460][ T9521] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.1662: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.161219][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.161219][ T8740] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 159.176448][ T9521] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.1662: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.202271][ T9521] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.1662: Failed to acquire dquot type 0 [ 159.213947][ T9521] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 159.223476][ T9521] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.1662: mark_inode_dirty error [ 159.235357][ T9521] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 159.240585][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.240585][ T8740] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 159.245819][ T9521] EXT4-fs (loop8): 1 orphan inode deleted [ 159.265176][ T8743] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.265938][ T9521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.296720][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.296720][ T8740] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 159.310329][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.310329][ T8740] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 159.324096][ T8743] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:60: Failed to release dquot type 0 [ 159.336026][ T8740] kworker/u8:57: attempt to access beyond end of device [ 159.336026][ T8740] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 159.363003][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 159.363015][ T29] audit: type=1400 audit(1767805026.976:32627): avc: denied { create } for pid=9525 comm="syz.6.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.391560][ T29] audit: type=1400 audit(1767805026.987:32628): avc: denied { unmount } for pid=7646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.395500][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.411678][ T29] audit: type=1400 audit(1767805027.008:32629): avc: denied { ioctl } for pid=9525 comm="syz.6.1666" path="socket:[28719]" dev="sockfs" ino=28719 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.449858][ T7646] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 159.462855][ T7646] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 159.475203][ T29] audit: type=1326 audit(1767805027.092:32630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.5.1665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd74d3a65e7 code=0x0 [ 159.498372][ T7646] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 159.522960][ T29] audit: type=1400 audit(1767805027.144:32631): avc: denied { create } for pid=9533 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.549354][ T9538] __nla_validate_parse: 15 callbacks suppressed [ 159.549366][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1667'. [ 159.550975][ T9534] loop6: detected capacity change from 0 to 1024 [ 159.571231][ T9538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9538 comm=syz.8.1667 [ 159.584055][ T29] audit: type=1400 audit(1767805027.144:32632): avc: denied { write } for pid=9533 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.585237][ T9534] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.604603][ T29] audit: type=1400 audit(1767805027.144:32633): avc: denied { read } for pid=9533 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.636237][ T9534] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.654958][ T9540] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.713874][ T9539] bond2: option lp_interval: invalid value (0) [ 159.720195][ T9539] bond2: option lp_interval: allowed values 1 - 2147483647 [ 159.728429][ T9534] JBD2: no valid journal superblock found [ 159.734211][ T9534] EXT4-fs (loop6): Could not load journal inode [ 159.741974][ T9539] bond2 (unregistering): Released all slaves [ 159.749613][ T29] audit: type=1400 audit(1767805027.386:32634): avc: denied { create } for pid=9542 comm="syz.9.1669" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.773532][ T29] audit: type=1400 audit(1767805027.386:32635): avc: denied { map } for pid=9542 comm="syz.9.1669" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.797870][ T29] audit: type=1400 audit(1767805027.386:32636): avc: denied { read write } for pid=9542 comm="syz.9.1669" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.031526][ T9558] loop8: detected capacity change from 0 to 128 [ 160.090670][ T8740] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.099766][ T8740] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.118523][ T8740] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.127499][ T8740] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.137199][ T8740] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.139399][ T9560] 9p: Bad value for 'source' [ 160.146333][ T8740] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.152752][ T9560] netlink: 'syz.8.1672': attribute type 6 has an invalid length. [ 160.160941][ T8740] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.176772][ T8740] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.348733][ T9565] loop9: detected capacity change from 0 to 2048 [ 160.385986][ T9565] Alternate GPT is invalid, using primary GPT. [ 160.392503][ T9565] loop9: p2 p3 p7 [ 160.405216][ T9571] loop6: detected capacity change from 0 to 512 [ 160.417553][ T9571] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.431155][ T9571] ext3: Unknown parameter 'subj_role' [ 160.451148][ T9571] netlink: 'syz.6.1674': attribute type 3 has an invalid length. [ 160.564022][ T9588] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1679'. [ 160.749486][ T9590] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 160.931360][ T9594] hub 2-0:1.0: USB hub found [ 160.938572][ T9594] hub 2-0:1.0: 8 ports detected [ 161.034458][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1686'. [ 161.043644][ T9608] unsupported nla_type 24929 [ 161.087959][ T8736] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.250690][ T9618] loop6: detected capacity change from 0 to 128 [ 161.311972][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.321013][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.356450][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.396165][ T9630] loop9: detected capacity change from 0 to 512 [ 161.408901][ T9630] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1691: error while reading EA inode 32 err=-116 [ 161.408935][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.430466][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.439778][ T9630] EXT4-fs (loop9): Remounting filesystem read-only [ 161.442310][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.456131][ T9630] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 161.478680][ T9630] EXT4-fs (loop9): 1 orphan inode deleted [ 161.493431][ T9630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.520318][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 161.650170][ T9645] openvswitch: netlink: Missing key (keys=40, expected=100) [ 161.665334][ T9645] netlink: 'syz.5.1694': attribute type 13 has an invalid length. [ 161.678060][ T9645] gretap0: refused to change device tx_queue_len [ 161.684983][ T8967] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.686610][ T9645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.709627][ T3498] lo speed is unknown, defaulting to 1000 [ 161.712746][ T9638] loop6: detected capacity change from 0 to 512 [ 161.715408][ T3498] syz1: Port: 1 Link ACTIVE [ 161.729308][ T3406] lo speed is unknown, defaulting to 1000 [ 161.859803][ T9664] lo speed is unknown, defaulting to 1000 [ 161.925444][ T9674] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 161.943283][ T9674] EXT4-fs warning (device loop6): read_mmp_block:111: Error -74 while reading MMP block 17 [ 161.991696][ T9669] lo speed is unknown, defaulting to 1000 [ 162.039803][ T9685] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1703: bad orphan inode 134217728 [ 162.052725][ T9687] EXT4-fs (loop6): 1 truncate cleaned up [ 162.058971][ T9687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.076506][ T9685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.423250][ T9707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.436331][ T9707] EXT4-fs (loop1): too many log groups per flexible block group [ 162.446031][ T8967] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 162.456861][ T9707] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 162.461403][ T8967] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 162.480719][ T9707] EXT4-fs (loop1): mount failed [ 162.666930][ T9729] EXT4-fs: Ignoring removed orlov option [ 162.675291][ T9729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.711197][ T8736] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.725067][ T8967] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.778640][ T8736] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.833953][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.852799][ T8736] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.887547][ T9742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.902681][ T8736] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.914028][ T9744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9744 comm=syz.5.1725 [ 162.950521][ T9749] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 162.971291][ T9749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.020341][ T9735] lo speed is unknown, defaulting to 1000 [ 163.026472][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.145105][ T8736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.160523][ T8736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.171030][ T8736] bond0 (unregistering): Released all slaves [ 163.179049][ T9764] netlink: 'syz.6.1728': attribute type 4 has an invalid length. [ 163.224281][ T8736] IPVS: stopping backup sync thread 9418 ... [ 163.255420][ T9735] chnl_net:caif_netlink_parms(): no params data found [ 163.267690][ T8736] hsr_slave_0: left promiscuous mode [ 163.273759][ T8736] hsr_slave_1: left promiscuous mode [ 163.279401][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.286802][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.304535][ T8736] veth1_macvtap: left promiscuous mode [ 163.311199][ T8736] veth0_macvtap: left promiscuous mode [ 163.313456][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.317274][ T8736] veth1_vlan: left promiscuous mode [ 163.331405][ T8736] veth0_vlan: left promiscuous mode [ 163.356910][ T9780] set_capacity_and_notify: 5 callbacks suppressed [ 163.356928][ T9780] loop1: detected capacity change from 0 to 512 [ 163.372090][ T9780] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.383646][ T9780] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 163.393892][ T9780] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1734: Corrupt directory, running e2fsck is recommended [ 163.408598][ T9782] netlink: 'syz.8.1733': attribute type 1 has an invalid length. [ 163.429968][ T9780] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 163.438689][ T9780] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1734: corrupted in-inode xattr: invalid ea_ino [ 163.452170][ T9780] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1734: couldn't read orphan inode 15 (err -117) [ 163.464445][ T8736] team0 (unregistering): Port device team_slave_1 removed [ 163.465119][ T9780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.484388][ T8736] team0 (unregistering): Port device team_slave_0 removed [ 163.548437][ T9782] lo speed is unknown, defaulting to 1000 [ 163.569349][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.576575][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.584536][ T9735] bridge_slave_0: entered allmulticast mode [ 163.591277][ T9735] bridge_slave_0: entered promiscuous mode [ 163.609420][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.609409][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.609484][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.609608][ T9735] bridge_slave_1: entered allmulticast mode [ 163.639160][ T9735] bridge_slave_1: entered promiscuous mode [ 163.670968][ T9735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.692956][ T9735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.725710][ T9798] loop1: detected capacity change from 0 to 128 [ 163.725761][ T9735] team0: Port device team_slave_0 added [ 163.734417][ T9798] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.750077][ T9798] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.761296][ T9735] team0: Port device team_slave_1 added [ 163.781860][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.788970][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.815007][ T9735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.826426][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.833446][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.859398][ T9735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.907030][ T9735] hsr_slave_0: entered promiscuous mode [ 163.913095][ T9735] hsr_slave_1: entered promiscuous mode [ 163.919562][ T9735] debugfs: 'hsr0' already exists in 'hsr' [ 163.925335][ T9735] Cannot create hsr debugfs directory [ 163.976757][ T9813] netlink: 'syz.8.1743': attribute type 12 has an invalid length. [ 163.984660][ T9813] netlink: 'syz.8.1743': attribute type 29 has an invalid length. [ 163.992536][ T9813] netlink: 'syz.8.1743': attribute type 1 has an invalid length. [ 164.000303][ T9813] netlink: 'syz.8.1743': attribute type 2 has an invalid length. [ 164.009489][ T9813] loop8: detected capacity change from 0 to 128 [ 164.016463][ T9813] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.028631][ T9813] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.079412][ T8320] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.122389][ T9819] smc: net device bond0 applied user defined pnetid SYZ0 [ 164.130680][ T29] kauditd_printk_skb: 1863 callbacks suppressed [ 164.130693][ T29] audit: type=1326 audit(1767805031.995:34500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.161579][ T8747] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.164038][ T29] audit: type=1326 audit(1767805032.016:34501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.191537][ T29] audit: type=1326 audit(1767805032.016:34502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.194598][ T9821] program syz.8.1746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.215309][ T29] audit: type=1326 audit(1767805032.016:34503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.224780][ T9819] loop6: detected capacity change from 0 to 256 [ 164.248260][ T29] audit: type=1326 audit(1767805032.016:34504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.278083][ T29] audit: type=1326 audit(1767805032.016:34505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.286170][ T9819] vfat: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 164.302337][ T29] audit: type=1326 audit(1767805032.016:34506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.332820][ T29] audit: type=1326 audit(1767805032.016:34507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.356497][ T29] audit: type=1326 audit(1767805032.016:34508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.380035][ T29] audit: type=1326 audit(1767805032.016:34509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.8.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 164.493431][ T9831] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 164.592856][ T9735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.604250][ T9735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.624159][ T9735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.635363][ T9735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.708042][ T9735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.735703][ T9735] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.784508][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.791657][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.808769][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.815883][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.961081][ T9870] loop8: detected capacity change from 0 to 2048 [ 164.976409][ T9872] 9p: Bad value for 'rfdno' [ 164.985357][ T9870] EXT4-fs (loop8): failed to initialize system zone (-117) [ 164.992689][ T9870] EXT4-fs (loop8): mount failed [ 165.357071][ T9735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.452713][ T9735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.567848][ T9735] veth0_vlan: entered promiscuous mode [ 165.603737][ T9735] veth1_vlan: entered promiscuous mode [ 165.636980][ T9735] veth0_macvtap: entered promiscuous mode [ 165.652980][ T9735] veth1_macvtap: entered promiscuous mode [ 165.666153][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.678690][ T9735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.697529][ T8740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.709580][ T8740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.731036][ T8740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.740725][ T8740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.805699][ T9895] lo speed is unknown, defaulting to 1000 [ 165.859943][ T9904] netlink: 'syz.3.1764': attribute type 12 has an invalid length. [ 165.942073][ T9904] loop3: detected capacity change from 0 to 8192 [ 165.955363][ T9904] vfat: Unknown parameter 'neigh_create' [ 166.081218][ T8545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.146636][ T9916] bridge_slave_0: left allmulticast mode [ 166.152440][ T9916] bridge_slave_0: left promiscuous mode [ 166.158227][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.175972][ T9916] bridge_slave_1: left allmulticast mode [ 166.181661][ T9916] bridge_slave_1: left promiscuous mode [ 166.187369][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.197097][ T9916] bond0: (slave bond_slave_0): Releasing backup interface [ 166.220007][ T9916] bond0: (slave bond_slave_1): Releasing backup interface [ 166.228462][ T9918] loop3: detected capacity change from 0 to 512 [ 166.249644][ T9918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.289166][ T9916] team0: Port device team_slave_0 removed [ 166.295332][ T9918] EXT4-fs error (device loop3): __ext4_iget:5426: inode #15: block 1803188595: comm syz.3.1768: invalid block [ 166.308706][ T9916] team0: Port device team_slave_1 removed [ 166.315350][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.322896][ T9916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.332281][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.339744][ T9916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.347305][ T9918] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1768: couldn't read orphan inode 15 (err -117) [ 166.350384][ T9916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.381110][ T9918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.455620][ T9933] __nla_validate_parse: 13 callbacks suppressed [ 166.455638][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1773'. [ 166.493660][ T9933] loop8: detected capacity change from 0 to 764 [ 166.516442][ T9933] rock: directory entry would overflow storage [ 166.522684][ T9933] rock: sig=0x4f50, size=4, remaining=3 [ 166.528351][ T9933] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 166.567301][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.898057][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1777'. [ 166.912804][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1777'. [ 167.070817][ T9958] loop3: detected capacity change from 0 to 128 [ 167.136518][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 167.150417][ T9965] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1782'. [ 167.160356][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1782'. [ 167.172761][ T9965] loop3: detected capacity change from 0 to 512 [ 167.180140][ T9965] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.548668][ T9982] lo speed is unknown, defaulting to 1000 [ 167.561363][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1789'. [ 168.087739][T10014] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 168.272620][T10027] netlink: 'syz.8.1799': attribute type 10 has an invalid length. [ 168.287494][T10027] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 168.298560][T10027] team0 (unregistering): Port device team_slave_0 removed [ 168.316311][T10027] team0 (unregistering): Failed to send options change via netlink (err -105) [ 168.329216][T10027] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 168.341155][T10027] team0 (unregistering): Port device team_slave_1 removed [ 168.400296][T10035] loop3: detected capacity change from 0 to 512 [ 168.432660][T10035] EXT4-fs (loop3): too many log groups per flexible block group [ 168.440417][T10035] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 168.447656][T10035] EXT4-fs (loop3): mount failed [ 168.490733][T10047] loop3: detected capacity change from 0 to 736 [ 168.497622][T10047] iso9660: Unknown parameter 'shoWassoc' [ 168.549043][T10059] loop3: detected capacity change from 0 to 128 [ 168.558288][T10059] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.570933][T10059] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.762508][ T9735] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.874767][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1811'. [ 168.893107][T10067] gtp0: entered promiscuous mode [ 168.975864][T10076] ip6gre0: entered promiscuous mode [ 168.997681][T10076] team0: Port device ip6gre0 added [ 169.003990][T10078] netlink: 'syz.1.1815': attribute type 4 has an invalid length. [ 169.019071][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1815'. [ 169.051488][ T29] kauditd_printk_skb: 1033 callbacks suppressed [ 169.051503][ T29] audit: type=1326 audit(1767805037.160:35543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd0e8865e7 code=0x7ffc0000 [ 169.123656][ T29] audit: type=1326 audit(1767805037.181:35544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd0e82b829 code=0x7ffc0000 [ 169.147347][ T29] audit: type=1326 audit(1767805037.181:35545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd0e8865e7 code=0x7ffc0000 [ 169.170860][ T29] audit: type=1326 audit(1767805037.181:35546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd0e82b829 code=0x7ffc0000 [ 169.194430][ T29] audit: type=1326 audit(1767805037.181:35547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0e88f749 code=0x7ffc0000 [ 169.218474][ T29] audit: type=1326 audit(1767805037.181:35548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdd0e88f749 code=0x7ffc0000 [ 169.247790][ T29] audit: type=1326 audit(1767805037.360:35549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd0e8865e7 code=0x7ffc0000 [ 169.271446][ T29] audit: type=1326 audit(1767805037.360:35550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd0e82b829 code=0x7ffc0000 [ 169.295009][ T29] audit: type=1326 audit(1767805037.360:35551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd0e8865e7 code=0x7ffc0000 [ 169.318594][ T29] audit: type=1326 audit(1767805037.360:35552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd0e82b829 code=0x7ffc0000 [ 169.374618][T10094] loop8: detected capacity change from 0 to 512 [ 169.384709][T10094] ext4: Unknown parameter 'obj_type' [ 169.397452][T10094] loop8: detected capacity change from 0 to 128 [ 169.443297][T10100] loop8: detected capacity change from 0 to 512 [ 169.584367][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.593489][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.812630][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 169.869131][T10113] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.229682][T10123] loop3: detected capacity change from 0 to 512 [ 170.573951][T10143] lo speed is unknown, defaulting to 1000 [ 170.660794][T10145] loop3: detected capacity change from 0 to 512 [ 170.667768][T10145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.682262][T10145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 170.690338][T10145] System zones: 1-12 [ 170.694756][T10145] EXT4-fs (loop3): 1 truncate cleaned up [ 170.700950][T10145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.803843][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.852813][T10150] loop3: detected capacity change from 0 to 1024 [ 170.859541][T10150] EXT4-fs: Ignoring removed bh option [ 170.865066][T10150] EXT4-fs: inline encryption not supported [ 170.875731][T10150] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.904450][T10150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 170.916193][T10150] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1834: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.938131][T10150] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1834: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.954259][T10150] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1834: Failed to acquire dquot type 0 [ 170.972504][T10150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 170.982860][T10150] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1834: mark_inode_dirty error [ 170.994484][T10150] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 171.005135][T10150] EXT4-fs (loop3): 1 orphan inode deleted [ 171.011316][T10150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.025881][ T8329] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.041116][ T8329] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 0 [ 171.055386][T10150] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm syz.3.1834: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.081849][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.107392][ T9735] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.121041][ T9735] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 171.131171][ T9735] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 171.152892][T10170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10170 comm=syz.3.1839 [ 171.393965][T10188] sctp: [Deprecated]: syz.5.1844 (pid 10188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.393965][T10188] Use struct sctp_sack_info instead [ 171.471060][T10194] __nla_validate_parse: 2 callbacks suppressed [ 171.471152][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 171.477714][T10192] loop6: detected capacity change from 0 to 2048 [ 171.505452][T10192] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c028, mo2=0002] [ 171.513709][T10192] System zones: 0-7 [ 171.518471][T10192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.550283][T10202] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.562517][T10202] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1848: Invalid block bitmap block 0 in block_group 0 [ 171.582639][T10202] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1848: Failed to acquire dquot type 0 [ 171.594381][T10202] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1848: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.616092][T10202] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1848: Invalid inode bitmap blk 0 in block_group 0 [ 171.629238][T10202] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 171.638157][ T8326] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:34: Failed to release dquot type 0 [ 171.652741][T10202] EXT4-fs (loop3): 1 orphan inode deleted [ 171.666276][T10202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.679016][T10192] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1847: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 171.700092][T10192] EXT4-fs (loop6): Remounting filesystem read-only [ 171.719975][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.730354][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.843150][T10215] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1851'. [ 171.892798][T10220] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 171.892798][T10220] program syz.3.1852 not setting count and/or reply_len properly [ 172.077696][T10228] netlink: 'syz.6.1855': attribute type 1 has an invalid length. [ 172.091234][T10226] netlink: 'syz.1.1853': attribute type 12 has an invalid length. [ 172.121048][T10228] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 172.175602][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 172.398230][T10261] EXT4-fs (loop6): too many log groups per flexible block group [ 172.416872][T10261] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 172.431692][T10261] EXT4-fs (loop6): mount failed [ 172.492826][T10266] syzkaller0: entered promiscuous mode [ 172.498363][T10266] syzkaller0: entered allmulticast mode [ 172.521239][T10268] EXT4-fs: Ignoring removed i_version option [ 172.544466][T10268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.570555][ T7162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.609789][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1863'. [ 172.620424][T10253] bridge_slave_1: left allmulticast mode [ 172.626474][T10253] bridge_slave_1: left promiscuous mode [ 172.632343][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.642030][T10253] bridge_slave_0: left allmulticast mode [ 172.647718][T10253] bridge_slave_0: left promiscuous mode [ 172.653585][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.677510][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1869'. [ 172.714387][ T3392] infiniband syb2: ib_query_port failed (-19) [ 172.799649][T10288] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.809571][T10288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10288 comm=syz.3.1871 [ 172.822735][T10288] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.831729][T10288] Symlink component flag not implemented [ 172.837473][T10288] Symlink component flag not implemented [ 172.843474][T10288] Symlink component flag not implemented (7) [ 172.849465][T10288] Symlink component flag not implemented (116) [ 173.006940][T10312] lo speed is unknown, defaulting to 1000 [ 173.031032][T10315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.047430][T10315] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 173.047497][T10315] EXT4-fs: failed to create workqueue [ 173.062637][T10315] EXT4-fs (loop1): mount failed [ 173.119841][T10326] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 173.250705][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1883'. [ 173.805744][T10356] set_capacity_and_notify: 5 callbacks suppressed [ 173.805760][T10356] loop6: detected capacity change from 0 to 512 [ 173.818987][T10356] vfat: Unknown parameter 'ÿ' [ 173.862223][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 173.862239][ T29] audit: type=1400 audit(1767805042.211:36202): avc: denied { write } for pid=10363 comm="syz.6.1893" name="event3" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.907780][T10362] xt_NFQUEUE: number of total queues is 0 [ 173.939161][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 173.982378][ T29] audit: type=1326 audit(1767805042.326:36203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.022944][ T29] audit: type=1326 audit(1767805042.358:36204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.046610][ T29] audit: type=1326 audit(1767805042.358:36205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.066571][T10386] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1899'. [ 174.071410][ T29] audit: type=1326 audit(1767805042.358:36206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.102776][ T29] audit: type=1326 audit(1767805042.358:36207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.126429][ T29] audit: type=1326 audit(1767805042.358:36208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.150244][ T29] audit: type=1326 audit(1767805042.358:36209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.173969][ T29] audit: type=1326 audit(1767805042.358:36210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.197801][ T29] audit: type=1326 audit(1767805042.358:36211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10375 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74d3af749 code=0x7ffc0000 [ 174.277752][T10408] syzkaller0: entered promiscuous mode [ 174.283306][T10408] syzkaller0: entered allmulticast mode [ 174.292721][T10408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10408 comm=+}[@ [ 174.352044][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 174.367132][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1909'. [ 174.516087][T10449] loop3: detected capacity change from 0 to 4096 [ 174.522908][T10449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.532658][T10449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.575933][T10461] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 174.733619][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.757362][T10478] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.780172][T10480] SELinux: Context Ü is not valid (left unmapped). [ 174.791702][T10481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.799023][T10480] loop3: detected capacity change from 0 to 2048 [ 174.805765][T10481] batman_adv: batadv0: Removing interface: dummy0 [ 174.828150][T10480] Alternate GPT is invalid, using primary GPT. [ 174.834704][T10480] loop3: p2 p3 p7 [ 174.916642][T10498] loop3: detected capacity change from 0 to 164 [ 174.924089][T10498] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 174.955252][T10502] rdma_op ffff88811a51bd80 conn xmit_rdma 0000000000000000 [ 174.992467][T10504] loop8: detected capacity change from 0 to 2048 [ 175.000704][T10504] EXT4-fs: Ignoring removed i_version option [ 175.019072][T10505] Process accounting resumed [ 175.027425][T10504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.041724][T10504] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.054118][T10504] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1939: corrupted xattr block 128: bad e_name length [ 175.069397][T10504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 175.079408][T10504] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1939: corrupted xattr block 128: bad e_name length [ 175.093894][T10504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 175.103354][T10513] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1939: corrupted xattr block 128: bad e_name length [ 175.117254][T10504] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1939: bg 0: block 321: padding at end of block bitmap is not set [ 175.132547][T10513] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 175.141759][T10515] loop3: detected capacity change from 0 to 128 [ 175.165042][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.268260][T10540] loop8: detected capacity change from 0 to 1024 [ 175.276535][T10540] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1950: bad orphan inode 134217728 [ 175.288004][T10540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.321124][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.389325][T10555] loop8: detected capacity change from 0 to 512 [ 175.397870][T10555] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.413765][T10555] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.429814][T10555] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 175.442404][T10555] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.478873][ T7646] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 175.495275][T10564] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.536803][T10569] loop3: detected capacity change from 0 to 1024 [ 175.543594][T10569] ext4: Unknown parameter 'fowner<00000000000000000000' [ 175.549319][T10576] loop8: detected capacity change from 0 to 2048 [ 175.557391][T10576] EXT4-fs: Ignoring removed i_version option [ 175.565876][T10576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.578164][T10576] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.613228][T10585] netlink: 'syz.3.1963': attribute type 3 has an invalid length. [ 175.661708][T10591] vlan2: entered allmulticast mode [ 175.666886][T10591] bridge_slave_0: entered allmulticast mode [ 175.790507][T10589] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1962: bg 0: block 345: padding at end of block bitmap is not set [ 175.806179][T10589] EXT4-fs (loop8): Remounting filesystem read-only [ 175.875200][ T7646] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.908709][T10605] infiniband !yz!: set down [ 175.913292][T10605] infiniband !yz!: added team_slave_0 [ 175.925763][T10605] RDS/IB: !yz!: added [ 175.930026][T10605] smc: adding ib device !yz! with port count 1 [ 175.936346][T10605] smc: ib device !yz! port 1 has no pnetid [ 176.269484][T10633] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 176.278279][T10633] FAT-fs (loop8): Filesystem has been set read-only [ 176.288611][T10636] bridge1: entered promiscuous mode [ 176.294032][T10636] bridge1: entered allmulticast mode [ 176.354302][T10638] __nla_validate_parse: 17 callbacks suppressed [ 176.354320][T10638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1974'. [ 176.720572][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 177.056895][T10661] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1982'. [ 177.099797][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1983'. [ 177.109459][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1983'. [ 177.118752][T10664] netem: change failed [ 177.123412][T10664] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1983'. [ 177.313809][T10676] EXT4-fs: Ignoring removed i_version option [ 177.319908][T10676] EXT4-fs: Ignoring removed bh option [ 177.325316][T10676] ext4: Unknown parameter 'dont_appraise' [ 177.367515][T10680] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 177.423057][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 177.584445][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b876e00: rx timeout, send abort [ 178.060969][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b876200: rx timeout, send abort [ 178.069337][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b876e00: abort rx timeout. Force session deactivation [ 178.129295][T10753] lo speed is unknown, defaulting to 1000 [ 178.545497][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b876200: abort rx timeout. Force session deactivation [ 178.628138][T10763] lo speed is unknown, defaulting to 1000 [ 178.666787][T10765] netlink: 'syz.8.2015': attribute type 11 has an invalid length. [ 178.727339][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 178.727354][ T29] audit: type=1326 audit(1767805047.303:36493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.1.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4e41f749 code=0x7ffc0000 [ 178.798373][ T29] audit: type=1326 audit(1767805047.376:36494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.822012][ T29] audit: type=1326 audit(1767805047.376:36495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.845750][ T29] audit: type=1326 audit(1767805047.376:36496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.869468][ T29] audit: type=1326 audit(1767805047.376:36497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.893164][ T29] audit: type=1326 audit(1767805047.376:36498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.914358][T10780] set_capacity_and_notify: 3 callbacks suppressed [ 178.914369][T10780] loop8: detected capacity change from 0 to 128 [ 178.916789][ T29] audit: type=1326 audit(1767805047.387:36499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.953132][ T29] audit: type=1326 audit(1767805047.387:36500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 178.976768][ T29] audit: type=1326 audit(1767805047.387:36501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 179.000437][ T29] audit: type=1326 audit(1767805047.387:36502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3296f749 code=0x7ffc0000 [ 179.076679][T10785] loop3: detected capacity change from 0 to 512 [ 179.083578][T10785] EXT4-fs: dax option not supported [ 179.119029][T10765] lo speed is unknown, defaulting to 1000 [ 179.163118][T10766] loop3: detected capacity change from 0 to 512 [ 179.170736][T10766] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.574546][T10793] lo speed is unknown, defaulting to 1000 [ 179.725385][T10766] EXT4-fs (loop3): 1 truncate cleaned up [ 179.731538][T10766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.757655][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 179.913448][ T9735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.009291][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 180.061806][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 180.197141][T10813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 180.332313][T10826] ip6gre0: left promiscuous mode [ 181.332320][T10826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.442075][T10824] lo speed is unknown, defaulting to 1000 [ 181.505935][T10839] bond2 (unregistering): Released all slaves [ 181.563089][T10837] lo speed is unknown, defaulting to 1000 [ 181.787438][T10863] __nla_validate_parse: 2 callbacks suppressed [ 181.787454][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2036'. [ 181.808292][T10859] loop1: detected capacity change from 0 to 512 [ 181.835218][T10859] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.863038][T10859] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.875669][T10859] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.2035: Allocating blocks 41-42 which overlap fs metadata [ 181.915380][T10859] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2035: Failed to acquire dquot type 1 [ 181.927375][T10859] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 181.942102][T10859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2035: corrupted inode contents [ 181.954688][T10859] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.2035: mark_inode_dirty error [ 181.975705][T10859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2035: corrupted inode contents [ 181.990540][T10859] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.2035: mark_inode_dirty error [ 182.002236][T10859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2035: corrupted inode contents [ 182.014433][T10859] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 182.025390][T10859] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.2035: corrupted inode contents [ 182.037763][T10859] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.2035: mark_inode_dirty error [ 182.037829][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2038'. [ 182.057768][T10881] netlink: 'syz.6.2038': attribute type 30 has an invalid length. [ 182.071060][ T8736] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.079433][T10859] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 182.085657][ T8736] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.089248][T10859] EXT4-fs (loop1): 1 truncate cleaned up [ 182.105651][T10885] netlink: 'syz.8.2039': attribute type 1 has an invalid length. [ 182.110839][ T8736] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.124566][T10859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.154193][T10885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.161615][T10891] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2039'. [ 182.172435][ T8736] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.246127][T10897] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.271700][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.285516][ T3316] ================================================================== [ 182.293647][ T3316] BUG: KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch [ 182.302359][ T3316] [ 182.304684][ T3316] read-write to 0xffff888101674148 of 8 bytes by interrupt on cpu 1: [ 182.312754][ T3316] percpu_counter_add_batch+0x110/0x130 [ 182.318320][ T3316] __wb_writeout_add+0x42/0x1b0 [ 182.323207][ T3316] __folio_end_writeback+0x14b/0x360 [ 182.328527][ T3316] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 182.334773][ T3316] folio_end_writeback+0x1c/0x70 [ 182.339719][ T3316] end_buffer_async_write+0x156/0x1f0 [ 182.345108][ T3316] end_bio_bh_io_sync+0x79/0xa0 [ 182.349976][ T3316] bio_endio+0x37e/0x420 [ 182.354238][ T3316] blk_update_request+0x336/0x730 [ 182.359277][ T3316] blk_mq_end_request+0x26/0x50 [ 182.364146][ T3316] lo_complete_rq+0x98/0x140 [ 182.368749][ T3316] blk_done_softirq+0x77/0xb0 [ 182.373450][ T3316] handle_softirqs+0xba/0x290 [ 182.378153][ T3316] run_ksoftirqd+0x1c/0x30 [ 182.382586][ T3316] smpboot_thread_fn+0x32b/0x530 [ 182.387570][ T3316] kthread+0x489/0x510 [ 182.391666][ T3316] ret_from_fork+0x149/0x290 [ 182.396273][ T3316] ret_from_fork_asm+0x1a/0x30 [ 182.401055][ T3316] [ 182.403384][ T3316] read to 0xffff888101674148 of 8 bytes by task 3316 on cpu 0: [ 182.410943][ T3316] __wb_update_bandwidth+0x98/0x5d0 [ 182.416169][ T3316] do_writepages+0x2dd/0x310 [ 182.420777][ T3316] filemap_write_and_wait_range+0x144/0x340 [ 182.426688][ T3316] sync_blockdev+0x35/0x50 [ 182.431122][ T3316] ext4_put_super+0x610/0x7d0 [ 182.435816][ T3316] generic_shutdown_super+0xe6/0x210 [ 182.441121][ T3316] kill_block_super+0x2a/0x70 [ 182.445827][ T3316] ext4_kill_sb+0x42/0x80 [ 182.450171][ T3316] deactivate_locked_super+0x75/0x1c0 [ 182.455572][ T3316] deactivate_super+0x97/0xa0 [ 182.460267][ T3316] cleanup_mnt+0x2a9/0x320 [ 182.464691][ T3316] __cleanup_mnt+0x19/0x20 [ 182.469122][ T3316] task_work_run+0x131/0x1a0 [ 182.473732][ T3316] exit_to_user_mode_loop+0x1fe/0x740 [ 182.479114][ T3316] do_syscall_64+0x1dd/0x2b0 [ 182.483720][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.489648][ T3316] [ 182.491986][ T3316] value changed: 0x00000000000001b0 -> 0x00000000000001c0 [ 182.499114][ T3316] [ 182.501440][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 182.507619][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.519098][ T3316] Tainted: [W]=WARN [ 182.522904][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.532969][ T3316] ================================================================== [ 182.544633][T10891] gretap1: entered promiscuous mode [ 182.553327][T10891] bond2: (slave gretap1): making interface the new active one [ 182.562861][T10891] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 182.576851][T10885] macvlan0: entered promiscuous mode [ 182.582158][T10885] macvlan0: entered allmulticast mode [ 182.588008][T10885] bond2: entered promiscuous mode [ 182.593516][T10885] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 182.601801][T10885] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 182.618069][T10885] bond2: left promiscuous mode [ 182.631508][T10897] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.749249][T10897] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.795671][T10897] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.858415][ T8736] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.870290][ T8736] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.881020][ T8736] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.892784][ T8736] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0