last executing test programs: 6m43.573638075s ago: executing program 32 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2b63008e26"], 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 6m16.511228273s ago: executing program 33 (id=192): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace$setregs(0xf, 0x0, 0x6, &(0x7f0000001cc0)="0fe981acce55cc1eaa3f2ca657fdcc01481e20ab78ccef0d799415f10c071a43cd486b8dce0ff8657f2e2a0ac9f05e4454caedf4ab9c6461503d066352af74e2ab1ef8a26e66a1a386c3b064a0c258b3b75a454d7ac8f7c28c6ae923b026902780cb0451ff5bdc5527a5d2c6db33254ff65631d6e6d7b3e03d10f15c194efebc0c91217b23e648c61f242f4b33f725aefc7ed3000c7f58b7dc5a7bfc62f203e9e38ddbe0c88349d592770889cf315f0821a0cb7c25dd03571bc538dd681487ecfaf95152b321a65f0aef43b0d77a29b75c0264273f97f1cb7617549f9fe1c652e79bad59b8ecaebcf484bcb98fb0c9d321c2c8c2bfd0641ab479e04bd68ad3639699c1a9c81ec87a82c277e4922ceb1f1b76c520cc0d2ed0271adea589e4dfc1e7fa8ef2bf7bab21e4c87f23bf47e5c3a0c99c9a2658b7cb5a12b55df84c765eb08bd2b5f262245e538d1ab67b4a82ff015b9d244263e257497443c3a936f1c5552f876ac8649bcdd459ee1545b7c9a943e8d24dc28ea947171eb7974cf811d47029ac23e7ab9bda4a21b4fe008509a38ecb9ffe3df762564d4970eeca7d26b774da1e3a2c09eeea0ce749993b6b06f991f668dcacba789b5258fd97c97efc8e934f6ce6a83dadf41e76a99e8d20d84c8fe5ccdd8898dec537aa55a6ad3b774972a47042e2d34e5ba8bc305f01e295a97715dd4d31893bfa9fff8aaaa652605363acdaa4941008cdb99ae24f518f80f93025c2380000e613776fa08a4f0f018e03915594cbe2e5adcf4de7645365ae584c1283a96b708f975e7b9dddffe3dab345a9ba63576d5c22dbb919259b8d279910bc07d02231adf77413e1aca9f19492e883086b790f818c97761b9bc0763739e375da0037b7711561e94bfb1d5ffa97f1ae76a05dbaf3297641298087ab3c659e5d1e57c04b0dec18508407ae7468b4c1866e0d64df9ae919feae11b02230de12b928980323cb7b55f60af9bfcb9287c596476737880f9f40241ed9caefcef2e4c42552be5c1dea050fd3c3ed8cdce5deb161efc4d15ffee966f6889ed3ea73c745a47dc13b8b2bb623b9935204cb783652f6a5d17a5fce71a7895adc055b82f42e28008197672393f1784a63d97b7bf28178765aa75ff003ba20770479c65e9168b8952bbdad5bc423ed86461ab895f4fa6b3c95192d831b1a352c8ec9b6fc760d6b7a33bc87119cbc05f0b06ef1bd33d265cfefebab30b9ebf873d99511af08aea4d479a8dfa9a6751ba480a0381f3471689a7be2d855dde00d0a4202229a608e489df914864e3c2c9e21cdfe09ecf1701310bae4aa617a3307ff5131746a105eabb1714637e45d5dc15747a1e7850d9a24f0fd9ef1a0d4440c4fb18974d57098e30af6e1d026bef7bc6bd1dcc43e1b91e80dfe5a36680bb90ed348f62f6bb17daf9fe62727ac475a54c005c48b5f4de580d086b0259812ffbdf4fe58fe5c6e9e2ea25f4915b1276e3f53d8d894eed16015d13e2e8c859a3c90066a3c250b60bf5e000e396c969b5861ceb37bc2380202aa9a687a185617f582ee69dbc32fabd1489cc5d114cc83a6c5db7fee1d1aa950b2ff8a3c8941ab7e0b577f306821e3f50a66cfd6ff239f5a764882da2314405e426fb65e55aff78eda6f0a2ef88431b71bd30b0a7a36d17abe0dee1db668431bf1a00a5637620855513aaff4981aa8f841354168dc1e745be0b1f1e6c35cee18ca24c0f3d3ce5a78f981ce7fdbcbfbe89a5ba76eb4528a203f29afab206684e63841c4e90b4768e87844160d42629c39e8a8590b474fb990c0bc48b0aaf1f21f8b137e811041abf56b04e236a29d18767e83f4522b7a8e1cf97dbf91dfc3f3b606662b6fe956d646480a42a7cb78b3f7b2d32d5c1991956dff7d92472203bcc2ae22d26d3756fc91e0ffa19dee8a7ea67f6cd5f3a5cf79d089d4f33454fa82a1771917249f85740c00a1e1da701148d2513497f25f1d3323c96f30fbab5ba35b6b650d2fc702ddc0d17ac14839b47cf9f36d2d64b919d2e5142189c2c4ed7f9df4b0ed388e955106a74cd6a41a2c76af96255c9267d41f0d4502a9a1b1cbec0ec73120ec98960a6dceb9460295cb0a92ec43cca09d7a44751d7922069e0f3c6382163d80c49133972b822bd24680f4cc8432554b384773070a454220fa33d3b04aa38d036cc182c19012eebc1bba509dd0fc5ab5656e9e6c4db3a5cabcaf373c667b22e5f300bf9a6caa0634664f5bd6c0fc48fc95a84d92b119e606e5e60a9b04b12e64c4254ba4414873c2b3d3816b619549f91a7fb15151e6c32cfd3c70ff77061cfb8bb8ce36c5882df191c398b144d6632dd5c6f4b35fd97975c842715ea48f622478fa59c32934ac55070c1a015b7a9e79c6625a3f8f84f583813bb727945ce845bad10f55d37efd4cf26fbfc739ba810105113c16e1263bf3bec37c28af2161e6d312532b64c53211c294c1f7749707200f38f081b551946a16d6294c02a3a2214f94081ee527a71a8bd0c758378d20b8b7950cf1a419a0e23a8a9ce66d8e888dad409cc541b939db3aa32c15e58c0b6922e11d627281f8b11909d31ac191f02d84bfe798ee1c328196b797d2980eead6377d20ffc41b56269bea36941885e65343fd91c6d6c72728698220f2445dbd75b37eb50c618af91eb3a5f20c7fe0165a3bc6751d55341d66ca15b2ee826b5948761ad5c8b384190cb584799f1870464c83ac0c3cbda18044ee7b3a2432d1eb7cb60e685940bb7cce59c3cec9242de8d6d0c3f33b3f3022e40e00e236936a4f8e1534a29929c7b35147741036e051de2187791d3cb7c200ac050795ce5c4613c10306361c9a94c1de6c65ef2d5d81c6ce22edf8c2fb7699cd1f93cf1dba2f085b3b217a1d406eea6b080a6dbb0824c5af4d089bb43d7abeba0eb039320bca21ef62cc4ee2c7eb5aeba727b1f4470679a3002d4feb1cb8838e7c239bc05e8e318da8c83504111022d090d31b1ae8d68faf686b144c81f0ee9da78fb7bac76ed01f9ab7059b0c19e7215c3d326b96d2612a36363f461f4f4614d90442c309d9957bc8da32c2d0fbffd9160252196aa5504c4835b54172bab9805c115b3a9b606cdbf5d13ebe56a4a8662bf8173ed66036b0a101b2a9a1b47e2fa1da2f305e6e27035581144521035d20217eff593cb065db46e46b672157b84414e026550d437eb4e77b2c7d163138c9ee7766395ebf6b8bbb5dca605147eac8eb87674ba8fbfb8d317c2d8747f1fa1b09d6ba6479a275c32d4b774e9b3dbbdcdbc7d2a7758a25cac0891f7ddb796e7d7e8bd9e8536cb1f502b5f7b2a8fafc1d80681e268b4e2689dbf0ae043cb0229a65a6709e6400b08022b0e71a2cb92bada1572b52a7088e4744755cb86522d22827437625494ffb7e5f377c465445f422c5885218f7a13c840b5498b1c71800601dac1f0454f907193baf7221de027c9690aed4ea28557c88c96934795dc9e0546a92a574bf82b3afd9869714857dcc12e84ceb5c9c93d5ea2e570e13339ad231d494e7ae1075c863c9ca9e697a3e692835d36d82c596f9dbf61bac1fec3a636dc98e7f3ec553900160f4b8e91f96762645289b980b493c219923b70a1ccd15448bba508c7990d2cb5025b76cb86ad5081bec0c4ecec9308af7d0e4a0154e8f0251ebfdb3f854acac44dec6d740db2573851359362f672eb4fc38d292476ad9698370967ba8521d4876d4b2aa7bd67e422d35c32acd6c5ceca29cce2788162533b80e1334766db7dc4fe0299a3324dde0d9617681ef6b3e5d4aad1a4431af319b49777c991f70443cb15b3fb56a4ba67d83b96d7d928586afe270b4833101d30c69acc8bcc1b704e4f3ddb6b6694b6688e4224d6ce290a14e67de22a32e6c9f294f1bb8812ffebd0c206e9d2d627aafac351657f088a6f1913dfc8d6f647a187f2a88edd72715e24111ab5d1fd9a5babf7e25c91b9f312f86d29fb20e8ec7fda21e5d6771f941fadd234ccd59bf9afcb71fbaeaaffaa194274d646bd96f168af6871b4649ff33a4776e623706f8cd93a4e277410af676099428705bdc0878a513eaeb4db7f59af3e912c69923d93232c4f1ebbc3e77a3df4fc5a45cf99b76f28818e8993ccd432f893819ea696544f200fa8ab588bf9c3878656f5e0413a2a15b6bb24acaeea06041134260c23e2ecdb204689d08e845f9202d605f7c658de60b23f458d17d4305a860c98be03d5daf756494fe70c44ffe495950961bd93b748ecb5a4896bcdd0e0186e32577e9228e65b1a233af226b82c960b91f654663dacc59551aace98fc02c41b01d6c71e110a82dfe73152ca49eabab4625bae8bafa25522499889d53e1080d6ab4388c5ad9e5ee09b90405ce2b2935316000f391ccd04c0669fb24c2045df1eccee618d83ebfcaf49e0bdff80f9a931b8224405b3b5d3261b6065d87786989e05a7a737f9eeb3c8684590132bc8d0dcad1b5f0ef77be7f417735cf4a6f30747d101563717e0e7424376705fece27591cbaffb8f44644ecf83daedd6b497c562c469fe03915266ec5e87a311c555d7ae5d5a72d179850229be4455a068e70f4df0adb53e4cf1440e61f263dd92fa8442ef014f76290688377c975dd7c2b4e2a83ebc940b61c4def42dc3801fb3b59aea02757261bbed8dc2e3c522067a73424a06e8ab1ece05e86c6d2ad31703fa29df5344e6d45ee7a55f5ba34cc3188928961fd8f064f42de489f917b193fa148e72f0ee2a42b842801a78ae802c2db4c97d35fc27ba33e02e7a3f6f1a1165442597e5b336030586848b7cbc521c23a2146f03a5bcafb1bba83fb7d55388d0e4b093befe8427021bc48a3f87d9afc0fe0d9da23904feda7967969f171d66371bd94df56802bed670529ba6e369baa763d8a9123b2cc4c9829bb2d033425e6ff71edb2094f17854c0012bc7dde15250668241309aeda5fdc893bdfda5ce93a55541550d9a551456ce7fdda23ec696d6367c12f985658e9628bf33900881216f591bd8887ff6be11187ff3a0ccad8623c4e9c0e636686f3cdc3407a3624981a87d594841dd41897f80352de9750f03719a06b28d671ab1dba520f54657f84cb7ae2e31f7dd7cb7ade0e3990364e592840272c0da6f805339036cb3456ad54858b3c05b739a526557097570250e081614295f276ebcd1471d98567bcccf86abf6de5686cab2315c4216edf1d841aa819951bb6bd747b431b5610c502a8fd4bc625451139db17221cbef39de2641534dbc163a962c56f5969ad32f9c7c54e2eab4509580cb6640d07a9cb8b723361bc9d4f8852472c7cceb671898796157e10d1b21332f5c9f99e511e5bcbb214aaa6596acad126653d16d053e10c344129eb3894bd847b2e504a9f2e4e8431e8ddf35b924cbe042867388108804de8b43ee72ebfb63471b6907e1e44f05e24bf912b278b7bb49f5f70b8e7ac39ea7105d52a20e05ecf5c3dcdd33c853ec9d8c943fcaf19a465cfe9be8de7c7cd5015c838499582eec85364cd13c30b6d6407877714fcb9afdc7441ea9206b4f65d29af8251c103e08b26c5581302ec2e7b21f09929f252f74765fcb17358a3690d70999e5a4a627d4bc49f19a7c74457b750ebaac02713bc1871fc56ba601ea59794d4062b881d1be10496269fb1d2f6e9c58de61069cc8bf99367815f29c22cc708c76beecae859c441306fecf073b92c7f13b07a20b18cee558619e745e897c5bc24eb0e1716ffaa27a6912b7ed67d9b7b6addd361751e4fa72dfb9ce3c8e97b87650dc3f3cc7ffec7533fed85821b3cca") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 6m9.42469895s ago: executing program 34 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff60) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r6, r5, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x5, 0x0, 0x8, 'syz0\x00'}) 6m7.907848682s ago: executing program 4 (id=247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000a00)=0xbfab, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_clone3(&(0x7f0000002440)={0xa200800, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x6, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x4, 0x21, 0x8, @multicast1, @multicast2, {[@noop, @noop]}}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r5) 6m7.219790258s ago: executing program 4 (id=249): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m7.219435508s ago: executing program 35 (id=249): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m2.580280989s ago: executing program 36 (id=273): r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x800, 0x0, 0xff, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003980)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r7, 0x1, 0x0, 0x10000, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffe}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5m56.179677782s ago: executing program 37 (id=312): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @tick=0xffffa, {}, {0x1, 0x1}, @note={0xd, 0xb, 0x4, 0x9, 0x200}}, {0x0, 0x0, 0x0, 0x1, @time={0x0, 0xc0}, {}, {}, @quote={{0x0, 0x4}}}], 0x38) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2e020000008000000000010000000500060001004e200000000000000000954861e98ef257cf178e6d9a543e89b38ea30d647e"], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) fcntl$setlease(r5, 0x400, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 5m45.808032943s ago: executing program 38 (id=363): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006d40)=@newtaction={0x397c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x3968, 0x1, [@m_pedit={0x3964, 0x1, 0x0, 0x0, {{0xa}, {0x3938, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x6}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0xffffffff, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x26f, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x30}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1e}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x2000000, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x2000007, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x4, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x7f}, {0x0, 0x15, 0x0, 0x48510, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x100000, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x104, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffb, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x9, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x100000f}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xcdc5, 0x100, 0x8, 0xc, 0x7ff}, 0xc, 0x5e}, [{0x7fff, 0x6, 0x9, 0x59, 0x8, 0x1000}, {0x0, 0x9, 0x9, 0x6, 0x7, 0x6}, {0x400, 0x0, 0xa, 0x2, 0x1000, 0xf}, {0x5, 0x2, 0x9f, 0x9, 0xfffff001, 0x8}, {0x4, 0x1, 0xffff, 0x6, 0x80000000, 0xa}, {0x3, 0x2, 0x7, 0x6, 0x8, 0x2}, {0x4d5f, 0x17, 0x6, 0x8, 0x6, 0x2}, {0x9, 0x4, 0x5, 0x9, 0x8, 0x8}, {0x3, 0x80000000, 0x3, 0x9, 0x9ce, 0x100}, {0x3, 0x1, 0x401, 0x8, 0x7f, 0xed}, {0x40, 0xfffffff2, 0x7fffffff, 0x1, 0x7, 0x9}, {0xffffffff, 0x4, 0x8, 0xe, 0x5, 0xf}, {0x6, 0x6, 0x2, 0x9, 0x4, 0xe2571b5}, {0xffff, 0x3, 0x7, 0x87, 0x3, 0x7fffffff}, {0x8e7, 0x4, 0xe4bd, 0x3, 0x7, 0x3d4}, {0x8, 0x6, 0x8, 0x0, 0xffffff61}, {0x1ff, 0x81, 0xaf2, 0x401, 0x3, 0x1}, {0x80000000, 0x2, 0x1, 0x4, 0xd56, 0xc}, {0x81, 0xffffff7f, 0x2, 0x0, 0x101, 0x1000}, {0x6, 0x1, 0x8, 0xffffffff, 0x5, 0x8}, {0x605, 0x60a, 0xffffff7c, 0x8, 0xc3c, 0x3}, {0xfffffff7, 0xfffffff3, 0xb8, 0xc, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x40, 0x3, 0x1000100}, {0x6fe, 0xcf, 0x3, 0x3, 0xba, 0x3}, {0x200, 0xffffff09, 0xcba, 0x4, 0x1, 0xdc}, {0x7f, 0x5, 0x7, 0x7, 0x8000, 0x6}, {0x7, 0x1, 0x8, 0x10, 0x6, 0xffff}, {0x101, 0x7, 0x683b, 0x2, 0x3d8, 0x10}, {0x6, 0x6, 0xb, 0x2, 0xc442, 0x9}, {0xa, 0xb5, 0x6, 0x8, 0x7f, 0x1}, {0x6de, 0x101, 0x8, 0x3d, 0x6e2d1bf4, 0xffff}, {0x4, 0x9, 0x7, 0xfff, 0x9}, {0x6, 0x3, 0x101, 0x9, 0x6, 0x1}, {0x6, 0x40, 0x3, 0x0, 0x6, 0x7}, {0x44f6, 0x8, 0x8, 0xa8, 0x5, 0x4}, {0x7, 0xd0a1, 0x1, 0x6, 0x8, 0x8}, {0x6, 0x4, 0x5a, 0x2, 0x4, 0x9}, {0xfffffc00, 0x0, 0x8, 0x2, 0x5801, 0x6}, {0xd68a, 0x4, 0x8001, 0x3, 0x8, 0x1}, {0x5, 0x7, 0x8, 0x5, 0xffffc2a8, 0x2}, {0x7ff, 0x8000, 0xfffffffa, 0x8, 0x80000000, 0x9}, {0x63, 0x100, 0x8, 0x8, 0x7fffffff}, {0x7, 0x0, 0xb, 0x4, 0xd778, 0x8655}, {0xfffffff9, 0x401, 0x3, 0x1, 0x1f, 0x4}, {0x4, 0x0, 0x6, 0x9, 0xa061, 0x2f33}, {0x7, 0xb, 0x5, 0x1, 0x2, 0x600000}, {0x81, 0x2, 0x7, 0x401, 0x4, 0x1}, {0x3, 0xc3e3, 0x3e5, 0x9, 0x9313, 0x4}, {0x9, 0x1, 0x1, 0x80, 0x5, 0x9}, {0x8, 0x4, 0x2, 0x40, 0x1, 0x4}, {0x6, 0x10001, 0x4, 0x100, 0x5, 0x3ff}, {0x7ff, 0x81, 0x3, 0x7, 0xa, 0x7}, {0x1, 0x2, 0x5, 0x399, 0x3, 0xffffffff}, {0x10, 0x2, 0x9, 0x8001, 0x1ff, 0x5}, {0x8000, 0x7, 0xfffffffb, 0x5, 0x7, 0x5fc}, {0xc917, 0x10, 0x1, 0x2, 0x4, 0xfffff1da}, {0xfffff837, 0xb, 0xba7c, 0xfffffff2, 0x6, 0x2}, {0x5, 0x40, 0x4, 0x0, 0xf07, 0xf}, {0x2, 0x8001, 0x4, 0x810, 0x8, 0xffffffff}, {0x0, 0xcb, 0xc, 0x3, 0x0, 0x80}, {0x6, 0x7, 0x3, 0x4, 0x7, 0x2}, {0xfff, 0x10001, 0x7f, 0x5, 0xe841, 0x8}, {0x2, 0x1, 0x1ff, 0x3, 0x0, 0x1}, {0x6, 0x7, 0x1400000, 0x8, 0x80000000, 0x5}, {0xb7e, 0x3, 0x4, 0x0, 0x5, 0x400}, {0xc, 0x81, 0x2, 0x5, 0x400}, {0x4, 0x3, 0x6, 0x7, 0x3, 0x3}, {0x5, 0xffff, 0x0, 0x0, 0x2e2, 0x2}, {0x6, 0x4, 0xff, 0x9, 0x61222e, 0x3}, {0x0, 0xc4b, 0x8, 0x80000000, 0x200, 0x1}, {0x1, 0x2, 0x3, 0x5, 0x5192c3ef, 0x2}, {0x100, 0xfffffffa, 0x2fb, 0x0, 0x4, 0x3}, {0x8, 0x2000003, 0x80000001, 0x101, 0x431, 0x2}, {0x6, 0x0, 0xf5, 0x3ff, 0x3, 0xe4e6}, {0xab, 0xffff, 0x200, 0x4, 0x3, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x0, 0x4}, {0x80000000, 0x9, 0x37, 0x80000001, 0x1, 0x9}, {0x331, 0x800, 0x9, 0x4, 0xf, 0x6}, {0xe9, 0x0, 0xa7, 0x7, 0x4, 0x9}, {0x9, 0x3, 0x3, 0xfffffff7, 0x7fff, 0x3}, {0x1, 0x9, 0x4, 0xfffffffb, 0xd, 0x9}, {0x2, 0x1, 0x7, 0x8001, 0x1, 0xffff8001}, {0x2, 0x19a8, 0x800, 0x101, 0x3, 0x5}, {0x4800, 0xcb, 0x80000001, 0x2, 0x7, 0x7}, {0xb, 0x3, 0x8, 0x4df0, 0x7, 0x40}, {0x3, 0x0, 0xda2, 0x42d4, 0x3, 0x4}, {0x0, 0xbf, 0x5, 0xffff, 0x6}, {0x1ff, 0x10001, 0x0, 0x9, 0x7, 0x10001}, {0x45b, 0x9, 0x4, 0x5, 0x6, 0xbc2}, {0x4, 0x2, 0xa9, 0x2, 0x2, 0x9}, {0x0, 0x200, 0xbf, 0x6, 0x266, 0x8}, {0x80000001, 0x0, 0x0, 0x1, 0x6, 0x5}, {0x19c00000, 0x9, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x4, 0xfffffffd}, {0x0, 0x1, 0xe, 0x8, 0x79, 0xd}, {0x400, 0x7, 0xc, 0x8, 0xf, 0x3}, {0x5, 0x5, 0x9, 0xa0d, 0x40, 0x6456}, {0xbb4e, 0x0, 0x3a, 0x8, 0xfffffffb, 0x8}, {0x10, 0x7ff, 0x7, 0xfff, 0x0, 0x9}, {0x8, 0x40, 0xfff, 0x1, 0x1, 0x1}, {0x0, 0x0, 0xe72, 0x8, 0x0, 0x3}, {0x401, 0x6, 0x8, 0x2, 0x0, 0x81}, {0x7, 0x6, 0xa5, 0x0, 0x401, 0xc}, {0x2, 0x9, 0x9864, 0x9b, 0x5}, {0x6, 0x7ff, 0x5fc5, 0xb, 0x7, 0x237}, {0x0, 0x80000001, 0xa4, 0x0, 0x7, 0x40}, {0x9, 0x6, 0x1000, 0x7, 0xd2e, 0x1}, {0x7, 0x3, 0xc, 0x8, 0x40, 0xb}, {0x7, 0x2, 0x7, 0x8, 0x200, 0x8}, {0x9, 0xffff, 0x101, 0x7a, 0x8, 0xfffffff8}, {0x9, 0x4, 0x0, 0x4, 0x8001, 0x800}, {0x2, 0x83a, 0x5, 0x2, 0x9, 0xffffffff}, {0xffffff4c, 0x2, 0x10001, 0x2, 0x7, 0x2}, {0x5, 0x0, 0x3, 0x0, 0xb, 0x6}, {0x3, 0x9, 0x7, 0x0, 0x7f, 0x800}, {0x2, 0x80000001, 0xe, 0x2, 0x6, 0xd5f}, {0x1, 0x7fffffff, 0x2, 0x3, 0x7, 0x6}, {0x400, 0xfffffffc, 0x4, 0xa6, 0x0, 0xfffffffc}, {0x5, 0x5, 0xff, 0xfffffffd, 0x5, 0x2}, {0x3, 0x4, 0x6, 0xc6b60000, 0x3ff, 0x10}, {0x2, 0xf27, 0x8, 0x6, 0xfffffffb, 0x5}, {0xe, 0x53, 0x400, 0x8, 0x6, 0x9}, {0x42, 0x1, 0xfff, 0x15f2, 0x3, 0x401}, {0xc7e8, 0x1, 0xfffffffe, 0x9, 0x3, 0x6}, {0x7f, 0x1000, 0xd19, 0x5, 0xfff, 0xb7}, {0x3, 0xed0, 0x8, 0x2, 0x1, 0x2}, {0x1, 0xdba, 0x4, 0xe3, 0x5, 0x5}, {0x8001, 0x831b0aa, 0x6, 0x200, 0x0, 0x4}], [{0x1}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0xd482b2beb95f1396}, {0x1, 0x1}, {0x2, 0x1}, {0xdf6e2fd7682863b7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x0, 0x5dc99bf9bb419254}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x6d7d4d20e070fc88, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0xe371b5ac9b19a6e7}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x6}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x63017a1fdf0e3bbe}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x7ff, 0xffffffffffffffff, 0x8001, 0x9}, 0x4, 0x4, [{0xf49b, 0x4, 0x20000000, 0x8, 0x1, 0x5d4}, {0x1, 0x7, 0x6, 0x1, 0x5, 0xff}]}, [{0x898, 0x8, 0x8f80, 0x7, 0xd4, 0x5}, {0x3, 0x8dd4, 0x0, 0x8, 0x6, 0x3}, {0x6, 0x6, 0xff, 0x3, 0xe, 0x6}, {0x2, 0x15b3, 0x8, 0x9, 0x9, 0x1}, {0x6, 0xd1e, 0x80000000, 0x8, 0x2b06, 0x2}, {0x5, 0x9, 0x0, 0x8, 0x5, 0x2}, {0xe, 0x7, 0xf40, 0x400, 0x3ff, 0x8}, {0x8, 0x78ea, 0x4, 0x7, 0x7, 0xc7}, {0x200, 0x8, 0x6, 0x7, 0x9, 0x8}, {0x80000001, 0x8, 0xfff, 0x4, 0x1, 0xef}, {0x8, 0x4, 0xe, 0x6fb7, 0x4, 0x800}, {0xb, 0x5b2, 0x1000, 0x80, 0x0, 0x4}, {0x4, 0x40, 0xa18, 0x7fff, 0x8001, 0x8}, {0x0, 0x9357, 0x9e, 0x7fffffff, 0x400003, 0x5}, {0xf8, 0x6d1, 0x8, 0x3, 0x0, 0x6}, {0x7, 0x3, 0x6, 0x9, 0x7, 0x3}, {0x0, 0x4, 0x7, 0x8, 0x7, 0x9ad}, {0xfffffc00, 0x4, 0x4829, 0xffffffff, 0xfffffffa, 0x80}, {0xa, 0x0, 0x200, 0x5, 0x5, 0x7}, {0x400, 0x101, 0x108f, 0x1, 0x6, 0x2}, {0x5, 0x0, 0x1, 0x9, 0x0, 0x3}, {0x813, 0x1, 0x9, 0x6, 0x1a306ba9, 0x7622}, {0x0, 0x2, 0x770a, 0x2, 0x8, 0x25}, {0x8, 0x4, 0xba87, 0x2, 0x5, 0x7fffffff}, {0x1, 0x0, 0x10001, 0x9, 0x6}, {0x8, 0x9, 0x80000001, 0xb00, 0x0, 0x5}, {0x80000000, 0x7ff, 0x6, 0x3, 0x800000, 0xa8}, {0xc, 0x3000000, 0xffffffff, 0x7f, 0x6}, {0xe, 0x8, 0x8, 0xc, 0xb, 0x348}, {0x795, 0x80, 0x9, 0x2, 0x6, 0x6}, {0x0, 0x85, 0x7, 0xf7, 0x6, 0x7fff}, {0x1, 0x7ff, 0x401, 0x838, 0x7ff, 0x4}, {0x6, 0xfee, 0xdf, 0x8001, 0x2, 0xc44}, {0x2, 0x5, 0x6, 0x9, 0x5, 0x6}, {0x4, 0x3, 0x3, 0x3, 0x9, 0x3}, {0x40, 0x9, 0x401, 0x4, 0x1, 0x8}, {0x401, 0x2, 0x1000, 0x2, 0x0, 0x3}, {0x10000, 0x4, 0x8000, 0x5, 0x6, 0xfff}, {0x9, 0x2, 0x5, 0x43d34b0a, 0xfffffe01}, {0x3, 0x401, 0x3, 0x1, 0x9, 0x8}, {0x4, 0x80000000, 0x0, 0x5, 0xb9a, 0x7fffffff}, {0x5, 0x3, 0x4501, 0x0, 0x6, 0x8001}, {0x44, 0x6, 0x6, 0x4, 0x200, 0x7}, {0x80000000, 0xc, 0x6, 0x80, 0x0, 0x80000001}, {0x7, 0x40, 0x5, 0xfffffff9, 0xa, 0x8}, {0x800000, 0x4, 0x8, 0x8, 0x4, 0x5}, {0x0, 0xf38, 0x7f, 0x15, 0x0, 0x7}, {0x400, 0xe, 0x10001, 0x8000, 0x7, 0x407f8191}, {0x19, 0x0, 0x2, 0x0, 0x5, 0x5}, {0x1, 0x3, 0xfffff381, 0x9, 0x5, 0xfffffff3}, {0x1, 0x4, 0x1, 0xffff7fff, 0x63f6, 0x7fff}, {0x81, 0x3, 0x7, 0xffff6ce4, 0x5, 0x8}, {0xf, 0x1, 0x9, 0x8, 0x39, 0x6}, {0xff, 0x0, 0x6, 0xff, 0x4, 0x40}, {0x3, 0x8, 0x1000, 0xd, 0x1, 0xffffffff}, {0x5, 0x2, 0x8, 0xfffffffc, 0xfffffffc, 0x101}, {0x9, 0x2, 0x7, 0x1, 0x7, 0x3ff}, {0x0, 0x7dd44b2a, 0x3e6, 0xfffffffb, 0x2000000, 0x2}, {0x5, 0x0, 0x32, 0x692, 0x97, 0x2}, {0x7, 0x10000, 0x3, 0x200, 0x8, 0xe852}, {0x4, 0x1ff, 0x7, 0x66b, 0x0, 0x2}, {0xe, 0x2, 0x0, 0x100, 0x9, 0xc0}, {0x0, 0x9, 0x400, 0x5, 0x1, 0x1}, {0x8, 0x7ad, 0xa, 0x51ab, 0x3ff, 0x4}, {0xfffffff8, 0x7f22, 0x6, 0x5, 0x5, 0x4b6c}, {0x7, 0x2, 0x3, 0x5, 0x2, 0x23f}, {0x400, 0xffffffff, 0x10000, 0x6, 0x7ff, 0x4}, {0x823, 0xfd, 0x2, 0x6, 0x3ff, 0x7558}, {0x4, 0x8, 0x1, 0xffffffcb, 0x6, 0x81}, {0x5, 0x9, 0x6, 0x2, 0xfffffff9, 0x8}, {0x7, 0xf, 0x7ff, 0x9, 0x7f, 0x3}, {0x60, 0x41ae, 0x7ff, 0x6000000, 0x9, 0x9}, {0x6, 0x100, 0xf, 0x6, 0x1, 0xa}, {0xffffffff, 0x0, 0x24c, 0x0, 0x9f3, 0x3}, {0x5, 0x9, 0x9, 0x5, 0xfffffffc, 0x2}, {0x0, 0x0, 0xffff0001, 0x900000, 0xfff, 0x3}, {0x10, 0x9, 0x6, 0x1db6308f, 0x7, 0x1ff}, {0x6, 0x2, 0x6, 0x50, 0x7, 0xff3c}, {0x5, 0x800, 0x6, 0x8, 0x2, 0x5f9}, {0x7, 0x80, 0xe07, 0x1, 0x8, 0x10000}, {0x0, 0xe0e8, 0x5bb32939, 0x80000001, 0xc3e9, 0xa}, {0x7, 0x1, 0x7, 0xfff, 0x1, 0x9}, {0x2, 0x6, 0x4, 0x4, 0x0, 0x4}, {0x1, 0x1, 0x0, 0xc32b, 0xbbde, 0x81}, {0x3, 0x3, 0x2, 0x677c, 0x9, 0x3}, {0x3, 0x2, 0x6, 0x9, 0xd, 0x5}, {0x6c0, 0x1, 0xf, 0x9, 0x1, 0x6d9}, {0x10001, 0x4, 0x5, 0x5, 0xfffff801, 0xff}, {0x4, 0x2, 0x800, 0x8, 0x800, 0x62}, {0x5, 0x8b6, 0x9, 0x7, 0x1, 0x4}, {0xfffffffc, 0x7fffffff, 0x9, 0x0, 0x5, 0x1000}, {0x5, 0x8, 0x5, 0x4, 0x9, 0x92}, {0x0, 0xe, 0x4, 0x1, 0x14, 0xc9}, {0x3, 0x8, 0x67dd, 0x100, 0x1, 0x81}, {0xa, 0x6, 0x4, 0x0, 0x6f, 0x81}, {0xfffffff9, 0x68, 0x1, 0x40, 0x4000800}, {0xc, 0x5, 0x2328, 0x0, 0x40, 0x10001}, {0x2, 0x80000001, 0x9, 0x80000001, 0xc, 0x4}, {0xba7, 0x0, 0x0, 0x9, 0xd80c1181, 0x2}, {0x8, 0x101, 0x0, 0x29, 0x9, 0x4}, {0xd, 0xe, 0xb26, 0x5, 0x80000000}, {0x0, 0x5, 0x4, 0x3, 0x7f, 0x5}, {0xa06, 0x37a, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3, 0x10000, 0xffffff01, 0x9, 0xffffffff}, {0x4, 0xb, 0xf431, 0x4fc8, 0x101, 0x3}, {0x1, 0x0, 0x5, 0x3, 0xffffffff, 0x2800000}, {0x9, 0x9, 0x4d5f, 0x4, 0x81, 0x3}, {0x10001, 0x80, 0x3, 0xa, 0x6, 0xef3}, {0x21, 0x7, 0x8, 0x3, 0xffff, 0x1}, {0x900000, 0x94b, 0x1, 0x8, 0x8, 0x6}, {0x8001, 0x9, 0xa, 0x11, 0x8, 0x4}, {0x8e, 0x4, 0x6, 0xffff0000, 0x2, 0x1}, {0x2, 0x0, 0xdae, 0x4, 0x2, 0x3c1}, {0x1, 0xfff, 0x401, 0xc, 0x0, 0x4}, {0x1, 0x7f, 0x2, 0xe, 0x1, 0x17}, {0x6, 0x8, 0xc, 0x3, 0x400, 0x7fffffff}, {0xfff, 0xfffffffc, 0x9a, 0x7, 0x0, 0xc}, {0x5, 0x8000, 0x3, 0x897, 0x1, 0x7}, {0x0, 0x0, 0x7, 0x9, 0x1, 0x40000}, {0x3, 0x7ff, 0xcd4, 0xfffffffa, 0xc, 0xffffffff}, {0x7f, 0xd57, 0x8, 0x4, 0x8, 0x8}, {0xad02, 0x8001, 0x1a, 0x0, 0x80000001, 0x2}, {0x337ea687, 0x1, 0x6, 0x8, 0xfffffffb, 0x6}, {0x357, 0x3ff, 0x4, 0x8, 0x8}, {0x6, 0x0, 0x35de, 0x1, 0x0, 0x2}, {0x3, 0x4, 0x7fff, 0x1, 0x8, 0x7ff}, {0xc318, 0x2, 0x8, 0xffffffff, 0x3}, {0x8000, 0xd, 0x6, 0xffffffff, 0x5, 0x101}], [{0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0xeb10565b38d89302}, {0x5, 0x1}, {0x4}, {0x3, 0x2e7d885167fc690d}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5c039b046815a40b, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x33be02468b75b3e0}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x6}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {}, {0x6, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x9e4a92663d90a469}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x4b0437c31d29e0a5}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x129f3e7c94de3db5}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x7, 0xffff6bfd, 0x6, 0x9, 0x7}, 0x4, 0x8, [{0x40, 0x7fffffff, 0xffffffff, 0x4, 0x6, 0xc5}]}, [{0x73, 0x8, 0x3, 0xff, 0x4, 0x9}, {0x6, 0x9, 0x10000, 0xdc0c, 0x8, 0x250db8e3}, {0x80000000, 0x0, 0x8, 0x80000001, 0xffffffff, 0x4735}, {0x400, 0x3, 0x401, 0x2400, 0xd4, 0x6}, {0x3, 0x34a, 0xffffffff, 0x5, 0x32, 0xffff}, {0x0, 0x1, 0x24, 0x0, 0x3, 0x9}, {0x8001, 0x4, 0x1, 0x0, 0x7, 0x600}, {0xdd, 0xfffffff7, 0x80, 0x400, 0x2}, {0xe, 0x7ff, 0x1000, 0x5, 0x96b, 0xae}, {0x9621, 0x3f, 0xffffffff, 0x8, 0x81, 0xf47}, {0x3, 0xc, 0x5, 0x3, 0x3, 0x1a}, {0x1, 0x1, 0xe0000000, 0x3, 0x101, 0x74c}, {0x5, 0x0, 0xf, 0x101, 0x7, 0x3}, {0x9, 0x3, 0x3, 0xb94c, 0x4, 0xc028}, {0xfec00000, 0x7, 0x39, 0x4, 0x2, 0xe88}, {0x7, 0xfffffffb, 0xd03ecc34, 0xffffffff, 0x2, 0xfffffffc}, {0x6, 0xb, 0x7ff, 0x4, 0x5f, 0x686e}, {0x5f74, 0x4, 0xfffffffc, 0x6, 0x6, 0x9}, {0x6, 0x6, 0x7, 0xff, 0x8, 0x7f}, {0x9, 0x0, 0x5, 0x40, 0x0, 0xffffffd9}, {0x8001, 0x40, 0xfffffffe, 0xfffffff7, 0x9, 0xc7d00}, {0xffffffff, 0x5, 0xfffffffa, 0x6, 0x5, 0x6}, {0x80, 0x8, 0x800, 0x10000, 0x7, 0x6}, {0x8, 0x9, 0x9, 0x3, 0x4, 0x8001}, {0x3, 0x5a0e, 0x4, 0x6, 0x6e38efce, 0x81}, {0x8000, 0x2, 0x3, 0x4, 0x200, 0x8}, {0x75970971, 0x9c9c, 0x3, 0x3, 0x6, 0x61a}, {0xfffffffb, 0x8, 0xffffffff, 0x9, 0x2}, {0x1, 0x0, 0x3, 0x9, 0x2}, {0x3, 0x3, 0xc, 0x8001, 0x5, 0x5}, {0xa, 0x8, 0x9, 0xb05, 0x6, 0x401}, {0x9, 0xff, 0x5, 0x7fffffff, 0x5200, 0x7fffffff}, {0x4, 0x40, 0x6, 0x2, 0x4, 0x9}, {0x7, 0x7, 0x5, 0x4, 0x140, 0x97d}, {0x4, 0xfffffffe, 0xfffffffe, 0x16, 0x7fffffff, 0xc0000000}, {0x1, 0xf7d, 0x1, 0x3, 0x24, 0x80000001}, {0xc62, 0x9, 0x9, 0x3, 0x4, 0x1}, {0x7, 0x5, 0x3, 0x81, 0x3, 0xffff8001}, {0xfffffffc, 0x3d, 0x2, 0xf, 0x401, 0x7}, {0x743, 0xb, 0x2, 0x7fffffff, 0xffff1037, 0xa}, {0x5, 0x3, 0x8, 0xf9, 0x6, 0x7af6}, {0x800, 0x0, 0x9, 0x1, 0x3ff, 0x8}, {0x10001, 0xe, 0x9a, 0x8, 0x3fe00000, 0x800}, {0x1, 0x3, 0x5, 0xfdb9, 0x2, 0x7fff}, {0x7fff, 0x8000, 0x9d, 0x1, 0x9, 0x7}, {0x3, 0x8, 0x6f613de, 0x40000, 0x4, 0x7}, {0xc81, 0xff, 0x8, 0x6, 0x80, 0x5}, {0x9, 0x4a, 0x3, 0x7, 0x3, 0x7f}, {0xa, 0x7, 0x2, 0xff, 0x3, 0x6}, {0x8, 0x80000000, 0x66, 0x7c, 0x9, 0x1}, {0x4, 0x0, 0xc000000, 0x6, 0x100, 0x5c94}, {0x4, 0x3, 0xdb8a, 0x7b, 0x100, 0xfffffffa}, {0x80, 0x9, 0x2be0, 0x5, 0x4, 0xb4f}, {0x8, 0x7, 0x9, 0x6, 0x991, 0x38}, {0x80000000, 0x1, 0x8, 0x8, 0x5, 0x8}, {0x6, 0x0, 0x4, 0x5, 0xfffffff7, 0x1}, {0xa9ed, 0x4, 0x8, 0x25a5551e, 0x3, 0x9}, {0x10000, 0x3, 0x9, 0x7, 0xb, 0x8001}, {0x2, 0x2, 0x3ff, 0x4, 0xc9, 0x9}, {0x2, 0x1, 0xf4eb, 0x7, 0x8000, 0xfff}, {0x5175, 0x4, 0x0, 0x0, 0x200}, {0x5, 0x6, 0x8, 0x7, 0x5, 0x7}, {0x1, 0x81, 0x8000, 0x1, 0x1, 0x7}, {0x2, 0x8, 0x5, 0x112, 0x9, 0x2}, {0x100, 0x5, 0x8, 0x3, 0x3, 0xfffffffe}, {0xffffffff, 0x537, 0x2, 0x100, 0x7fffffff, 0x6}, {0x8, 0x7, 0x6, 0x9, 0x1, 0x4}, {0x0, 0x5c, 0x1, 0x851, 0x0, 0xa}, {0x6, 0xfff, 0x1f, 0x1c1, 0x7, 0x2}, {0xfffffffe, 0xb71c, 0x3, 0x7, 0xd6, 0x4}, {0xffff7fff, 0x4, 0x40, 0x401, 0xca, 0x800}, {0x1, 0xd761, 0x4, 0x5, 0x3, 0x37}, {0x4, 0x66ed, 0x3, 0x7fffffff, 0x7, 0x5}, {0x8, 0x81, 0x452, 0x6, 0x80000000, 0x5c0}, {0x9, 0x1, 0x5, 0x1c88301e, 0x8}, {0xf, 0x8, 0x74, 0x1ff, 0xffff505a, 0x6}, {0x6, 0x9, 0x8, 0x7, 0x4, 0x9}, {0x4, 0x1, 0x9, 0x0, 0x9, 0xa19}, {0xff, 0x3, 0xaf4, 0x80000001, 0x7, 0x6}, {0xffff, 0x5, 0x4, 0xbb1, 0xfff}, {0x3, 0xedeb, 0x9, 0xfffffff9, 0x400, 0x7}, {0x7, 0x0, 0x8, 0x7, 0x7, 0xb15e}, {0x8, 0x6, 0x5, 0x3, 0xb188, 0x2}, {0x0, 0x101, 0x2, 0x80000001, 0x0, 0x1ff}, {0x10, 0x8, 0x5, 0x7, 0x8, 0x9}, {0xb, 0xfb, 0x100, 0xfffffff8, 0x0, 0x7f}, {0x2, 0x10001, 0x1, 0x6, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x97, 0x800}, {0x9, 0xff, 0x7, 0x2, 0xeb59}, {0x400, 0x68a9, 0xd, 0x80, 0x6, 0x1ff}, {0x6, 0x5, 0x0, 0x8, 0x2, 0x2}, {0x2, 0x9, 0x5e15, 0x9, 0x4, 0xd93}, {0xd9, 0x594, 0x8, 0x7, 0x7, 0x2}, {0xffff, 0x80000001, 0x1, 0xe0, 0x8, 0x3}, {0x8, 0x2, 0x8, 0x3, 0x3202, 0x1}, {0xa9fb, 0x0, 0x9, 0x20000000, 0x200, 0x4}, {0x5, 0x5, 0xa, 0x52, 0xbf6a, 0x2}, {0x6, 0xb7, 0x2, 0xd1, 0x0, 0xffff}, {0x2, 0x3, 0x4, 0xffffe07a, 0xf, 0xff}, {0x7fffffff, 0x97, 0x7fff, 0x40, 0x76b9d3e5, 0xe00}, {0x8, 0x9, 0x80000001, 0xc8, 0x8, 0x4}, {0x9, 0x8000, 0x2, 0x5, 0x8000, 0x2}, {0x7, 0xffffffff, 0x40, 0x0, 0x1, 0xfda}, {0x0, 0x4, 0x401, 0x4e, 0x0, 0x1}, {0x9, 0x9, 0x1, 0x3, 0xf, 0x9}, {0x60, 0x0, 0x41, 0x7f, 0x80000001, 0x3}, {0xffff92e2, 0x4, 0xe, 0x1, 0x4cfe, 0x68c}, {0x6, 0x80, 0x2, 0x4, 0x4, 0x1}, {0x2, 0x1, 0x9a, 0x7, 0x1, 0x5}, {0x9, 0x1000, 0x7, 0x7, 0x19, 0x7}, {0x134a, 0x0, 0xfffffffc, 0x1, 0x1, 0x1577}, {0x1, 0x83, 0x9, 0x5e9, 0x6, 0x7}, {0xb5, 0xcbd, 0x1, 0x10, 0x7fff, 0xcb1}, {0x4, 0x9, 0x1, 0x6, 0x651, 0x8}, {0x4, 0x120000, 0x2, 0x2146, 0xb, 0x80}, {0x10f243f9, 0x2, 0x1, 0x9, 0x101, 0x2}, {0x200, 0x2d, 0x8, 0x7, 0x3, 0xd45}, {0x2a81, 0x1, 0x0, 0x40, 0x4, 0xc3}, {0x1478, 0x5, 0x8, 0x7, 0x4, 0x4}, {0x1, 0x3, 0x6, 0xffff, 0x9, 0x1ff}, {0x0, 0x6, 0x9, 0x5, 0x4, 0x7fffffff}, {0x1, 0x9, 0x2, 0x49, 0x5, 0x2}, {0x1, 0x10001, 0x7, 0xe, 0x3, 0x3}, {0xb4b, 0xf4c1, 0x10, 0x401, 0x1, 0xa0000}, {0x8, 0x1ff, 0x1, 0x800, 0x4, 0x6}, {0xe, 0x5, 0x5, 0x4, 0xcc, 0x4}, {0x8001, 0xe9c, 0xfffffffd, 0x2, 0xcc80, 0x6bd}, {0x3, 0x81, 0x80000001, 0x2e000000, 0x8, 0x2}], [{0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0x2}, {}, {0x2}, {}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0xf6358b3958c19574, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0xc27aa91fdcffac27}, {0x4, 0x1}, {0x1}, {0x3}, {0x4}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x3ac13115a204b034}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0xf95b5fb1b1edec5e}, {0x4, 0x1}, {}, {0x5}, {0x3}, {0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x397c}}, 0x0) 5m25.802516355s ago: executing program 6 (id=475): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 5m24.950781024s ago: executing program 6 (id=479): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getuid() creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000580)={0xe, {0x8, 0x9, 0x2, 0xd3, "0258135cb57f9757a869260f6c4a7f21e01bbd5cba323770058aa2311bdf03b73772ddd7951fc51e423b8196e698c1dde37fa921a9c74902c995efec699478ad3dcc559d71b13807f7bd494c626fd8bbac0fe5903d5e5b9e803d0c2181e928a8ee100bca956564b22caee6e6ed838e3693c672ac398d13917d31254470a024e49063d01cf73474b12870492efb387bd098f8380864936682110ff6054f8bce6ad980d076fc09d93161803e3c1f6aeb51677c69960b7d9241eef19a03c3d183d558bd3606c1cfc0e2f3aa11ff250b14506002c0"}}, 0xdf) pwrite64(r2, &(0x7f0000000140), 0x0, 0xe7c) sync_file_range(r2, 0x8001, 0xe88, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$pppl2tp(0x18, 0x1, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000821000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000080)=0x40) 5m23.318368174s ago: executing program 6 (id=490): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 5m23.316527974s ago: executing program 39 (id=490): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 4m42.737522265s ago: executing program 40 (id=801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000840)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}]}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085000000070000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) syz_emit_ethernet(0x7d, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000000fad1e048716e0800456c006f0064000007219078e0000002ffffffff4e214e21049190782cb31d54c0306845457bb47787d6d0f025d20b43bb188d0d1a8054e11824740f8ec93c4b34a154ad5431e819a1540877ac847499b5301bfc76fafa0acadcedec0f03474a8ffd9c8164a9692ee0e2e7942f87470be23a5711e07e420e6f306fa6c2ae707f332e591c0517a94d7f2e330782cafa43634a2c94d8469b7d61889002ba9832a47d48414e45a16ea29fbe75920bcb9aed783ba571af65e6065314bf5b9b8c366f1b86cd2233800b90ee392a844e5740188cfb4a4d689ba2884373333a"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="0101000000000000300012800b00010067656e657665000020000280050004000100000014000700dc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 4m37.031866023s ago: executing program 4 (id=802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000b40)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x100, 0x7, 0x5, 0x4}, {0x101, 0x7e, 0x2, 0x2}, {0xc0, 0x2, 0xc9, 0xa4}, {0xc, 0x9, 0x1, 0xfff}, {0x101, 0xd, 0x4, 0xffffffff}, {0x9, 0x2, 0x5, 0xfffffffe}, {0x6, 0xfd, 0x9, 0x74}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$setregs(0xffffffffffffffff, r2, 0x8, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = memfd_secret(0x80000) timerfd_gettime(r3, 0x0) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r4, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) 4m35.906194053s ago: executing program 4 (id=842): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 4m34.332367149s ago: executing program 4 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r9, &(0x7f0000000280)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m31.989325346s ago: executing program 4 (id=872): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10003}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) fcntl$setlease(r5, 0x400, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') utime(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) unshare(0x4020100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x6, 0x0) 4m31.988981696s ago: executing program 41 (id=872): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10003}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) fcntl$setlease(r5, 0x400, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') utime(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) unshare(0x4020100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x6, 0x0) 3m22.728456335s ago: executing program 2 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x80, 0x5, 0x5, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000800)=0xc) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000780), &(0x7f00000007c0)=@v3={0x3000000, [{0x3ff, 0x1}, {0x3, 0x9}], r8}, 0x18, 0x1) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x18, r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x17, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x1fb5}, @call={0x85, 0x0, 0x0, 0x28}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000280)='syzkaller\x00', 0x100, 0x9c, &(0x7f0000000500)=""/156, 0x40f00, 0x7, '\x00', r6, 0x25, r12, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r1, r1, r1, r13, r1], &(0x7f0000000640)=[{0x5, 0x5, 0x2, 0x9}, {0x5, 0x1, 0x6, 0x5}, {0x3, 0x2, 0x8, 0x8}, {0x5, 0x5, 0x4, 0x8}, {0x5, 0x3, 0x8, 0x6}], 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 3m21.784528421s ago: executing program 2 (id=1375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000600)=0x401, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x30) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x26, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x68}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x83}, @jmp={0x5, 0x1, 0x0, 0x6, 0x1, 0x10, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xf0, &(0x7f0000000780)=""/240, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x7, 0xfffff800}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000b00)=[{0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x2, 0x6}, {0x4, 0x5, 0x5, 0x9}, {0x1, 0x4, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x7}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0xfffffeec) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00c49e", @ANYRES16=r5, @ANYBLOB="796127bd7000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x688240}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x40, r5, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x62}, @void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xceb}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdebd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004851}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000400)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@nomblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m21.198080188s ago: executing program 2 (id=1379): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() ptrace$setsig(0x4203, r0, 0xfff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8654, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x10000, 0x0, 0x6, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010067a6978ce3bd7000fbdbdf25010000005c0001801419564ee78000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0xbafd, 0xe, 0x2, 0xd}, {0x5, 0x0, 0x80, 0x7}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x5, 0xb68, 0x4c, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x48) 3m20.730912365s ago: executing program 2 (id=1384): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(0x0, 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 3m19.763288123s ago: executing program 2 (id=1393): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4668, &(0x7f0000000040)={0x0, 0xc89f, 0xc002, 0x2, 0x20002f7}) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000109c6bc885054f23b00000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m19.326359598s ago: executing program 2 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x903, 0x3, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x109, 0x318}, [@IFLA_MASTER={0x8, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3m19.321221538s ago: executing program 42 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@bridge_getneigh={0x28, 0x1e, 0x903, 0x3, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x109, 0x318}, [@IFLA_MASTER={0x8, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m57.743674207s ago: executing program 8 (id=1599): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x10) sendfile(r1, r1, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x37fffe, @remote}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_submit(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m57.525031214s ago: executing program 8 (id=1601): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a0001002bbd7000030000000a000000", @ANYRES32=0x0, @ANYBLOB="0400000414000300070000000400000000000000000000001400010000000000000000000087"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = timerfd_create(0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x8, 0x3, 0x9, 0x6, 0xe0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000080)=0x6e) 2m57.043871903s ago: executing program 8 (id=1608): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x90e, &(0x7f00000000c0), 0x1, 0x458, &(0x7f0000000680)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAiIiIcdOwFS0IBAogAJiSaUxnaikEuMYiORKAIHoVCiSPSIEom/gAoaBFRItNCjSBFKQ6A6tL7d3CN359fZC9zvJ609szPrmc+zcze7exfAwBrLfiQRuyPi14gYqWdbK4zVf926eXnmr5uXZ5Ko1d76I1mu9+fNyzNF1eK4XXnmSBqRfpLEwQ7tLly8dHa6Wp27kOcnFs+9N7Fw8dKzZ85Nn547PXd+6sSJ48cmX3h+6rm+xHlP1tcDH84f2v/a29femDl57Z0fv06K+Nvi6JOxXoVP1Gp9bq5ce5rSyVCJHWFNKhGRDdfw8vwfiUo0Bm8kXv241M4Bm6qW61K8VAP+x5IouwdAOYo3+uz6t9i2bvVRvhsv1S+Asrhv5Vu9ZCjSvM5w2/VtP41FxMmlv7/ItljxPoQLawBg477N1j/PdFr/pXF/U72782dDo/mzlL0RcW9E7IuI+yKW6z4QEQ+usf22hyTbI6Jt/ZNeX19kq5Ot/17Mn221rv+K1V+MVvLcnuX4h5NTZ6pzR/P/yZEY3p7lJ3u08d0rv3zWrax5/ZdtWfvFWjDvx/Wh7a3HzE4vTm8k5mY3rkQcGOoUf3J7tZlExP6IOLDONs489dWhbmUrx99DH5bDtS8jnqyP/1K0xV9Iej+fnLgrqnNHJ4qz4k4//Xz1zW7tbyj+PsjGf2fH8/92/KNJ8/PahbW3cfW3T7te04yv6/xv7NiW//5genHxwmTEtuT1eqeb9081ji3yRf0s/iOHO8//vdH4TxyMiOwkfigiHo6IR/KxezQiHouIwz3i/+Hlx9/tVvZvGP/ZtvEfba3SNv6NxLZo39M5UTn7/Tetf7GRXN3r3/HaSNPhvV7/ivNhNf1a39kMAAAA/z1pROyOJB2/nU7T8fH6Z/j3xc60Or+w+PSp+ffPz9a/IzAaw2lxp2uk6X7oZH5ZX+Sn2vLH8vvGn1d2LOfHZ+ars2UHDwNuV6f5X6mX/V4pu3fApvOxMhhc5j8MLvMfBpf5D4Orw/zfUUY/gK3X6f3/oxL6AWy9tvnvsR8MENf/MLjMfxhczfM/KbEfwJZa2BErf0leQuKORKQ961zZeBPFOboF4SSbPAt2b0qf8yncWpQs1Xev5Q/WOhSV9IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ/8EAAD//xL/3co=") keyctl$clear(0x3, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000340)="240000001a005f0400f9f4070009040180202000000000fbffffff000800020000000000", 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ftruncate(r1, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x10010, r0, 0x80000000) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)={0x118, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x93, 0xa8, @random="11aff57e3ad8c3a7d25327da0afd6554c5a835ebc5cf44381814da3d46c7cf350efe45beb276400942334fa85a3ba27b27e73123da696e2b54d8c3a2965686f8d6f9ab6597617dd478064fbf6e700fd35c5f433cee19f5e971d270713eb031b977c831a2366b8a67b5999d4110c2afae34862566ef6315b9655d5d3298477b1af31e5f90ea60b3412efab6bcfdcd9a"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18208000000000000000000000000020180c000000008000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x10, 0x2cb}, 0x94) 2m56.847810699s ago: executing program 8 (id=1610): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 2m55.96037018s ago: executing program 8 (id=1617): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$TIOCGSID(r0, 0x5429, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='[^\\\x00'}, 0x30) listen(r1, 0x8) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)="dc", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="038000000000000024"], 0x54}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) semget(0x1, 0x0, 0x1) 2m54.854174568s ago: executing program 8 (id=1619): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00694f0891174c4691ef43", @ANYRES8=r2], 0x3c}}, 0x400c005) r3 = socket(0x10, 0x3, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x80, 0x2, 0xffeffc04}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@can_delroute={0x2c, 0x19, 0x19, 0x70bd28, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f225bbf39931782e"}, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8000) recvmmsg(r7, &(0x7f0000001d00)=[{{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/50, 0x32}], 0x2}, 0x1}, {{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/56, 0x38}, {&(0x7f0000000ac0)=""/250, 0xfa}, {&(0x7f0000000bc0)=""/175, 0xaf}, {&(0x7f0000000c80)=""/82, 0x52}], 0x6, &(0x7f0000000d80)=""/241, 0xf1}, 0x6}, {{&(0x7f0000000e80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f00)=""/149, 0x95}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/171, 0xab}, {0x0}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/95, 0x5f}, {&(0x7f0000001380)=""/221, 0xdd}], 0x7, &(0x7f0000001500)=""/9, 0x9}, 0x9}, {{&(0x7f0000001540)=@generic, 0x80, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/195, 0xc3}], 0x3, &(0x7f0000001800)=""/29, 0x1d}, 0x5}, {{&(0x7f0000001840)=@l2, 0x80, &(0x7f0000001c00)=[{&(0x7f00000018c0)=""/204, 0xcc}, {&(0x7f00000019c0)=""/2, 0x2}, {&(0x7f0000001a00)=""/69, 0x45}, {&(0x7f0000001a80)=""/215, 0xd7}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)}], 0x6, &(0x7f0000001c80)=""/84, 0x54}, 0x8}], 0x5, 0x40000022, &(0x7f0000001e40)) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000004) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="10002a6c040000000000000000002b3b50f6f4dc7d1bbb89234c2ac0d054ddf52d04eac9b2df72cc9157d5fb37985a0ecc2f92a9611d424456ac32992d58774c2af532d4466334568e6b9bdcd6beab326f19eebc69ecfb3268d608b5c63aa5ace7f16a31175be9b440ad0daf7abf32ca926a23ecee6dd1a6e998a5f5408fe162f3842d945f048efdcd81a1"], 0xfffffffffffffd52}, 0x1, 0x0, 0x0, 0x240088d7}, 0x24008844) 2m54.849419159s ago: executing program 43 (id=1619): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0xd, 0xfe, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00694f0891174c4691ef43", @ANYRES8=r2], 0x3c}}, 0x400c005) r3 = socket(0x10, 0x3, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x80, 0x2, 0xffeffc04}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@can_delroute={0x2c, 0x19, 0x19, 0x70bd28, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "f225bbf39931782e"}, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8000) recvmmsg(r7, &(0x7f0000001d00)=[{{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/50, 0x32}], 0x2}, 0x1}, {{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000a80)=""/56, 0x38}, {&(0x7f0000000ac0)=""/250, 0xfa}, {&(0x7f0000000bc0)=""/175, 0xaf}, {&(0x7f0000000c80)=""/82, 0x52}], 0x6, &(0x7f0000000d80)=""/241, 0xf1}, 0x6}, {{&(0x7f0000000e80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f00)=""/149, 0x95}, {&(0x7f00000010c0)=""/174, 0xae}, {&(0x7f0000001180)=""/171, 0xab}, {0x0}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/95, 0x5f}, {&(0x7f0000001380)=""/221, 0xdd}], 0x7, &(0x7f0000001500)=""/9, 0x9}, 0x9}, {{&(0x7f0000001540)=@generic, 0x80, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/183, 0xb7}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/195, 0xc3}], 0x3, &(0x7f0000001800)=""/29, 0x1d}, 0x5}, {{&(0x7f0000001840)=@l2, 0x80, &(0x7f0000001c00)=[{&(0x7f00000018c0)=""/204, 0xcc}, {&(0x7f00000019c0)=""/2, 0x2}, {&(0x7f0000001a00)=""/69, 0x45}, {&(0x7f0000001a80)=""/215, 0xd7}, {&(0x7f0000001b80)=""/39, 0x27}, {&(0x7f0000001bc0)}], 0x6, &(0x7f0000001c80)=""/84, 0x54}, 0x8}], 0x5, 0x40000022, &(0x7f0000001e40)) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000004) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="10002a6c040000000000000000002b3b50f6f4dc7d1bbb89234c2ac0d054ddf52d04eac9b2df72cc9157d5fb37985a0ecc2f92a9611d424456ac32992d58774c2af532d4466334568e6b9bdcd6beab326f19eebc69ecfb3268d608b5c63aa5ace7f16a31175be9b440ad0daf7abf32ca926a23ecee6dd1a6e998a5f5408fe162f3842d945f048efdcd81a1"], 0xfffffffffffffd52}, 0x1, 0x0, 0x0, 0x240088d7}, 0x24008844) 37.692490168s ago: executing program 7 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvzCZ5kzbvm/bl5cUWxYCHFqTbpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtNAUPCgoiXkV68R/wLr17E0G9eRaqSEVBS1dmd7bdbHbTNc3uppnPByY7zzOz+zzfnX12npnJsxNAYU1mf9KIXRH3TiURE03LxqO+cDJf786v105nUxLV6uu/JJHkeY31k/xxe54YjYhvjkb8t7S63MUrV8/OVKp11yP2L527uH/xytV9C+dmzsydmTs/feCFg4emXpw+OL0hcW7PH48df+3Jj957+/n5byv7kjgcJ4ffnY2WODbKZEzGvTzE5vyhiDiUzbR5Xx43WyCEQivln8fhiPh/TESplqqbiIUPB1o5oKeqpYgqUFCJ9g8F1egHNI7tuzsOPtnjXkn/3D5SPwBaHf9Q/dxIjNaOjbbdSZqOjOrnNnZsQPlZGXev7f4sm2LFeYg/7m+doQ0op5PlGxHxRLv4k1rddtQizeJPV9QjiYipiBjJ6/fKI9QhaZrvxXmYtaw3/jQiDuePWf7RdZY/2ZLud/wAFNOtI/mOfDlLPdj/ZX2PRv8n2vR/xtvsu9Zj0Pu/zv2/xv5+tHaOPG3ph2V9lhPtX3K4NePHD4590qn85v5fNmXlN/qC/XD7RsTulvjfz4LN+z9Z/Emb7Z+tcupwd2W8+t3PxzotG3T81ZsRe9oe/zzolWZza1yf3D+/UJmbqv9tW8ZXX7/1Rafym+IfHdT239Yh/qbtn7Y+L3tPLnZZxpcnbp7rtCz7Hrlbvb7G9k9/Gknqx5sjec47M0tLl6YjRpLj+SpN+QfWrktjncZrZPHvfaZ9+1/x+b+x8nXGGl+ZXbj4xtk7nZat5/PfdDH5XrXLOnSSxT/78O2/qv1neR93Wcbvb15+qtOyteIfe5TAAAAAAAAAoIDS2jXYJC3fn0/Tcrk+XvZ/sS2tXFhcenb+wuXzsxF7a/8POZw2rnRP1NNJlp7O/x+2kT7Qkn4uInZGxKelsVq6fPpCZXbQwQMAAAAAAAAAAAAAAAAAAMAmsT0f/9+4T/Vvpfr4f6AgenmDOWBz67r9l3pbD6D/au1/1S2egCLQ/4fi0v6huLR/KC7tH4pL+4fi0v6huLR/KC7tHwAAAAC2pJ1P3/ohiYjll8ZqU2YkX2ZEEGxtw4OuADAwRvRDcd2/9K+zD4XTVf//z/zHAXtfHWAAknaZtc5Bde3Gf6vtMwEAAAAAAAAAAACAHtizq/P4f2ODYWsz7A+K6xHG//vpAHjM+el/KC7H+MDDRvGPdlpg/D8AAAAAAAAAAAAA9M14bUrScj4WeDzStFyO+HdE7IjhZH6hMjcVEf+JiO9Lw//K0tODrjQAAAAAAAAAAAAAAAAAAABsMYtXrp6dqVTmLjXP/LUqZ2vPNO6C2oeyXo5/+KxI+v+2jEXEwDdKz2aGmnKSiOVsy2+Kil1ajM1RjdrMgL+YAAAAAAAAAAAAAAAAAACggJrGHre3+/M+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/B/f97NzPoGAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx9PfAQAA//+BdkCC") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 36.79435778s ago: executing program 7 (id=2566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x40, 0x8, 0xe, 0x4c0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @private=0xa010101}}}}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fcntl$setstatus(r2, 0x4, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) move_pages(r10, 0x5, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x8000, 0x0, 0x205e, 0x400, 0x4, 0x6, 0xaa1f], &(0x7f00000002c0), 0x0) listen(r3, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000640)={[{@grpjquota, 0x4a}, {@debug}, {@nodelalloc}, {@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x7f}}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") 36.408651891s ago: executing program 7 (id=2570): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb, r3}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 35.147448802s ago: executing program 7 (id=2580): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 33.846576376s ago: executing program 7 (id=2586): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 32.55031521s ago: executing program 7 (id=2595): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0xecf86c37d53049cc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1fc, 0x8}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000a00000a40000000060a010400000000000000000200000014000480100001800a0001006d617463680000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 32.517002963s ago: executing program 44 (id=2595): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(0x0, 0xecf86c37d53049cc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645e"], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1fc, 0x8}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000a00000a40000000060a010400000000000000000200000014000480100001800a0001006d617463680000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 26.098316368s ago: executing program 6 (id=2596): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000001c0)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 25.227768927s ago: executing program 6 (id=2627): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000640), 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r6) getxattr(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e64a7bf5bff03f8f5263e9060582b11e6889cfa80947151bba393805353e1e351b2ca295ce1326424e11fec6ee2c42b3e7944889ecc71ee56a50023788da5ac882f1a872b65c9abde0a788344a299f65711a887f6f30691031b5cf3b26c5a128a303ba63ccd342cf769c4e265359a228d7a9435848f7c8142fbc6e6c9e184847072e77925dee2478e0e47b2331a0d99b03b0b3969c7ef89aaf04ff62225ee944042c54601d66be5af0f8dd775ebc8b75c3834ec9ed89e3e9c24f9b93377dee7162d81325d33db9fe0cd9de8c18abe6d9878518995a0906051237ee6d849b05e7f38463bbc5bce5dad0a5be4de7b1ad38"], 0x0, 0x0) 21.192529221s ago: executing program 6 (id=2654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r3, 0x3, 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_bt_hci(r10, 0x400448dc, &(0x7f0000000040)="6a9920032b856f4998d568e0b1e168f605bb4de9688b660a6902c41fc818fb463782de0b5238fde54b2cd24eaaa77c91") sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 21.192091761s ago: executing program 45 (id=2654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r3, 0x3, 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe56, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_bt_hci(r10, 0x400448dc, &(0x7f0000000040)="6a9920032b856f4998d568e0b1e168f605bb4de9688b660a6902c41fc818fb463782de0b5238fde54b2cd24eaaa77c91") sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 5.407699466s ago: executing program 1 (id=2746): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$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") 3.974773671s ago: executing program 1 (id=2750): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$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") 3.382171658s ago: executing program 0 (id=2761): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@oldalloc}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 3.298765495s ago: executing program 9 (id=2762): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$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") 3.138100588s ago: executing program 1 (id=2764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000300)=@delneigh={0x20, 0x1d, 0x20, 0x70bd27, 0x25dfdbfe, {0x1c, 0x0, 0x0, r7, 0x10, 0x84}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) close(r4) readv(r3, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) 3.020475678s ago: executing program 1 (id=2766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r7, 0x10, 0x160483b7, 0x5) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) close(r5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setreuid(r3, r8) setuid(r3) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1400000010"], 0x28}}, 0x0) 2.776829867s ago: executing program 1 (id=2768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000002240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@mblk_io_submit}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1808400, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 2.729620421s ago: executing program 5 (id=2769): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x62000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x100000000, 0x1fe, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000880)="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", 0x0, 0x800004, 0x10030, 0xffffffffffffffff, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540), 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r6, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xb6000, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2.697737823s ago: executing program 0 (id=2770): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000194c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000870d968008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000612e78d0461b8b083a70a0a25778e4b7667ae53595c963b3a75a637956eefbdbe6d5a7ba41266a0478f1dd6f8d0c58b48f23018c91c6c967b4351c9f1669791cde286ffeb5622c6f6248ac"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.387045488s ago: executing program 9 (id=2771): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000001c0)=0x741e, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0xffffffff}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1000000, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x8000, 0x0, 0x3ff, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xeffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r9], 0x34}}, 0x400c840) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}, 0x1, 0x200000000000000}, 0x0) 2.386679588s ago: executing program 0 (id=2772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000194c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.296697415s ago: executing program 5 (id=2774): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x166}) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r6}, 0x10) r7 = dup(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a3c0)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x1, 0x1, 0xff, 0xbd, 0x7, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x5, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x401, 0xe, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0xa23, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x3, 0x3, 0x401, 0xfffffffb, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x4, 0x6, 0x2, 0xa, 0x2, 0xec6e, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x8, 0x100, 0x5, 0x6, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xf3d6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x64a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x7, 0x8, 0x8000, 0x40, 0x4, 0x4, 0x400004, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0x1, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x2, 0x1, 0x5, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x0, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40014}, 0x2400c800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c6b13a60981adf583b12fc30ee03150c8d5e27b268678dde1d2c04c1c11e1e790a434149ea857ffe89f4259cbdb279b1824c30f7b5f798e6ea951af6502321ac687a37fe4aae5e353fcad27a507ffd98a611a8e800ce73a792aa1f76443ffc775e5ae50c4f22e8ded4a4991b37060e7295bb95621e9185457c1eaaca55dee1d774c7c5fdd824ee51e943e4d678ac2396a9cd752eca5f1e51ac8bf9a0ff0752815a49683a51e24fed2e7d4"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.196481844s ago: executing program 0 (id=2775): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000180)={0xa, 0x4a1f, 0x0, @loopback, 0x87ff}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$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") 2.126640599s ago: executing program 5 (id=2776): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0xfffffffe, @loopback}, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xc7R\xf4\xda\x9e\x86\xc9*K\xf3>\xad\x16\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E\xc5\x8a\x90f\xa7\xe7\n\x9f\xcc\"\xcb\x93\xefKc-\xdb\xd6[\x06\x15\x86A\xda\xc23\xf6\xabDA\x90\xf973\xf4\\t3Q3\xee\xe1\x0f\x9e:\xeb\xff\x87\xa8=\xac\xb4\xefk\xff\xae\xea\x91\xb1\x18\xbe>8<\xf4\x83\x87\x88D\xeb&=1\x8cL\xf7\xb6\xd1\x9e\xd3zJZN:\'\xf7C~1\xb7\xe4E\xc4\x96\xf7\xd2\xbfT\xa9u#\"^\xc9;\x81\xa8\x80q\xf2\x19\xee -@\xcf+\x8f=\xb7D\xe8\'^p\xba[_<\xd6\x8e]\xde\x11\xc8\x95\xb3\xcc\x9b.8W\x86\xc6\x02\xd7[E-;\xafk|jjX\xca\xd7\xdc\xe6\xd1\xcf!\x05}^\xfa\x9e\x94\xeb\xc5\xcb\x9a\x01B\xd9\xbf7\x83\xbf\xa2*\xd5`\xc47\xf0\xc6T\x05\x9f\x82\x96N') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r2, 0x400, 0x2) r4 = msgget$private(0x0, 0x790) msgsnd(r4, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.258338499s ago: executing program 0 (id=2778): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000194c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 885.134519ms ago: executing program 9 (id=2779): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vlan0\x00'}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x7cb7562f2d67) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 639.235258ms ago: executing program 5 (id=2780): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1a, 0xa8, @random="7bbf7bec864a21f4e5308f8989990ec47ae3beaf9092"}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syncfs(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000002000000000000090000003c000380140002007663616e3000000000000000000000000800030000000000080001000200000014000600ff"], 0x50}}, 0x0) 638.576098ms ago: executing program 3 (id=2781): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bfa200000000000007020000f8ffffffb703000e08000000b70400007afc00000000000043002d041c3420b714807d9fd821f3b07ee22136186a5c6c5aae67c6f74ae9265e8c055212ede8e0d3d6f2e260de8c5723e4c17fc442643b623b7c88f938837f7b65fc937bc23800"/134], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x32, 0x5, 0x8, {0xc, @esp_ip4_spec={@multicast2, @private=0xa010100, 0x40}, {0x0, @link_local, 0x5, 0x0, [0x80000000, 0x394435ef]}, @hdata="514b3e1f614dcef15a399383313ea13ab258ce5aed9eaf4f1ddeb423dc9b2d7952fd1be2b0f3e3097037b91739d1cc3133eb11be", {0x0, @random="e78ce8a2c8e4", 0x1, 0x6, [0xf, 0xfffffff9]}, 0x1000, 0x7}}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='mm_vmscan_lru_isolate\x00', r5, 0x0, 0x3}, 0x18) symlink(&(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 616.58475ms ago: executing program 0 (id=2782): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$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") 502.397469ms ago: executing program 3 (id=2783): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, 0x0, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x18) timer_create(0x2, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18}}], 0x1, 0x0) r10 = dup3(r9, r8, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) connect$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="4f14", 0x2}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 485.399541ms ago: executing program 9 (id=2784): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bfa200000000000007020000f8ffffffb703000e08000000b70400007afc00000000000043002d041c3420b714807d9fd821f3b07ee22136186a5c6c5aae67c6f74ae9265e8c055212ede8e0d3d6f2e260de8c5723e4c17fc442643b623b7c88f938837f7b65fc937bc23800"/134], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x32, 0x5, 0x8, {0xc, @esp_ip4_spec={@multicast2, @private=0xa010100, 0x40}, {0x0, @link_local, 0x5, 0x0, [0x80000000, 0x394435ef]}, @hdata="514b3e1f614dcef15a399383313ea13ab258ce5aed9eaf4f1ddeb423dc9b2d7952fd1be2b0f3e3097037b91739d1cc3133eb11be", {0x0, @random="e78ce8a2c8e4", 0x1, 0x6, [0xf, 0xfffffff9]}, 0x1000, 0x7}}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="726f6f74636f6e74657874bd"]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='mm_vmscan_lru_isolate\x00', r4, 0x0, 0x3}, 0x18) symlink(&(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 484.960261ms ago: executing program 5 (id=2785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0xe2d}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000000)={[{@check_strict}, {@nocompress}, {@overriderock}, {@block={'block', 0x3d, 0x200}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@hide}, {}, {@unhide}, {@check_strict}]}, 0x1, 0x569, &(0x7f0000000580)="$eJzs3V9v094ZwPHHJV1LkNA0JoSqAoeySUUqwUkhKOLKc07SA4kd2Q5qr1BFU1SRwkSZtPZmcMP+aHsR3O5F7B2hXe+KyX9CW5o/hTZN1d/3E/1+58R+4vOc1PKD29gRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgllu17aIlDeO1V9VgbjXwm/tPs1cfWSD3DjVDxhWx4v9kdlZuiORE5MZv91dfj/+3IPPps3mZjZtZ2bty/ddPruWmeq8fkvCZ2Nnde73e7XbeTTqRMbo5M3hdXXsm9E3TqWtlQl9VymX7wUotVDXT0OFaGOmmcgPtRH6gFt17qlipTIkurPltr151Grq38PH9km2X1dNCSztB6HsPnhZCd8U0GsarJzHx6jjmcbwjPjORirTTVGpzq9tZznK5MmhviIOKo2YZB5VGBZXsUqlYLJWK5UeVR49tO3dkgf0dORIx+Z0Wk3W6B3DgBKay+i8NMeJJW1ZF9X24UpVAfGkOWJ/p1f/fP9BDxz1Y/3tV/sb+6jlJ6v+t9NmtQfV/QC4H8vkwOOI0HjuyK3vyWtalK13pyLuxjnb+HnXR4omRUHwx0hQnWaKyJUoqUpay2PJCVqQmoSipiZGGaAllTUKJRCd7lCuBaHEkEl8CUbIortwTJUWpSEWWRYmWgqyJL23xpC5VcZKtbMpW8r4vi7IG5ZgF/eN/X7+mC+J/bB4Oyfd2l46UhsyW+o8+ZrKd55jhp3HYBk7F1179P67cOLMBAAAAAADjYCW/fY/P/6flZtKrmYa2J50WAAAAAAA4Rclf/ufjZjru3RSL838AAAAAAC4aK7nGzhKRvNxOe5tiJddU8UsAAAAAAAAuiOTv/7fiJrkHym2xvt1ThfN/AAAAAAAuiL+NvMd+2Jqx/vNfCYJp62Nr9XfWthPHOduX4mZGLn2/xag2Z13NNpI05bTJ5Vw9b82mQd9ugvklazZH5WH1S+CDyPETuJaTf8qdNObORtpu9Nako+RrpqELrt94UhTHuToV6dXoT2+2/izJ9P/uNa9asrnV7RRevu1uJLl8jLfycTu7geKR+ygOyeV9cr+F5JqLvjOeTi7EyMbNp+PaB+c/lb586gfG/CQLacxCdsfb/OH5z8ZjFgv7s5+Wg7PPsiiecOaf5G4ac3fxbtr0yaJUGPQzyLIoHczip96LY2SxPCqL5RNmAQCTsjmiCllHC/9PHOV+rrrLD1b3T7KYxizOJQfW3FyfI7o96ohun7C6/fvIdyANqrHxuP/6rqp+jl/weeC4YaNkxW/hpffbf5TrO7t797e21191XnXelErLZfuhbT8qyXQyjayh9gAA+uj/HTtpbU/r/8hv4bEejjir/s23jxQU5KW8la5syFJytUHyiYO+W80f+BjC0oiz1nxSJuPYoiwNOav7VXKVQ2+7paGxh3NYHvePAQCAM7Uwog4frv+X+9b/pRHn3Ydr+fCz4/3Y4lm/FQAA/GLo4IuVj/5qBYFpvShWKkUnWtEq8N1nKjDVulbGi3TgrjheXatW4Ee+6zfiznNT1aEK262WH0Sq5geq5YdmNfnmd5V99Xuom44XGTdsNbQTauX6XuS4kaqa0FWt9h8aJlzRQfLisKVdUzOuExnfU6HfDlxdUCrU+kCgqWovMjUTdz3VCkzTCdbUc7/RbmpV1aEbmFbkpxvsjWW8mh80k80WJv1mAwBwTuzs7r1e73Y778bYmfQcAQDAYVRpAAAAAAAAAAAAAAAAAAAAAADOv7O4/o/OBe/0bgV9XvI5eeeynIs0JtkZeej4y9gPTgDG6v8BAAD//2nRTuI=") setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x6}, 0x8) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast2, 0x1, "0596232642d17c7dc02cd9f90c8dd705b8dd6dadcd9a1c8ddffa4da80fbf040d", 0x7c, 0x8, 0x100, 0x3}, 0x3c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 386.736469ms ago: executing program 5 (id=2786): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000194c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="100025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000870d968008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000612e78d0461b8b083a70a0a25778e4b7667ae53595c963b3a75a637956eefbdbe6d5a7ba41266a0478f1dd6f8d0c58b48f23018c91c6c967b4351c9f1669791cde286ffeb5622c6f6248ac"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 313.529885ms ago: executing program 3 (id=2787): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000194c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 154.576657ms ago: executing program 1 (id=2788): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x88c0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="0d86", 0x2, 0x24008000, 0x0, 0x0) r5 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_read_part_table(0x5ce, &(0x7f0000000200)="$eJzs07FrG2cUAPB3Z6VnD6lMKC00SyChk9KAOrRDNBSjCC21CWnp0DngIS0EOmQQCkrmNP0HWtKqULyI7h5NHDAuaDMajdYONV2EhyvSnY07GEpANja/33D38b6n773jewoutCSqs+di5Nlx8M1p2U/L91a/eH+50bzXvrH2+f0H0zO2/3NuRCxFRHnqH2V8NSt221l9+Gpn5WBjefdmpLOtweKJKo/2+9XTuz7Mr+ZTb/HBXCqDxuvs2fPHrRdPGut7rc74k4e3m9d/aH7746e/3O1+9cHdr4vZis10bvWrRf3K+tLRAOeHeWFSP/or1ZITP/rr/fk0w5kbNLKY3X83Ilqd8c/v9Ua9yRcf/f79ndq10Vb3ZXnv/yTn3SkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDZDRqvq8+eP85ePGms77U6STy83bw+yUvvxkJEfBcRm+ninOovlatZ/fGt4We//Zmv/v3T1Y+vbA8n9Tflbi2JdLYo0t+ZSzOcuXL+WtP5q7Q640h6o94kiYg7tWujre7LZJaWnnefAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF0bzXvrGW3n8QkcQ3EbGSLven8Twr9j+cPReO81fLeDurD1/trBxsLO/erGzf+nWtjG+mEU8j4tF+v1pE8oWIK8WycoYfxv/ybwAAAP//UaeDDA==") 140.625689ms ago: executing program 3 (id=2789): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@errors_remount}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45b, &(0x7f0000000400)="$eJzs3M1vVFUbAPDn3umUlxewFfGDD7WKxsaPlgIqCxdqNHGBiYkudNm0hSADNbQmQoiCMbgyxsS9cem/4Eo3xrgycat7Q0IMG8DVmDtzL50ZZoZ2OmWg8/slF86591zOeebcM3PuPTMEMLQmsj+SiO0R8WdEjNWzzQUm6n9dv3p+7sbV83NJVKvv/pPUyl27en6uKFqcty3PTKYR6RdJ7G1T79LZcydnK5WFM3l+evnUR9NLZ8+9cOLU7PGF4wunDx45cvjQzMsvHXyxL3Fmbbq259PFfbvf+uCbt49+1RR/Sxx9MtHt4NPVap+rG6wdDelkZIANYU1KEZF1V7k2/seiFCudNxZvfj7QxgEbqlqtVrd1PnyhCmxiSTTnDXkYFsUHfXb/W2ytk4BXN276MXBXXqvfAGVxX8+3+pGRSPMy5Zb7236aiIj3L/z7XbbFxjyHAABo8lM2/3m+3fwvjYcayt2Xrw2NR8T9EbEzIh6IiF0R8WBErezDEfHIGutvXSS5df6TXu4psFXK5n+v5GtbzfO/YvYX46U8t6MWfzk5dqKycCB/TSajvCXLz3Sp4+c3/vi607HG+V+2ZfUXc8G8HZdHtjSfMz+7PLuemBtduRixZ6Rd/MnNlYAkInZHxJ4e6zjx7A/7Oh27ffxd9GGdqfp9xDP1/r8QLfEXku7rk9P/i8rCgeniqrjVb79feqdT/euKvw+y/v9/2+v/ZvzjSeN67dLa67j015cd72l6vf5Hk/dq6dF83yezy8tnZiJGk6P1RjfuP7hybpEvymfxT+5vP/53xsorsTcisov40Yh4LCIez9v+REQ8GRH7u8T/6+tPfdh7/Bsri39+Tf2/khiN1j3tE6WTv/zYVOn4LfHf6N7/h2upyXzPat7/VtOu3q5mAAAAuPekEbE9knTqZjpNp6bq35ffFZFWFpeWnzu2+PHp+fpvBMajnBZPusYanofO5Lf19fzFiKh/taA4fih/bvxtaWstPzW3WJkfdPAw5LZ1GP+Zv0uDbh2w4fxeC4aX8Q/Dy/iH4WX8w/BqM/63DqIdwJ3X7vP/swG0A7jzWsa/ZT8YIu7/YXh1HP+b+X/+AWp8/sNQWtoat/+RfNdE8S/1ePpmSxQPT05G+a5oz/oT1aRt50Y66IbdE4nS3dGMtScG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQT/8FAAD//wDH3GY=") timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r5, &(0x7f0000000100)=""/83, 0x53) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) dup3(r2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r6, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 106.894041ms ago: executing program 9 (id=2790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x31d, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x34}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x1000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaf96a42dffffffffffff08004500001c000000008002907800000000e000030000009078006400d2"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r0) 56.221725ms ago: executing program 9 (id=2791): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000340)={{0x107, 0x3, 0x7, 0x357, 0x85, 0x8, 0x1e8, 0x5}, "78d5c09c9efd4734ee08d1e0172085bead3fc1b5dff8f5d121abadb9f696aeef69665dea3eff792e936277c462e4fb54b5797cb611ca398376e0e6e4950e6ba320be32bb0da1043cec3aac3ad7dc5224626c80de786e7a665b474d379b9be0f1c66410af9ef48ae2edf5cc5cbc7ca41a5baad7ea3a280cd593bc1eaaddbd616b5d3728aa1fc143cdc93ba16993f720d13933e2abbc8a08ed"}, 0xb8) waitid(0x0, r0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0xfffffffffffffe15}], 0x1, 0x3fe, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendfile(r5, r4, 0x0, 0x3ffff) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000080)=0x68) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback={0x80fe}}, 0x1c) sendfile(r5, r4, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1c4) 24.717028ms ago: executing program 3 (id=2792): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x1, 0x0, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0xeffd) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=2793): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x18d6, &(0x7f00000006c0)={0x0, 0x3, 0x1, 0x0, 0xad}, &(0x7f0000000640), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f00000005c0)=[0xf7fffff7, 0x208], 0xfe) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x69) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000000000000000000000040000000000010700000000000000"], 0x88}, 0x1, 0x7}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.2203'. [ 366.198819][T14517] loop5: detected capacity change from 0 to 512 [ 366.215763][T14517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.282646][ T6591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.515581][T14533] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2208'. [ 366.526197][T14533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2208'. [ 366.544987][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 366.709031][T14561] vxcan1 speed is unknown, defaulting to 1000 [ 366.828244][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2220'. [ 366.838320][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.845760][T14578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.855326][T14578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.862789][T14578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.904416][T14582] loop7: detected capacity change from 0 to 1024 [ 366.920521][T14582] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.041038][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.606273][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 368.072295][T14607] loop7: detected capacity change from 0 to 2048 [ 368.088717][T14607] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.120342][T14607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.176439][T14616] loop5: detected capacity change from 0 to 1024 [ 368.195962][T14616] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.242654][T14616] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.2227: lblock 1 mapped to illegal pblock 1 (length 1) [ 368.266187][T14616] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2227: Failed to acquire dquot type 0 [ 368.270965][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2225'. [ 368.299559][T14616] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2227: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.314308][T14616] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2227: Invalid inode bitmap blk 0 in block_group 0 [ 368.327312][ T4199] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 368.342805][T14616] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 368.344212][ T4199] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 368.376595][T14616] EXT4-fs (loop5): 1 orphan inode deleted [ 368.397592][T14616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.404699][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 368.428721][T14616] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.2227: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 368.449093][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.489217][ T6591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.562788][T14635] loop7: detected capacity change from 0 to 1024 [ 368.580511][T14635] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.591454][T14645] loop5: detected capacity change from 0 to 128 [ 368.594652][T14635] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2229: lblock 1 mapped to illegal pblock 1 (length 1) [ 368.616592][T14635] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2229: Failed to acquire dquot type 0 [ 368.634786][T14635] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2229: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.653663][T14645] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.677573][T14635] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2229: Invalid inode bitmap blk 0 in block_group 0 [ 368.691659][ T4495] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 368.728647][T14635] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 368.740987][ T4495] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:34: Failed to release dquot type 0 [ 368.754283][T14635] EXT4-fs (loop7): 1 orphan inode deleted [ 368.774285][T14635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.796515][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2230'. [ 368.806263][T14635] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2229: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 368.854763][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.870447][ T6591] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.152047][T14695] loop7: detected capacity change from 0 to 1024 [ 369.171785][T14695] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.194269][T14695] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2236: lblock 1 mapped to illegal pblock 1 (length 1) [ 369.209956][T14695] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2236: Failed to acquire dquot type 0 [ 369.248204][T14695] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2236: Freeing blocks not in datazone - block = 0, count = 4096 [ 369.278191][T14695] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2236: Invalid inode bitmap blk 0 in block_group 0 [ 369.298401][T14695] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 369.307039][ T4495] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 369.326712][T14695] EXT4-fs (loop7): 1 orphan inode deleted [ 369.342765][T14695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.357421][T14695] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2236: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 369.376547][ T4495] __quota_error: 1117 callbacks suppressed [ 369.376559][ T4495] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 369.391506][ T4495] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:34: Failed to release dquot type 0 [ 369.415757][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.434971][ T29] audit: type=1326 audit(369.418:36104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14712 comm="syz.0.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 369.482063][T14720] pim6reg: entered allmulticast mode [ 369.494846][ T29] audit: type=1326 audit(369.478:36105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.518597][ T29] audit: type=1326 audit(369.478:36106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.541756][ T29] audit: type=1326 audit(369.478:36107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.565297][ T29] audit: type=1326 audit(369.478:36108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.588679][ T29] audit: type=1326 audit(369.478:36109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.611703][ T29] audit: type=1326 audit(369.478:36110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.620911][T14733] loop7: detected capacity change from 0 to 764 [ 369.635613][ T29] audit: type=1326 audit(369.478:36111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.635644][ T29] audit: type=1326 audit(369.478:36112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.1.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 369.689915][T14733] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 369.876883][T14746] loop7: detected capacity change from 0 to 1024 [ 369.898781][T14746] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.909794][T14746] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 369.957215][T14746] JBD2: no valid journal superblock found [ 369.963196][T14746] EXT4-fs (loop7): Could not load journal inode [ 370.035370][T14746] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 370.741560][T14805] __nla_validate_parse: 5 callbacks suppressed [ 370.741578][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 370.805151][T14811] vxcan1 speed is unknown, defaulting to 1000 [ 371.509233][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 372.797586][T14888] vxcan1 speed is unknown, defaulting to 1000 [ 372.980360][T14913] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 372.989415][T14913] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 373.021883][T14917] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 373.080669][T14935] vxcan1 speed is unknown, defaulting to 1000 [ 373.150442][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 373.236142][T14951] vxcan1 speed is unknown, defaulting to 1000 [ 373.286373][T14963] loop7: detected capacity change from 0 to 1024 [ 373.306164][T14963] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 373.328507][T14963] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2281: lblock 1 mapped to illegal pblock 1 (length 1) [ 373.344682][T14971] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.362014][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 373.374402][T14963] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2281: Failed to acquire dquot type 0 [ 373.396097][T14963] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2281: Freeing blocks not in datazone - block = 0, count = 4096 [ 373.413561][T14963] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2281: Invalid inode bitmap blk 0 in block_group 0 [ 373.427852][ T4498] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 373.451190][T14963] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 373.456211][ T4498] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:37: Failed to release dquot type 0 [ 373.473705][T14963] EXT4-fs (loop7): 1 orphan inode deleted [ 373.486475][T14963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.501742][T14963] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2281: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 373.541376][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.782025][T15023] lo speed is unknown, defaulting to 1000 [ 373.795233][T15023] lo speed is unknown, defaulting to 1000 [ 373.801507][T15023] lo speed is unknown, defaulting to 1000 [ 373.809632][T15023] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 373.824586][T15023] lo speed is unknown, defaulting to 1000 [ 373.831125][T15023] lo speed is unknown, defaulting to 1000 [ 373.837286][T15023] lo speed is unknown, defaulting to 1000 [ 373.843992][T15023] lo speed is unknown, defaulting to 1000 [ 373.850911][T15023] lo speed is unknown, defaulting to 1000 [ 373.858552][T15023] lo speed is unknown, defaulting to 1000 [ 373.864887][T15023] lo speed is unknown, defaulting to 1000 [ 373.897098][T15039] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2286'. [ 373.912027][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2286'. [ 373.967586][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2286'. [ 374.064801][T15065] loop7: detected capacity change from 0 to 1024 [ 374.074788][T15065] EXT4-fs: Ignoring removed orlov option [ 374.087440][T15065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.118164][T15065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.149811][T15077] macvtap0: entered allmulticast mode [ 374.155462][T15077] bridge0: entered allmulticast mode [ 374.163471][T15077] bridge0: port 1(macvtap0) entered blocking state [ 374.170411][T15077] bridge0: port 1(macvtap0) entered disabled state [ 374.178571][T15077] bridge0: left allmulticast mode [ 374.190936][T15065] syzkaller0: entered promiscuous mode [ 374.196742][T15065] syzkaller0: entered allmulticast mode [ 374.205886][T15083] openvswitch: netlink: Message has 6 unknown bytes. [ 374.212926][T15081] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 374.239788][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.318338][T15098] vxcan1 speed is unknown, defaulting to 1000 [ 374.344390][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 374.438329][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 374.438346][ T29] audit: type=1326 audit(374.428:36543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.5.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.483330][ T29] audit: type=1326 audit(374.428:36544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.5.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.490509][T15098] lo speed is unknown, defaulting to 1000 [ 374.514787][ T29] audit: type=1326 audit(374.498:36545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.539356][ T29] audit: type=1326 audit(374.518:36546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.563277][ T29] audit: type=1326 audit(374.518:36547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.587007][ T29] audit: type=1326 audit(374.518:36548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.610842][ T29] audit: type=1326 audit(374.518:36549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.634311][ T29] audit: type=1326 audit(374.518:36550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.657795][ T29] audit: type=1326 audit(374.518:36551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 374.680982][ T29] audit: type=1326 audit(374.518:36552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.5.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 375.084460][T15151] vxcan1 speed is unknown, defaulting to 1000 [ 375.319866][T15161] netlink: 'syz.1.2303': attribute type 7 has an invalid length. [ 375.330681][T15160] loop7: detected capacity change from 0 to 164 [ 375.345394][T15160] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 375.370222][T15160] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 375.397098][T15160] Symlink component flag not implemented [ 375.402971][T15160] Symlink component flag not implemented [ 375.410307][T15151] lo speed is unknown, defaulting to 1000 [ 375.466238][T15160] Symlink component flag not implemented (7) [ 375.472350][T15160] Symlink component flag not implemented (116) [ 375.571053][T15197] bond1: entered promiscuous mode [ 375.576278][T15197] bond1: entered allmulticast mode [ 375.583637][T15197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.611148][T15197] bond1 (unregistering): Released all slaves [ 376.022768][T15288] __nla_validate_parse: 8 callbacks suppressed [ 376.022788][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2311'. [ 376.152382][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 376.571562][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 376.655034][T15318] loop7: detected capacity change from 0 to 1024 [ 376.666155][T15318] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 376.689652][T15318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.708315][T15318] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.2316: missing EA_INODE flag [ 376.720366][T15318] EXT4-fs (loop7): Remounting filesystem read-only [ 376.816521][T15334] netlink: 'syz.5.2317': attribute type 7 has an invalid length. [ 376.999166][T15341] vxcan1 speed is unknown, defaulting to 1000 [ 377.106015][T15341] lo speed is unknown, defaulting to 1000 [ 377.148260][T15342] vxcan1 speed is unknown, defaulting to 1000 [ 377.302732][T15342] lo speed is unknown, defaulting to 1000 [ 378.136868][T15390] siw: device registration error -23 [ 378.171764][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.353098][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.362325][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.409202][T15410] loop7: detected capacity change from 0 to 512 [ 378.464574][T15410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.506923][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.516228][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.566074][T15406] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2320: corrupted inode contents [ 378.606061][T15411] bond2: entered promiscuous mode [ 378.611332][T15411] bond2: entered allmulticast mode [ 378.620260][T15406] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.2320: mark_inode_dirty error [ 378.648269][T15411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.659177][T15406] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.2320: corrupted inode contents [ 378.720949][T15411] bond2 (unregistering): Released all slaves [ 378.753449][T15406] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2320: mark_inode_dirty error [ 378.770157][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.779535][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2325'. [ 378.863829][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.586764][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 379.586782][ T29] audit: type=1400 audit(379.568:36990): avc: denied { name_connect } for pid=15490 comm="syz.3.2327" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 379.930385][ T29] audit: type=1326 audit(379.918:36991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15498 comm="syz.0.2328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2b73aebe9 code=0x0 [ 379.970938][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2326'. [ 379.998582][T15503] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 380.444612][T15512] netlink: 'syz.3.2329': attribute type 7 has an invalid length. [ 380.454205][ T29] audit: type=1326 audit(380.438:36992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.477379][ T29] audit: type=1326 audit(380.438:36993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.477421][ T29] audit: type=1326 audit(380.438:36994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.477514][ T29] audit: type=1326 audit(380.438:36995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.495009][ T29] audit: type=1326 audit(380.438:36996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.495112][ T29] audit: type=1326 audit(380.438:36997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.495149][ T29] audit: type=1326 audit(380.438:36998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.495176][ T29] audit: type=1326 audit(380.438:36999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 380.840888][T15528] loop7: detected capacity change from 0 to 512 [ 380.878085][T15528] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 380.888127][T15528] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 381.359905][T15552] vxcan1 speed is unknown, defaulting to 1000 [ 381.533023][T15552] lo speed is unknown, defaulting to 1000 [ 382.820623][T15593] __nla_validate_parse: 1 callbacks suppressed [ 382.820638][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 382.836382][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 382.893271][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 382.902718][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 383.048539][T15600] bond0: entered promiscuous mode [ 383.053794][T15600] bond0: entered allmulticast mode [ 383.098371][T15600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.135388][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 383.144732][T15593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2342'. [ 383.193220][T15591] loop7: detected capacity change from 0 to 736 [ 383.234444][T15600] bond0 (unregistering): Released all slaves [ 383.388090][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 383.428360][T15591] rock: directory entry would overflow storage [ 383.435000][T15591] rock: sig=0x3b10, size=4, remaining=3 [ 383.502793][T15679] pimreg: left allmulticast mode [ 383.920324][T15688] vxcan1 speed is unknown, defaulting to 1000 [ 384.174695][T15689] vxcan1 speed is unknown, defaulting to 1000 [ 384.351805][T15688] lo speed is unknown, defaulting to 1000 [ 384.651639][T15689] lo speed is unknown, defaulting to 1000 [ 384.782817][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 384.782830][ T29] audit: type=1326 audit(383.818:37183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 384.812224][ T29] audit: type=1326 audit(383.818:37184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 384.835637][ T29] audit: type=1326 audit(384.768:37185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 384.858844][ T29] audit: type=1326 audit(384.768:37186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 384.882180][ T29] audit: type=1326 audit(384.768:37187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.7.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 385.044941][T15734] vlan1: entered promiscuous mode [ 385.050277][T15734] team0: entered promiscuous mode [ 385.251413][ T29] audit: type=1400 audit(385.168:37188): avc: denied { bind } for pid=15733 comm="syz.0.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.270806][ T29] audit: type=1400 audit(385.188:37189): avc: denied { create } for pid=15736 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.297234][ T29] audit: type=1326 audit(385.278:37190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.7.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 385.331544][T15747] loop7: detected capacity change from 0 to 1024 [ 385.340478][T15747] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 385.351711][T15747] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 385.406017][ T29] audit: type=1326 audit(385.308:37191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.7.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 385.429428][ T29] audit: type=1326 audit(385.308:37192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15738 comm="syz.7.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 385.498031][T15747] JBD2: no valid journal superblock found [ 385.504001][T15747] EXT4-fs (loop7): Could not load journal inode [ 385.554374][T15747] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 385.963515][T15582] Set syz1 is full, maxelem 65536 reached [ 385.975517][T15758] netlink: 'syz.3.2350': attribute type 27 has an invalid length. [ 386.070989][T15637] Set syz1 is full, maxelem 65536 reached [ 386.546858][T15758] vxcan0: left promiscuous mode [ 386.552058][T15758] vxcan1: left promiscuous mode [ 386.557056][T15758] wg1: left promiscuous mode [ 386.561803][T15758] wg2: left promiscuous mode [ 386.566773][T15758] veth0_to_bridge: left promiscuous mode [ 386.572822][T15758] bridge_slave_0: left promiscuous mode [ 386.578577][T15758] veth1_to_bridge: left promiscuous mode [ 386.584684][T15758] bridge_slave_1: left promiscuous mode [ 386.591056][T15758] bond_slave_0: left promiscuous mode [ 386.596800][T15758] veth1_to_bond: left promiscuous mode [ 386.602796][T15758] bond_slave_1: left promiscuous mode [ 386.608500][T15758] veth0_to_team: left promiscuous mode [ 386.614138][T15758] team_slave_0: left promiscuous mode [ 386.619873][T15758] veth1_to_team: left promiscuous mode [ 386.626009][T15758] team_slave_1: left promiscuous mode [ 386.632194][T15758] veth0_to_batadv: left promiscuous mode [ 386.638336][T15758] batadv_slave_0: left promiscuous mode [ 386.644287][T15758] xfrm0: left promiscuous mode [ 386.649436][T15758] veth0_to_hsr: left promiscuous mode [ 386.655176][T15758] hsr_slave_0: left promiscuous mode [ 386.660658][T15758] veth1_virt_wifi: left promiscuous mode [ 386.666660][T15758] veth0_virt_wifi: left promiscuous mode [ 386.672521][T15758] geneve0: left promiscuous mode [ 386.677902][T15758] geneve1: left promiscuous mode [ 386.683104][T15758] sit1: left promiscuous mode [ 386.688493][T15758] bridge1: left promiscuous mode [ 386.693849][T15758] veth2: left promiscuous mode [ 386.699575][T15758] ip6gre1: left allmulticast mode [ 386.719614][T15758] vxcan3: left promiscuous mode [ 386.725133][T15758] vxcan3: left allmulticast mode [ 386.738800][ T3384] syz1: Port: 1 Link DOWN [ 386.806399][T15763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2353'. [ 386.844033][T15765] rdma_rxe: rxe_newlink: failed to add bond0 [ 386.885618][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2354'. [ 387.033489][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 387.466124][ T4511] smc: removing ib device syz1 [ 387.585812][T15821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15821 comm=syz.1.2367 [ 387.839497][ T4479] dummy0: left allmulticast mode [ 387.847943][ T4479] bridge0: port 3(dummy0) entered disabled state [ 387.851239][T15777] Set syz1 is full, maxelem 65536 reached [ 387.862529][T15821] __nla_validate_parse: 2 callbacks suppressed [ 387.862547][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2367'. [ 387.863284][ T4479] bridge_slave_1: left allmulticast mode [ 387.878402][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2367'. [ 387.884158][ T4479] bridge_slave_1: left promiscuous mode [ 387.899145][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.006139][ T4479] bridge_slave_0: left allmulticast mode [ 388.012188][ T4479] bridge_slave_0: left promiscuous mode [ 388.018173][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.080201][T15840] loop7: detected capacity change from 0 to 512 [ 388.098639][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2372'. [ 388.117532][T15840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.165365][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.348752][ T4479] hsr_slave_0: left promiscuous mode [ 388.355265][ T4479] hsr_slave_1: left promiscuous mode [ 388.366417][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.378705][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.420665][ T4479] team0 (unregistering): Port device team_slave_1 removed [ 388.435144][ T4479] team0 (unregistering): Port device team_slave_0 removed [ 388.624389][T15871] vxcan1 speed is unknown, defaulting to 1000 [ 388.689978][T15871] lo speed is unknown, defaulting to 1000 [ 388.753098][T15871] loop7: detected capacity change from 0 to 1024 [ 388.760158][T15871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.782515][T15871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.180047][T15900] netlink: 'syz.0.2377': attribute type 13 has an invalid length. [ 389.814382][T15915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2383'. [ 389.837780][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 389.837827][ T29] audit: type=1326 audit(389.778:38147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 389.867598][ T29] audit: type=1326 audit(389.778:38148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.1.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 389.890851][ T29] audit: type=1326 audit(389.788:38149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 389.914258][ T29] audit: type=1326 audit(389.788:38150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 389.937630][ T29] audit: type=1326 audit(389.798:38151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 389.961022][ T29] audit: type=1326 audit(389.798:38152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 389.984229][ T29] audit: type=1326 audit(389.798:38153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 390.007994][ T29] audit: type=1326 audit(389.798:38154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 390.031589][ T29] audit: type=1326 audit(389.798:38155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 390.054713][ T29] audit: type=1326 audit(389.798:38156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15913 comm="syz.0.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 390.287312][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.324133][T15944] tmpfs: Unknown parameter 'rootcontext½' [ 390.400807][T15948] vxcan1 speed is unknown, defaulting to 1000 [ 390.513928][T15948] lo speed is unknown, defaulting to 1000 [ 390.569972][T15949] vxcan1 speed is unknown, defaulting to 1000 [ 390.681127][T15949] lo speed is unknown, defaulting to 1000 [ 390.938571][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2389'. [ 391.472641][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 392.679403][T16023] vxcan1 speed is unknown, defaulting to 1000 [ 392.746249][T16023] lo speed is unknown, defaulting to 1000 [ 393.252764][T16060] geneve2: entered promiscuous mode [ 393.252783][T16060] geneve2: entered allmulticast mode [ 393.288690][ T4498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.288752][ T4498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.288787][ T4498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.288854][ T4498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.118470][T16083] netlink: 'syz.7.2406': attribute type 10 has an invalid length. [ 394.127110][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2406'. [ 394.594826][T16089] tmpfs: Unknown parameter 'rootcontext½' [ 394.847851][ T29] kauditd_printk_skb: 3745 callbacks suppressed [ 394.847869][ T29] audit: type=1326 audit(394.838:41902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 394.933087][T16083] dummy0: entered promiscuous mode [ 394.939184][ T29] audit: type=1326 audit(394.878:41903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 394.963014][ T29] audit: type=1326 audit(394.878:41904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 394.986288][ T29] audit: type=1326 audit(394.878:41905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 395.009762][ T29] audit: type=1326 audit(394.878:41906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 395.032703][ T29] audit: type=1326 audit(394.878:41907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 395.056065][ T29] audit: type=1326 audit(394.878:41908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 395.079104][ T29] audit: type=1326 audit(394.878:41909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 395.102172][ T29] audit: type=1326 audit(394.878:41910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 395.125302][ T29] audit: type=1326 audit(394.878:41911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15926 comm="syz.5.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 395.177594][T16083] bond0: (slave dummy0): Releasing backup interface [ 395.192278][T16083] bridge0: port 3(dummy0) entered blocking state [ 395.198841][T16083] bridge0: port 3(dummy0) entered disabled state [ 395.226001][T16099] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2412'. [ 395.235442][T16083] dummy0: entered allmulticast mode [ 395.276338][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 395.306344][T16104] vxcan1 speed is unknown, defaulting to 1000 [ 395.321716][T16111] veth0_to_bond: left allmulticast mode [ 395.327507][T16111] veth0_to_bond: left promiscuous mode [ 395.333392][T16111] bridge1: port 2(veth0_to_bond) entered disabled state [ 395.475035][T16111] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 395.598624][T16111] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 395.678942][T16111] veth3: left allmulticast mode [ 395.683901][T16111] veth3: left promiscuous mode [ 395.688905][T16111] bridge1: port 1(veth3) entered disabled state [ 396.079041][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2414'. [ 396.143512][T16116] vxcan1 speed is unknown, defaulting to 1000 [ 396.209403][T16116] lo speed is unknown, defaulting to 1000 [ 396.363488][T16104] lo speed is unknown, defaulting to 1000 [ 396.539476][T16174] siw: device registration error -23 [ 396.545486][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 396.603808][T16107] loop7: detected capacity change from 0 to 128 [ 396.731047][T16187] vlan1: entered allmulticast mode [ 396.736238][T16187] bridge_slave_0: entered allmulticast mode [ 396.994962][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 397.402301][T16223] vxcan1 speed is unknown, defaulting to 1000 [ 397.523208][T16223] lo speed is unknown, defaulting to 1000 [ 399.689940][T16262] netlink: 'syz.7.2427': attribute type 27 has an invalid length. [ 399.727855][T16262] 0ªî{X¹¦: left allmulticast mode [ 399.779248][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.786525][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.829811][T16262] wg2: left promiscuous mode [ 399.834569][T16262] wg2: left allmulticast mode [ 399.952694][T16262] syzkaller0: left promiscuous mode [ 399.958084][T16262] syzkaller0: left allmulticast mode [ 399.965442][ T37] lo speed is unknown, defaulting to 1000 [ 399.971654][ T37] syz0: Port: 1 Link DOWN [ 399.982538][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 399.982552][ T29] audit: type=1400 audit(399.968:42140): avc: denied { lock } for pid=16271 comm="syz.1.2432" path="socket:[48113]" dev="sockfs" ino=48113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 400.018288][ T4511] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.068947][ T4511] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.109738][ T4511] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.119370][ T4511] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.128756][T16269] vxcan1 speed is unknown, defaulting to 1000 [ 400.212229][T16269] lo speed is unknown, defaulting to 1000 [ 400.426769][T16309] netlink: 'syz.5.2435': attribute type 13 has an invalid length. [ 400.488056][ T29] audit: type=1326 audit(400.478:42141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.514309][ T29] audit: type=1326 audit(400.478:42142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.537611][ T29] audit: type=1326 audit(400.488:42143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.561357][ T29] audit: type=1326 audit(400.488:42144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.584725][ T29] audit: type=1326 audit(400.488:42145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.608012][ T29] audit: type=1326 audit(400.488:42146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.631958][ T29] audit: type=1326 audit(400.488:42147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.655255][ T29] audit: type=1326 audit(400.488:42148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 400.678639][ T29] audit: type=1326 audit(400.488:42149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16310 comm="syz.5.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8c887ec23 code=0x7ffc0000 [ 400.731016][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 400.817326][T16318] serio: Serial port ptm1 [ 400.862846][T16322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2440'. [ 400.881229][T16323] macsec0: entered promiscuous mode [ 400.887579][T16323] bridge0: port 1(macsec0) entered blocking state [ 400.894376][T16323] bridge0: port 1(macsec0) entered disabled state [ 400.901610][T16323] macsec0: entered allmulticast mode [ 400.907102][T16323] bridge0: entered allmulticast mode [ 400.913814][T16323] macsec0: left allmulticast mode [ 400.919152][T16323] bridge0: left allmulticast mode [ 400.988031][T16323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16323 comm=syz.1.2439 [ 401.218476][T16340] vlan1: entered allmulticast mode [ 401.223688][T16340] bridge_slave_0: entered allmulticast mode [ 401.696675][T16355] tmpfs: Unknown parameter 'rootcontext½' [ 401.858296][T16359] loop7: detected capacity change from 0 to 512 [ 401.922115][T16359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.991671][T16367] vxcan1 speed is unknown, defaulting to 1000 [ 402.116552][T16367] lo speed is unknown, defaulting to 1000 [ 402.420032][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.441362][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2449'. [ 402.936466][T16404] loop7: detected capacity change from 0 to 1024 [ 402.965995][T16404] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 402.988197][T16404] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2451: lblock 1 mapped to illegal pblock 1 (length 1) [ 403.003324][T16404] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2451: Failed to acquire dquot type 0 [ 403.023110][T16404] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2451: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.057896][T16404] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2451: Invalid inode bitmap blk 0 in block_group 0 [ 403.081257][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 403.087884][T16404] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 403.090491][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 403.115638][T16404] EXT4-fs (loop7): 1 orphan inode deleted [ 403.115650][ T4500] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 403.124303][T16404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.147064][ T4500] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:39: Failed to release dquot type 0 [ 403.173962][T16412] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2454'. [ 403.188026][T16404] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2451: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 403.190380][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2454'. [ 403.256659][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.305020][T16422] loop7: detected capacity change from 0 to 1024 [ 403.320999][T16422] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.350928][T16422] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2457: lblock 1 mapped to illegal pblock 1 (length 1) [ 403.365983][T16422] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2457: Failed to acquire dquot type 0 [ 403.378324][T16422] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2457: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.393298][T16422] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2457: Invalid inode bitmap blk 0 in block_group 0 [ 403.406277][ T4500] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 403.420902][T16422] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 403.422387][ T4500] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:39: Failed to release dquot type 0 [ 403.441779][T16422] EXT4-fs (loop7): 1 orphan inode deleted [ 403.449116][T16422] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.463793][T16422] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2457: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 403.496934][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.573137][T16433] vxcan1 speed is unknown, defaulting to 1000 [ 403.639607][T16433] lo speed is unknown, defaulting to 1000 [ 404.735761][T16469] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 404.743836][T16469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.896049][T16472] can0: slcan on ttyS3. [ 405.070652][T16481] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 405.078506][T16481] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2462'. [ 405.093271][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 405.093349][ T29] audit: type=1400 audit(405.078:42645): avc: denied { read } for pid=16479 comm="syz.3.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 405.138901][T16483] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2461'. [ 405.174368][T16469] can0 (unregistered): slcan off ttyS3. [ 405.180289][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2461'. [ 405.218372][ T29] audit: type=1326 audit(405.198:42646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.241647][ T29] audit: type=1326 audit(405.198:42647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.314916][T16472] can0: slcan on ttyS3. [ 405.367124][ T29] audit: type=1326 audit(405.348:42648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.391084][ T29] audit: type=1326 audit(405.348:42649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.414844][ T29] audit: type=1326 audit(405.348:42650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.438423][ T29] audit: type=1326 audit(405.348:42651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.462063][ T29] audit: type=1326 audit(405.358:42652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.485307][ T29] audit: type=1326 audit(405.358:42653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.509490][T16460] can0 (unregistered): slcan off ttyS3. [ 405.515592][ T29] audit: type=1326 audit(405.468:42654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 405.586995][T16504] loop7: detected capacity change from 0 to 1024 [ 405.603484][T16504] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.625462][T16504] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2467: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.653740][T16504] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2467: Failed to acquire dquot type 0 [ 405.666004][T16504] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2467: Freeing blocks not in datazone - block = 0, count = 4096 [ 405.694050][T16504] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2467: Invalid inode bitmap blk 0 in block_group 0 [ 405.715039][T16504] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 405.726797][T16504] EXT4-fs (loop7): 1 orphan inode deleted [ 405.733390][ T4500] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 405.748173][T16504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.756533][T16514] __nla_validate_parse: 4 callbacks suppressed [ 405.756556][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.761481][ T4500] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:39: Failed to release dquot type 0 [ 405.767213][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.799291][T16504] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2467: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 405.831613][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.838373][T16525] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 405.859354][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.882228][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.891656][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.902396][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 405.929416][T16532] loop7: detected capacity change from 0 to 2048 [ 405.938486][T16532] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.022271][T16532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.148175][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2472'. [ 406.164812][T16537] vxcan1 speed is unknown, defaulting to 1000 [ 406.216222][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.275744][T16554] loop7: detected capacity change from 0 to 1024 [ 406.284057][T16554] EXT4-fs: Ignoring removed bh option [ 406.291133][T16554] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.304478][T16554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 406.314517][T16554] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2475: lblock 2 mapped to illegal pblock 2 (length 1) [ 406.329767][T16554] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2475: lblock 0 mapped to illegal pblock 48 (length 1) [ 406.345436][T16554] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2475: Failed to acquire dquot type 0 [ 406.358424][T16554] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 406.368768][T16554] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2475: mark_inode_dirty error [ 406.381436][T16554] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 406.392730][T16554] EXT4-fs (loop7): 1 orphan inode deleted [ 406.400353][T16554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.413158][ T4482] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.428500][ T4482] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:21: Failed to release dquot type 0 [ 406.483977][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.509133][T10458] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 406.532702][T10458] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 406.544895][T10458] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 406.674644][T16579] C: renamed from team_slave_0 [ 406.683057][T16579] netlink: 'syz.7.2479': attribute type 1 has an invalid length. [ 406.691116][T16579] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.745158][T16569] can0: slcan on ttyS3. [ 406.858018][T16569] can0 (unregistered): slcan off ttyS3. [ 406.876730][T16569] netlink: 'syz.7.2479': attribute type 1 has an invalid length. [ 406.879067][T16579] can0: slcan on ttyS3. [ 406.884744][T16569] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2479'. [ 406.998466][T16568] can0 (unregistered): slcan off ttyS3. [ 407.686948][T16537] lo speed is unknown, defaulting to 1000 [ 407.946563][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2491'. [ 408.048266][T16655] loop7: detected capacity change from 0 to 512 [ 408.230132][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2494'. [ 408.300174][T16679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16679 comm=syz.0.2497 [ 408.314034][T16679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16679 comm=syz.0.2497 [ 408.314163][T16676] loop7: detected capacity change from 0 to 1024 [ 408.356165][T16676] EXT4-fs: Ignoring removed bh option [ 408.369174][T16676] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 408.401800][T16676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.591308][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.633065][T16696] vxcan1 speed is unknown, defaulting to 1000 [ 408.738398][T16710] loop7: detected capacity change from 0 to 1024 [ 408.753441][T16710] EXT4-fs: Ignoring removed orlov option [ 408.759542][T16710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.866285][T16696] lo speed is unknown, defaulting to 1000 [ 408.876541][T16704] siw: device registration error -23 [ 409.015498][T16710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.580390][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.068549][T16774] vxcan1 speed is unknown, defaulting to 1000 [ 410.126373][ T29] kauditd_printk_skb: 1001 callbacks suppressed [ 410.126391][ T29] audit: type=1326 audit(410.108:43650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.5.2515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c887ebe9 code=0x0 [ 410.191115][ T29] audit: type=1326 audit(410.148:43651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.7.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 410.214618][ T29] audit: type=1326 audit(410.148:43652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.7.2509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fe6bfebe9 code=0x7ffc0000 [ 410.218431][T16774] lo speed is unknown, defaulting to 1000 [ 410.238295][ T29] audit: type=1326 audit(410.148:43653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.266641][ T29] audit: type=1326 audit(410.148:43654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.289836][ T29] audit: type=1326 audit(410.148:43655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16777 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2b73e14a5 code=0x7ffc0000 [ 410.312919][ T29] audit: type=1326 audit(410.158:43656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.336084][ T29] audit: type=1326 audit(410.158:43657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.359533][ T29] audit: type=1326 audit(410.158:43658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.383440][ T29] audit: type=1326 audit(410.158:43659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.0.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b73aebe9 code=0x7ffc0000 [ 410.756652][T16829] sd 0:0:1:0: device reset [ 410.777684][T16831] __nla_validate_parse: 7 callbacks suppressed [ 410.785036][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 410.946361][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2521'. [ 411.047408][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2522'. [ 411.074244][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 411.447474][T16857] vxcan1 speed is unknown, defaulting to 1000 [ 411.584165][T16857] lo speed is unknown, defaulting to 1000 [ 412.053194][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2526'. [ 412.212524][T16890] bond1: entered promiscuous mode [ 412.218041][T16890] bond1: entered allmulticast mode [ 412.243794][T16890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.281702][T16890] bond1 (unregistering): Released all slaves [ 412.723295][T16977] pimreg: entered allmulticast mode [ 412.732512][T16977] pimreg: left allmulticast mode [ 412.746757][T16982] loop7: detected capacity change from 0 to 1024 [ 412.755412][T16982] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 412.769883][T16982] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.2531: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.787672][T16982] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2531: Failed to acquire dquot type 0 [ 412.800003][T16982] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.2531: Freeing blocks not in datazone - block = 0, count = 4096 [ 412.813775][T16982] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2531: Invalid inode bitmap blk 0 in block_group 0 [ 412.826841][ T35] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 412.837995][T16982] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 412.850119][ T35] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 412.850271][T16982] EXT4-fs (loop7): 1 orphan inode deleted [ 412.868190][T16982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.885005][T16982] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2531: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 412.926841][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.951110][T16992] vxcan1 speed is unknown, defaulting to 1000 [ 412.970594][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 412.980138][T16994] IPVS: Error joining to the multicast group [ 413.027340][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 413.139722][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2538'. [ 413.142956][T16992] lo speed is unknown, defaulting to 1000 [ 413.406544][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 413.791358][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2544'. [ 414.222939][T17082] C: renamed from team_slave_0 [ 414.260039][T17082] netlink: 'syz.3.2549': attribute type 1 has an invalid length. [ 414.268107][T17082] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 414.622993][ T4482] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.708068][T17109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17109 comm=syz.5.2552 [ 415.073176][T17128] __vm_enough_memory: pid: 17128, comm: syz.3.2558, bytes: 21200592592896 not enough memory for the allocation [ 415.188657][ T29] kauditd_printk_skb: 988 callbacks suppressed [ 415.188675][ T29] audit: type=1326 audit(415.168:44645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.218641][ T29] audit: type=1326 audit(415.168:44646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.317098][ T29] audit: type=1326 audit(415.298:44647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.340536][ T29] audit: type=1326 audit(415.298:44648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.382674][T17141] loop7: detected capacity change from 0 to 1024 [ 415.390218][T17141] EXT4-fs: Ignoring removed bh option [ 415.396561][T17141] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 415.412340][T17141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 415.430043][T17141] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2559: lblock 2 mapped to illegal pblock 2 (length 1) [ 415.447167][ T29] audit: type=1326 audit(415.298:44649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.470589][ T29] audit: type=1326 audit(415.298:44650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.493954][ T29] audit: type=1326 audit(415.298:44651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.517540][ T29] audit: type=1326 audit(415.298:44652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.540765][ T29] audit: type=1326 audit(415.298:44653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.564193][ T29] audit: type=1326 audit(415.298:44654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 415.588989][T17141] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2559: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.635977][T17141] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2559: Failed to acquire dquot type 0 [ 415.648307][T17141] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 415.660828][T17141] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2559: mark_inode_dirty error [ 415.672781][T17141] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 415.695651][T17141] EXT4-fs (loop7): 1 orphan inode deleted [ 415.707870][ T35] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.711896][T17141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.741163][T17150] vxcan1 speed is unknown, defaulting to 1000 [ 415.758072][ T35] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 415.788837][T17141] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2559: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.843141][T17150] lo speed is unknown, defaulting to 1000 [ 416.154120][T10458] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.220254][T17194] __nla_validate_parse: 6 callbacks suppressed [ 416.220273][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.235740][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.250781][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.283963][T17203] loop7: detected capacity change from 0 to 512 [ 416.285054][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.297080][T17203] EXT4-fs: Ignoring removed i_version option [ 416.299482][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.306515][T17203] EXT4-fs: journaled quota format not specified [ 416.335047][T17093] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.348317][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.397246][ T4482] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.407685][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.411396][ T4482] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.416902][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.445725][ T4482] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.447997][T17194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2566'. [ 416.463222][ T4482] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.576593][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2568'. [ 417.082423][T17246] netlink: 'syz.3.2575': attribute type 23 has an invalid length. [ 417.584364][T17252] tmpfs: Unknown parameter 'rootcontext½' [ 417.815265][T17262] loop7: detected capacity change from 0 to 512 [ 417.862534][T17262] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.896736][T17264] vxcan1 speed is unknown, defaulting to 1000 [ 418.026604][T17264] lo speed is unknown, defaulting to 1000 [ 418.203040][T17262] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 418.276654][T17262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 418.334685][T17262] System zones: 1-12 [ 418.354165][T17262] EXT4-fs (loop7): 1 truncate cleaned up [ 418.368926][T17262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.445723][T17262] vxcan1 speed is unknown, defaulting to 1000 [ 418.766088][T17308] IPv6: NLM_F_CREATE should be specified when creating new route [ 418.825075][T17262] lo speed is unknown, defaulting to 1000 [ 419.065974][T10458] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /162/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 419.129242][T17338] tmpfs: Unknown parameter 'rootcontext½' [ 419.135444][T10458] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 419.249147][T10458] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /162/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 419.393074][T17346] netlink: 'syz.0.2588': attribute type 21 has an invalid length. [ 419.491108][T10458] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 419.703499][T10458] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /162/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 419.795842][T10458] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 419.849772][T10458] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /162/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 419.896645][T10458] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 419.938560][T10458] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /162/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 419.985015][T10458] EXT4-fs error (device loop7): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 420.311383][T12321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.355873][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 420.355887][ T29] audit: type=1326 audit(420.338:45016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.430885][ T29] audit: type=1326 audit(420.368:45017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.454236][ T29] audit: type=1326 audit(420.368:45018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.477530][ T29] audit: type=1326 audit(420.368:45019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.500825][ T29] audit: type=1326 audit(420.388:45020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.523899][ T29] audit: type=1326 audit(420.388:45021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.547157][ T29] audit: type=1326 audit(420.388:45022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.570566][ T29] audit: type=1326 audit(420.388:45023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.593774][ T29] audit: type=1326 audit(420.388:45024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.617382][ T29] audit: type=1326 audit(420.388:45025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd213ebe9 code=0x7ffc0000 [ 420.738533][T17371] vxcan1 speed is unknown, defaulting to 1000 [ 420.788924][T17383] 8021q: adding VLAN 0 to HW filter on device  [ 420.796786][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.805148][T17383] tipc: Resetting bearer [ 420.811988][T17383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.861743][ T4511] dummy0: left allmulticast mode [ 420.866916][ T4511] dummy0: left promiscuous mode [ 420.872143][ T4511] bridge0: port 3(dummy0) entered disabled state [ 420.894484][ T4511] bridge_slave_1: left allmulticast mode [ 420.900241][ T4511] bridge_slave_1: left promiscuous mode [ 420.905927][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.916921][ T4511] bridge_slave_0: left allmulticast mode [ 420.922673][ T4511] bridge_slave_0: left promiscuous mode [ 420.928568][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.070168][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.080604][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.090983][ T4511] bond0 (unregistering): Released all slaves [ 421.100292][T17371] lo speed is unknown, defaulting to 1000 [ 421.264014][ T4511] hsr_slave_0: left promiscuous mode [ 421.299910][T17506] __nla_validate_parse: 6 callbacks suppressed [ 421.300001][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 421.321447][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 421.344050][ T4511] team0 (unregistering): Port device C removed [ 421.392876][T17371] chnl_net:caif_netlink_parms(): no params data found [ 421.520162][T17371] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.527342][T17371] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.536097][T17371] bridge_slave_0: entered allmulticast mode [ 421.543548][T17371] bridge_slave_0: entered promiscuous mode [ 421.560558][T17371] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.567683][T17371] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.575268][T17371] bridge_slave_1: entered allmulticast mode [ 421.582050][T17371] bridge_slave_1: entered promiscuous mode [ 421.603644][T17371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.615739][T17371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.639010][T17371] team0: Port device team_slave_0 added [ 421.645991][T17371] team0: Port device team_slave_1 added [ 421.667196][T17371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.674447][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.700734][T17371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.720112][T17371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.727366][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.753759][T17371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.792959][T17371] hsr_slave_0: entered promiscuous mode [ 421.799921][T17371] hsr_slave_1: entered promiscuous mode [ 421.806062][T17371] debugfs: 'hsr0' already exists in 'hsr' [ 421.811942][T17371] Cannot create hsr debugfs directory [ 422.000656][T17742] vxcan1 speed is unknown, defaulting to 1000 [ 422.411657][T17371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.479357][T17371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.530122][T17371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.593686][T17371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.690168][T17371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.709613][T17371] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.721299][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.728728][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.763587][T17371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.774072][T17371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.800360][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.807827][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.906163][T17371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.250521][T17817] vxcan1 speed is unknown, defaulting to 1000 [ 424.350327][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 424.424008][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 424.866562][T17371] veth0_vlan: entered promiscuous mode [ 424.922535][T17371] veth1_vlan: entered promiscuous mode [ 425.014393][T17371] veth0_macvtap: entered promiscuous mode [ 425.022451][T17371] veth1_macvtap: entered promiscuous mode [ 425.037447][T17371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.081393][T17371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.129767][ T4511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.207542][ T4511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.434492][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 425.434511][ T29] audit: type=1326 audit(425.418:45588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 425.474703][ T4511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.870301][T17889] vxcan1 speed is unknown, defaulting to 1000 [ 426.297145][ T29] audit: type=1326 audit(425.448:45589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.320587][ T29] audit: type=1326 audit(425.448:45590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.343928][ T29] audit: type=1400 audit(426.008:45591): avc: denied { create } for pid=17371 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 426.364079][ T29] audit: type=1400 audit(426.008:45592): avc: denied { associate } for pid=17371 comm="syz-executor" name="syz6" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 426.824370][ T4511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.858481][ T29] audit: type=1326 audit(426.808:45593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.881807][ T29] audit: type=1326 audit(426.808:45594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.905167][ T29] audit: type=1326 audit(426.808:45595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.908652][T17915] loop6: detected capacity change from 0 to 512 [ 426.932427][ T29] audit: type=1326 audit(426.818:45596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.957947][ T29] audit: type=1326 audit(426.818:45597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17882 comm="syz.5.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 426.981730][T17915] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.037511][T17915] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 427.111842][T17915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 427.139788][T17915] System zones: 1-12 [ 427.163653][T17915] EXT4-fs (loop6): 1 truncate cleaned up [ 427.179393][T17915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.268293][T17915] vxcan1 speed is unknown, defaulting to 1000 [ 427.368606][T17976] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.468504][T18000] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2621'. [ 427.488473][T18000] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2621'. [ 427.502244][T18000]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 427.513689][T18000]  (unregistering): Released all slaves [ 427.609011][T18036] veth0_to_team: entered promiscuous mode [ 427.718652][T17371] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 427.766117][T17371] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 427.804792][T17371] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 427.827860][T17371] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 427.849853][T17371] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 427.873103][T17371] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 427.895897][T17371] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 427.929620][T17371] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 427.940439][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2628'. [ 427.951458][T17371] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 427.981607][T17371] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 428.037671][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2629'. [ 428.052140][T18047] netlink: 'syz.1.2629': attribute type 3 has an invalid length. [ 428.157451][T18052] vxcan1 speed is unknown, defaulting to 1000 [ 428.201959][T18056] netlink: 'syz.5.2630': attribute type 21 has an invalid length. [ 428.210055][T18056] netlink: 'syz.5.2630': attribute type 4 has an invalid length. [ 428.221125][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2630'. [ 428.458371][T18087] netlink: 'syz.5.2633': attribute type 4 has an invalid length. [ 428.769356][T18094] vxcan1 speed is unknown, defaulting to 1000 [ 429.156192][T18118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 429.274896][T18128] vxcan1 speed is unknown, defaulting to 1000 [ 430.129758][T18183] vxcan1 speed is unknown, defaulting to 1000 [ 430.630603][T18206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18206 comm=syz.1.2647 [ 431.000409][ T29] kauditd_printk_skb: 1181 callbacks suppressed [ 431.000427][ T29] audit: type=1326 audit(430.988:46779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 431.030956][ T29] audit: type=1326 audit(430.988:46780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 431.054341][ T29] audit: type=1326 audit(430.988:46781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 431.079784][ T29] audit: type=1326 audit(431.068:46782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 431.104241][ T29] audit: type=1326 audit(431.068:46783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 431.127671][ T29] audit: type=1326 audit(431.068:46784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 431.151565][ T29] audit: type=1326 audit(431.068:46785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 431.174843][ T29] audit: type=1326 audit(431.068:46786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8c881add9 code=0x7ffc0000 [ 431.199211][ T29] audit: type=1326 audit(431.068:46787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe8c887ebe9 code=0x7ffc0000 [ 431.238711][ T29] audit: type=1326 audit(431.188:46788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18179 comm="syz.5.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8c8875ba7 code=0x7ffc0000 [ 431.417815][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 431.489042][T18229] tmpfs: Unknown parameter 'rootcontext½' [ 431.663704][ T4512] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.677408][T17971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.742445][ T4512] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.810774][ T4512] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.873131][ T4512] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.925815][T18245] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2657'. [ 431.975948][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2657'. [ 432.002291][ T4512] bridge_slave_1: left allmulticast mode [ 432.008472][ T4512] bridge_slave_1: left promiscuous mode [ 432.014383][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.045709][ T4512] bridge_slave_0: left allmulticast mode [ 432.052055][ T4512] bridge_slave_0: left promiscuous mode [ 432.058084][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.221508][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.252673][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.264744][ T4512] bond0 (unregistering): Released all slaves [ 432.309751][T18268] lo speed is unknown, defaulting to 1000 [ 432.315984][T18234] vxcan1 speed is unknown, defaulting to 1000 [ 432.327759][T18268] lo speed is unknown, defaulting to 1000 [ 432.344182][T18268] lo speed is unknown, defaulting to 1000 [ 432.456335][T18268] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 432.570451][T18268] lo speed is unknown, defaulting to 1000 [ 432.624398][T18268] lo speed is unknown, defaulting to 1000 [ 432.642090][T18299] netlink: 'syz.3.2662': attribute type 13 has an invalid length. [ 432.650342][T18299] netlink: 'syz.3.2662': attribute type 17 has an invalid length. [ 432.668099][ T4512] hsr_slave_0: left promiscuous mode [ 432.677139][ T4512] hsr_slave_1: left promiscuous mode [ 432.691366][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.698856][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.717438][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.725415][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.737842][ T4512] veth1_macvtap: left promiscuous mode [ 432.743717][ T4512] veth0_macvtap: left promiscuous mode [ 432.749509][ T4512] veth1_vlan: left promiscuous mode [ 432.754923][ T4512] veth0_vlan: left promiscuous mode [ 432.930865][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 432.946051][T18346] syz2: rxe_newlink: already configured on vxcan1 [ 432.963392][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 433.036227][T18268] lo speed is unknown, defaulting to 1000 [ 433.093598][T18299] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 433.105012][T18299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.120822][T18345] tipc: Enabling of bearer rejected, failed to enable media [ 433.130366][T18268] lo speed is unknown, defaulting to 1000 [ 433.136724][T18268] lo speed is unknown, defaulting to 1000 [ 433.184711][T18234] chnl_net:caif_netlink_parms(): no params data found [ 433.313755][T18234] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.320905][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.361714][T18234] bridge_slave_0: entered allmulticast mode [ 433.377295][T18234] bridge_slave_0: entered promiscuous mode [ 433.418176][T18454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.442818][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.450270][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.465063][T18234] bridge_slave_1: entered allmulticast mode [ 433.472935][T18234] bridge_slave_1: entered promiscuous mode [ 433.487107][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2669'. [ 433.496715][T18454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2669'. [ 433.507125][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2669'. [ 433.527358][T18454] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2669'. [ 433.536814][T18454] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2669'. [ 433.561137][T18234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.582471][T18234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.621165][T18234] team0: Port device team_slave_0 added [ 433.628483][T18234] team0: Port device team_slave_1 added [ 433.652604][T18234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.659944][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.686571][T18234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.698876][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 433.709799][T18234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.716852][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.743471][T18234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.779339][T18234] hsr_slave_0: entered promiscuous mode [ 433.785957][T18234] hsr_slave_1: entered promiscuous mode [ 433.792323][T18234] debugfs: 'hsr0' already exists in 'hsr' [ 433.798403][T18234] Cannot create hsr debugfs directory [ 433.841786][T18567] vxcan1 speed is unknown, defaulting to 1000 [ 433.952931][T18567] lo speed is unknown, defaulting to 1000 [ 434.120967][T18234] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 434.138915][T18234] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 434.160599][T18234] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 434.180940][T18234] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 434.228957][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2675'. [ 434.238094][T18681] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2675'. [ 434.247347][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2675'. [ 434.355981][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.404508][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.429097][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.436369][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.460298][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.467520][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.487352][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2676'. [ 434.565584][T18715] syzkaller0: entered promiscuous mode [ 434.571323][T18715] syzkaller0: entered allmulticast mode [ 434.585024][T18234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.722834][T18741] vxcan1 speed is unknown, defaulting to 1000 [ 434.733691][T18234] veth0_vlan: entered promiscuous mode [ 434.742785][T18234] veth1_vlan: entered promiscuous mode [ 434.767254][T18234] veth0_macvtap: entered promiscuous mode [ 434.778643][T18747] netlink: 'syz.3.2680': attribute type 21 has an invalid length. [ 434.786642][T18747] netlink: 'syz.3.2680': attribute type 4 has an invalid length. [ 434.789825][T18234] veth1_macvtap: entered promiscuous mode [ 434.831921][T18234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.845617][T18234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.859823][ T4512] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.881542][ T4512] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.901008][ T4512] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.916241][T18741] lo speed is unknown, defaulting to 1000 [ 434.923507][ T4512] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.620840][T18797] vxcan1 speed is unknown, defaulting to 1000 [ 435.774085][T18797] lo speed is unknown, defaulting to 1000 [ 436.128053][ T29] kauditd_printk_skb: 1267 callbacks suppressed [ 436.128073][ T29] audit: type=1326 audit(435.538:48056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7cb45ba7 code=0x7ffc0000 [ 436.157629][ T29] audit: type=1326 audit(435.538:48057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7caeadd9 code=0x7ffc0000 [ 436.180744][ T29] audit: type=1326 audit(435.538:48058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fef7cb4ebe9 code=0x7ffc0000 [ 436.203896][ T29] audit: type=1326 audit(435.548:48059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7cb45ba7 code=0x7ffc0000 [ 436.227198][ T29] audit: type=1326 audit(435.548:48060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7caeadd9 code=0x7ffc0000 [ 436.250363][ T29] audit: type=1326 audit(435.548:48061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fef7cb4ebe9 code=0x7ffc0000 [ 436.273769][ T29] audit: type=1326 audit(435.558:48062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7cb45ba7 code=0x7ffc0000 [ 436.297027][ T29] audit: type=1326 audit(435.558:48063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef7caeadd9 code=0x7ffc0000 [ 436.320298][ T29] audit: type=1326 audit(435.558:48064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fef7cb4ebe9 code=0x7ffc0000 [ 436.343372][ T29] audit: type=1326 audit(435.568:48065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18785 comm="syz.9.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7cb45ba7 code=0x7ffc0000 [ 436.671468][T18842] loop9: detected capacity change from 0 to 128 [ 436.681126][T18842] vfat: Unknown parameter '€' [ 436.815844][T18852] vhci_hcd: default hub control req: 0310 v0006 i0006 l0 [ 436.825664][T18852] netlink: 'syz.9.2691': attribute type 13 has an invalid length. [ 436.833700][T18852] netlink: 'syz.9.2691': attribute type 17 has an invalid length. [ 436.877107][T18852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.074245][T18854] netlink: 'syz.5.2692': attribute type 3 has an invalid length. [ 437.453028][T18875] vxcan1 speed is unknown, defaulting to 1000 [ 437.559811][T18875] lo speed is unknown, defaulting to 1000 [ 438.466033][T18905] vxcan1 speed is unknown, defaulting to 1000 [ 438.737401][T18905] lo speed is unknown, defaulting to 1000 [ 439.105637][T18937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.271889][T18966] __nla_validate_parse: 12 callbacks suppressed [ 439.271985][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2704'. [ 439.276308][T18965] netlink: 'syz.5.2705': attribute type 3 has an invalid length. [ 439.278530][T18966] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2704'. [ 439.313999][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2704'. [ 439.323546][T18966] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2704'. [ 439.332865][T18966] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2704'. [ 439.377410][T18983] rdma_op ffff88816498ad80 conn xmit_rdma 0000000000000000 [ 440.396163][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2716'. [ 440.422859][T19121] 9pnet_fd: Insufficient options for proto=fd [ 440.606842][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2717'. [ 441.143202][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 441.143220][ T29] audit: type=1400 audit(441.128:49456): avc: denied { create } for pid=19157 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.144718][T19160] erspan0: left promiscuous mode [ 441.175198][ T29] audit: type=1400 audit(441.158:49457): avc: denied { setopt } for pid=19157 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.179272][T19160] ip_vti0: left promiscuous mode [ 441.211147][ T29] audit: type=1400 audit(441.158:49458): avc: denied { write } for pid=19157 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.230856][ T29] audit: type=1400 audit(441.188:49459): avc: denied { read } for pid=19157 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 441.250141][ T29] audit: type=1400 audit(441.188:49460): avc: denied { create } for pid=19159 comm="syz.1.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 441.250538][T19160] ip6_vti0: left promiscuous mode [ 441.317889][T19160] sit0: left promiscuous mode [ 441.324985][T19160] ip6tnl0: left promiscuous mode [ 441.331334][T19160] ip6gre0: left promiscuous mode [ 441.337503][T19160] syz_tun: left promiscuous mode [ 441.342814][ T29] audit: type=1326 audit(441.218:49461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 441.365924][ T29] audit: type=1326 audit(441.218:49462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 441.369111][T19163] netlink: 'syz.3.2723': attribute type 27 has an invalid length. [ 441.389789][ T29] audit: type=1326 audit(441.218:49463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 441.389906][ T29] audit: type=1326 audit(441.218:49464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 441.389964][ T29] audit: type=1326 audit(441.228:49465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19162 comm="syz.3.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 441.409801][T19160] ip6gretap0: left promiscuous mode [ 441.489890][T19160] vcan0: left promiscuous mode [ 441.508342][T19160] bond0: left promiscuous mode [ 441.513601][T19160] dummy0: left promiscuous mode [ 441.528609][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.547694][T19160] team0: left promiscuous mode [ 441.558943][T19160] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.568927][T19160] nlmon0: left promiscuous mode [ 441.579304][T19160] caif0: left promiscuous mode [ 441.584203][T19160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.605057][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2721'. [ 441.614464][T19161] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2721'. [ 441.650668][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2721'. [ 442.016933][T19200] serio: Serial port ttyS3 [ 442.142069][T19163] geneve2: left promiscuous mode [ 442.147180][T19163] geneve2: left allmulticast mode [ 442.214690][T19187] syzkaller0: entered promiscuous mode [ 442.220365][T19187] syzkaller0: entered allmulticast mode [ 442.236834][ T4519] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.245541][T19208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 442.266624][ T4519] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.281034][ T4519] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.298870][ T4519] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.414113][T19215] tipc: Failed to remove unknown binding: 66,1,1/0:761198571/761198573 [ 442.424164][T19215] tipc: Failed to remove unknown binding: 66,1,1/0:761198571/761198573 [ 442.432513][T19215] tipc: Failed to remove unknown binding: 66,1,1/0:761198571/761198573 [ 442.591697][T19224] sctp: [Deprecated]: syz.9.2733 (pid 19224) Use of int in max_burst socket option. [ 442.591697][T19224] Use struct sctp_assoc_value instead [ 443.708907][T19261] SELinux: policydb version -957581230 does not match my version range 15-35 [ 443.771356][T19261] SELinux: failed to load policy [ 444.774085][T19277] loop9: detected capacity change from 0 to 1024 [ 445.658361][T19277] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 446.360651][T19279] vxcan1 speed is unknown, defaulting to 1000 [ 446.434176][T19279] lo speed is unknown, defaulting to 1000 [ 446.512432][T19277] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 446.520811][T19277] EXT4-fs (loop9): orphan cleanup on readonly fs [ 446.725398][T19277] __quota_error: 550 callbacks suppressed [ 446.725418][T19277] Quota error (device loop9): v2_read_file_info: Block with free entry 1283 out of range (1, 6). [ 446.741958][T19277] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 446.756902][T19277] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 446.763931][T19277] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2741: Freeing blocks not in datazone - block = 0, count = 4096 [ 446.833930][T19277] EXT4-fs (loop9): 1 orphan inode deleted [ 446.840553][T19277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.887991][T19273] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.2741: iget: bad extended attribute block 6 [ 446.917881][ T29] audit: type=1400 audit(446.838:50016): avc: denied { mount } for pid=19268 comm="syz.9.2741" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 447.058919][T19273] vxcan1 speed is unknown, defaulting to 1000 [ 447.123444][T19273] lo speed is unknown, defaulting to 1000 [ 447.203185][ T29] audit: type=1326 audit(446.938:50017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.226662][ T29] audit: type=1326 audit(446.938:50018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.250226][ T29] audit: type=1326 audit(446.938:50019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.273592][ T29] audit: type=1326 audit(446.938:50020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.297056][ T29] audit: type=1326 audit(446.938:50021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.320665][ T29] audit: type=1326 audit(446.938:50022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.343725][ T29] audit: type=1326 audit(446.938:50023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.367417][ T29] audit: type=1326 audit(446.938:50024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19305 comm="syz.3.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bddd5ebe9 code=0x7ffc0000 [ 447.401344][T19322] netlink: 'syz.3.2743': attribute type 3 has an invalid length. [ 447.418430][T18234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.736440][T19347] __nla_validate_parse: 4 callbacks suppressed [ 447.736461][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2747'. [ 447.753781][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2747'. [ 447.762947][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2747'. [ 448.066659][T19358] netlink: 'syz.9.2744': attribute type 10 has an invalid length. [ 448.074767][T19358] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2744'. [ 448.963398][T19358] batman_adv: batadv0: Adding interface: macvlan0 [ 448.970505][T19358] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.999385][T19358] batman_adv: batadv0: Interface activated: macvlan0 [ 449.018577][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 449.071736][T19381] loop9: detected capacity change from 0 to 512 [ 449.088387][T19381] journal_path: Non-blockdev passed as './bus' [ 449.094770][T19381] EXT4-fs: error: could not find journal device path [ 449.132138][T19381] siw: device registration error -23 [ 449.165751][T19381] loop9: detected capacity change from 0 to 1024 [ 449.196103][T19381] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.225524][T19381] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.301891][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 449.543668][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2760'. [ 449.552762][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2760'. [ 449.584780][T19420] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2760'. [ 449.604491][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2760'. [ 449.884021][T19438] syzkaller0: entered promiscuous mode [ 449.889897][T19438] syzkaller0: entered allmulticast mode [ 449.900184][T19438] IPVS: Error connecting to the multicast addr [ 450.024831][T19443] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37136 sclass=netlink_audit_socket pid=19443 comm=syz.1.2766 [ 450.270334][T19452] vxcan1 speed is unknown, defaulting to 1000 [ 450.429090][T19452] lo speed is unknown, defaulting to 1000 [ 450.691400][T19494] smc: net device bond0 applied user defined pnetid SYZ0 [ 451.727947][ T29] kauditd_printk_skb: 1901 callbacks suppressed [ 451.727962][ T29] audit: type=1326 audit(451.708:51926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dd20dadd9 code=0x7ffc0000 [ 452.090897][ T29] audit: type=1326 audit(451.748:51927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dd2135ba7 code=0x7ffc0000 [ 452.114057][ T29] audit: type=1326 audit(451.748:51928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dd20dadd9 code=0x7ffc0000 [ 452.137246][ T29] audit: type=1326 audit(451.748:51929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dd2135ba7 code=0x7ffc0000 [ 452.160434][ T29] audit: type=1326 audit(451.748:51930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dd20dadd9 code=0x7ffc0000 [ 452.183960][ T29] audit: type=1326 audit(451.748:51931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dd2135ba7 code=0x7ffc0000 [ 452.207390][ T29] audit: type=1326 audit(451.748:51932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dd20dadd9 code=0x7ffc0000 [ 452.230721][ T29] audit: type=1326 audit(451.758:51933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dd2135ba7 code=0x7ffc0000 [ 452.253706][ T29] audit: type=1326 audit(451.758:51934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dd20dadd9 code=0x7ffc0000 [ 452.276954][ T29] audit: type=1326 audit(451.758:51935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19448 comm="syz.1.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dd2135ba7 code=0x7ffc0000 [ 452.503766][T19537] loop9: detected capacity change from 0 to 1024 [ 452.543395][T19537] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 452.573683][T19537] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #3: block 1: comm syz.9.2784: lblock 1 mapped to illegal pblock 1 (length 1) [ 452.590844][T19537] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.2784: Failed to acquire dquot type 0 [ 452.629701][T19537] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.2784: Freeing blocks not in datazone - block = 0, count = 4096 [ 452.701652][T19537] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2784: Invalid inode bitmap blk 0 in block_group 0 [ 452.727558][ T4482] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 452.743497][T19537] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 452.768009][ T4482] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:21: Failed to release dquot type 0 [ 452.780216][T19537] EXT4-fs (loop9): 1 orphan inode deleted [ 452.789680][T19537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.804699][T19537] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 16: comm syz.9.2784: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 452.838232][T18234] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.849795][T19566] __nla_validate_parse: 6 callbacks suppressed [ 452.849812][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 452.864683][T19571] syz_tun: entered allmulticast mode [ 452.957639][T19586] loop9: detected capacity change from 0 to 128 [ 452.970670][T19586] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.2791'. [ 453.062948][T19578] ================================================================== [ 453.071190][T19578] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 453.078365][T19578] [ 453.080797][T19578] write to 0xffff888119603814 of 4 bytes by task 19586 on cpu 1: [ 453.088532][T19578] xas_set_mark+0x12b/0x140 [ 453.093069][T19578] __folio_start_writeback+0x1dd/0x440 [ 453.098577][T19578] mpage_writepages+0xd18/0x1250 [ 453.103558][T19578] fat_writepages+0x24/0x30 [ 453.108196][T19578] do_writepages+0x1c3/0x310 [ 453.112862][T19578] file_write_and_wait_range+0x156/0x2c0 [ 453.118628][T19578] __generic_file_fsync+0x46/0x140 [ 453.123805][T19578] fat_file_fsync+0x49/0x100 [ 453.128434][T19578] vfs_fsync_range+0x10d/0x130 [ 453.133329][T19578] generic_file_write_iter+0x1b8/0x2f0 [ 453.139014][T19578] iter_file_splice_write+0x666/0x9e0 [ 453.144520][T19578] direct_splice_actor+0x153/0x2a0 [ 453.149778][T19578] splice_direct_to_actor+0x30f/0x680 [ 453.155320][T19578] do_splice_direct+0xda/0x150 [ 453.160247][T19578] do_sendfile+0x380/0x650 [ 453.164711][T19578] __x64_sys_sendfile64+0x105/0x150 [ 453.169940][T19578] x64_sys_call+0x2bb0/0x2ff0 [ 453.174729][T19578] do_syscall_64+0xd2/0x200 [ 453.179319][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.185267][T19578] [ 453.187615][T19578] read to 0xffff888119603814 of 4 bytes by task 19578 on cpu 0: [ 453.195265][T19578] xas_find_marked+0x5dc/0x620 [ 453.200151][T19578] find_get_entry+0x5d/0x380 [ 453.204793][T19578] filemap_get_folios_tag+0x92/0x210 [ 453.210230][T19578] writeback_iter+0x4bb/0x820 [ 453.214957][T19578] mpage_writepages+0x87/0x1250 [ 453.219881][T19578] fat_writepages+0x24/0x30 [ 453.224497][T19578] do_writepages+0x1c3/0x310 [ 453.229138][T19578] file_write_and_wait_range+0x156/0x2c0 [ 453.234856][T19578] __generic_file_fsync+0x46/0x140 [ 453.240088][T19578] fat_file_fsync+0x49/0x100 [ 453.244709][T19578] vfs_fsync_range+0x10d/0x130 [ 453.249504][T19578] generic_file_write_iter+0x1b8/0x2f0 [ 453.255027][T19578] iter_file_splice_write+0x666/0x9e0 [ 453.260434][T19578] direct_splice_actor+0x153/0x2a0 [ 453.265604][T19578] splice_direct_to_actor+0x30f/0x680 [ 453.271097][T19578] do_splice_direct+0xda/0x150 [ 453.275972][T19578] do_sendfile+0x380/0x650 [ 453.280451][T19578] __x64_sys_sendfile64+0x105/0x150 [ 453.285876][T19578] x64_sys_call+0x2bb0/0x2ff0 [ 453.290590][T19578] do_syscall_64+0xd2/0x200 [ 453.295146][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.301078][T19578] [ 453.303460][T19578] value changed: 0x0a000021 -> 0x04000021 [ 453.309206][T19578] [ 453.311551][T19578] Reported by Kernel Concurrency Sanitizer on: [ 453.317733][T19578] CPU: 0 UID: 0 PID: 19578 Comm: syz.9.2791 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 453.330445][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.340709][T19578] ================================================================== [ 453.472057][T19585] netlink: 'syz.3.2793': attribute type 3 has an invalid length. [ 453.479875][T19585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2793'. [ 453.496974][T19585] RDS: rds_bind could not find a transport for ::ffff:172.20.20.55, load rds_tcp or rds_rdma? [ 453.716213][T19578] ================================================================== [ 453.724440][T19578] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 453.732475][T19578] [ 453.734822][T19578] write to 0xffff888119603814 of 4 bytes by task 19586 on cpu 1: [ 453.742556][T19578] xas_set_mark+0x12b/0x140 [ 453.747458][T19578] tag_pages_for_writeback+0xc2/0x290 [ 453.752883][T19578] writeback_iter+0x340/0x820 [ 453.757595][T19578] mpage_writepages+0x87/0x1250 [ 453.762523][T19578] fat_writepages+0x24/0x30 [ 453.767151][T19578] do_writepages+0x1c3/0x310 [ 453.771780][T19578] file_write_and_wait_range+0x156/0x2c0 [ 453.777476][T19578] __generic_file_fsync+0x46/0x140 [ 453.782621][T19578] fat_file_fsync+0x49/0x100 [ 453.787314][T19578] vfs_fsync_range+0x10d/0x130 [ 453.792114][T19578] generic_file_write_iter+0x1b8/0x2f0 [ 453.797777][T19578] iter_file_splice_write+0x666/0x9e0 [ 453.803207][T19578] direct_splice_actor+0x153/0x2a0 [ 453.808428][T19578] splice_direct_to_actor+0x30f/0x680 [ 453.813832][T19578] do_splice_direct+0xda/0x150 [ 453.818626][T19578] do_sendfile+0x380/0x650 [ 453.823082][T19578] __x64_sys_sendfile64+0x105/0x150 [ 453.828408][T19578] x64_sys_call+0x2bb0/0x2ff0 [ 453.833381][T19578] do_syscall_64+0xd2/0x200 [ 453.838009][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.844020][T19578] [ 453.846389][T19578] read to 0xffff888119603814 of 4 bytes by task 19578 on cpu 0: [ 453.854442][T19578] file_write_and_wait_range+0x10e/0x2c0 [ 453.860225][T19578] __generic_file_fsync+0x46/0x140 [ 453.865461][T19578] fat_file_fsync+0x49/0x100 [ 453.870186][T19578] vfs_fsync_range+0x10d/0x130 [ 453.874986][T19578] generic_file_write_iter+0x1b8/0x2f0 [ 453.880572][T19578] iter_file_splice_write+0x666/0x9e0 [ 453.885977][T19578] direct_splice_actor+0x153/0x2a0 [ 453.891120][T19578] splice_direct_to_actor+0x30f/0x680 [ 453.896704][T19578] do_splice_direct+0xda/0x150 [ 453.901591][T19578] do_sendfile+0x380/0x650 [ 453.906329][T19578] __x64_sys_sendfile64+0x105/0x150 [ 453.911655][T19578] x64_sys_call+0x2bb0/0x2ff0 [ 453.916354][T19578] do_syscall_64+0xd2/0x200 [ 453.920885][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.926824][T19578] [ 453.929162][T19578] value changed: 0x02000021 -> 0x04000021 [ 453.934994][T19578] [ 453.937339][T19578] Reported by Kernel Concurrency Sanitizer on: [ 453.943696][T19578] CPU: 0 UID: 0 PID: 19578 Comm: syz.9.2791 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 453.956484][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.966663][T19578] ==================================================================